Mistral AI deployment options and partner-served terms describes where a commercial customer may run Mistral AI products and which contract governs each case. The Commercial Terms of Service recognise three kinds of infrastructure: Mistral AI’s own, infrastructure the customer owns or controls, and infrastructure owned by a third-party partner authorized to resell or market Mistral AI products[1]. Products obtained through cloud providers and resellers are also covered by a separate set of Partner-served deployment terms[3]. The licenses for open-weight models (Apache 2.0, modified MIT, Mistral Research License, Mistral Non-Production License) and token pricing are covered in Mistral AI licensing.
Three kinds of infrastructure
Section 1 of the Commercial Terms of Service sets out which documents apply to each deployment type[1]:
| Deployment | Who authorizes it | Documents that apply | Catalog rule |
|---|---|---|---|
| Mistral AI Infrastructure (any use not on customer or partner infrastructure) | Acceptance of the terms or an Order Form | Commercial Terms; Additional Terms for Use on Mistral AI Infrastructure | End User Accounts: seat limits, not shared outside the organization |
| Customer Infrastructure (“private servers or private cloud”) | Mistral AI, expressly, in an Order Form | Commercial Terms; the Order Form; Additional Terms for Use on Customer Infrastructure | Customer Infrastructure deployments must be authorized in an Order Form |
| Partner Infrastructure (owned by an authorized reseller or marketing partner) | The partner, in its ordering documentation | Partner terms; Commercial Terms and Partner-served deployment terms, unless the partner terms say otherwise | Partner-served deployments: destroy and certify copies within seven days of termination |
The customer is solely responsible for activity under its Customer Account, in connection with Customer Infrastructure and in connection with its own offerings that use Mistral AI products[1].
Customer Infrastructure
Use on Customer Infrastructure is governed by the Specific Product Terms for Use on Customer IT Infrastructure, which supplement the Order Form[2]. Only some sections of the Mistral AI Infrastructure terms carry over: media customers, sharing conversation links, third-party connectors, third-party technologies, third-party content (where a feature returns it) and audio products. The document states that “provisions not expressly incorporated do not apply” to use on Customer Infrastructure[2]. The account and seat provisions of the Mistral AI Infrastructure terms are among those not incorporated.
The customer must “immediately notify” Mistral AI at its legal address of any suspected or actual unauthorized disclosure of, or access to, the products or their weights. The notice must give the time of the incident, the product affected, its nature and impact, and the measures taken or proposed. The customer must also take steps Mistral AI reasonably requests, at its own expense, to limit the damage[2].
The Mistral AI Usage Policy “does not apply to Mistral AI Products deployed on a customer’s infrastructure, on the infrastructure of our partners, or to our open-source AI models and products”[4]. Catalog rule: Usage Policy does not apply to customer-infrastructure deployments or open-source models. The use restrictions in the Commercial Terms still apply[1].
Partner-served deployments
The Partner-served deployment terms (effective 2026-05-28) govern Mistral AI products, including models, provided through two kinds of partner[3]:
- Cloud Providers, on the Cloud Provider’s infrastructure or on the customer’s own infrastructure; and
- Resellers, on the customer’s own infrastructure.
Accepting them creates an agreement directly between the customer and Mistral AI, alongside the customer’s contract with the partner (the “Partner Terms”)[3].
Roles
| Party | Responsibility under the terms |
|---|---|
| Mistral AI | Provides the products on the infrastructure in accordance with law and the terms |
| Partner (any) | Bills and collects fees for the products |
| Cloud Provider | Makes the products available, provides its infrastructure, and is the customer’s “sole point of contact” for requests about the products |
| Customer | Uses the products in accordance with law, the terms and the Partner Terms |
Source: Partner-served deployment terms Section 1 and Section 2.3[3]. Support requests for products on Partner Infrastructure go to the partner under the Partner Terms[3].
License grant and restrictions
Mistral AI grants the customer and its authorized users a non-exclusive right to access and use the products on the infrastructure. The grant covers integrating the products into the customer’s own offerings and using them for internal business purposes, and extends to any Customized Mistral AI Product[3]. Mistral AI keeps ownership of the products and of modifications to them, except Customer Owned Developments, which are the customer’s own customizations made as the terms authorize[3].
The restrictions include reverse engineering or “model extraction or stealing attacks”, bypassing security or moderation mechanisms, penetration testing, extracting content other than Outputs, and distributing or marketing the products as a standalone product or acting as a distributor without Mistral AI’s prior written consent[3].
Specific Access to model weights
“Specific Access” is any product where the customer has access to the weights. Where a subscription includes it, the customer must protect the products and their weights with confidentiality and security measures at least as stringent as those it uses for its own confidential information, and must immediately report any unauthorized disclosure or access as a Security Incident with the same four details required on Customer Infrastructure. Mistral AI applies security measures “such as watermarking” to each model provided with Specific Access so the model can be traced. The terms state that these measures do not let Mistral AI access the specific copy or the customer’s data[3]. Catalog rule: Specific Access to model weights: confidentiality, watermarking and incident notice.
Commentary. Because weights delivered under Specific Access are watermarked, a copy found outside the licensed environment can be traced to the subscription it came from. An inventory of where weight files are stored, and who can reach them, is the main control for this clause.
Data
Under the partner-served terms, Mistral AI states that it does not access or use the customer’s Input or Output unless the customer includes it in a support request that the partner shares, and that it does not use that data to train its models. The customer keeps ownership of Input and owns Output, which excludes model weights[3].
Discontinuation
Mistral AI may discontinue products but gives at least six months’ notice. During the notice period the product is not available to new customers, and the customer is responsible for keeping its contact details current to receive the notice[3]. Catalog rule: Partner-served deployments: six months’ notice before a product is discontinued.
Term, termination and destruction
The partner-served terms run from first use or acceptance until terminated. Mistral AI may suspend or terminate access for breach, non-payment, legal compliance or risk of harm, and either party may terminate for a material breach not cured within 30 days of written notice, subject to the Partner Terms[3]. The terms end automatically when either Mistral AI’s agreement with the partner or the customer’s agreement with the partner ends[3].
On expiry or termination the customer must stop using the products, including customized ones, and within seven days destroy, and certify the destruction of, all copies on its own infrastructure together with any Mistral AI Confidential Information there[3]. Catalog rule: Partner-served deployments: destroy and certify copies within seven days of termination.
Audit
Section 10 of the partner-served terms applies only when the products run on the customer’s infrastructure and were bought through a Reseller[3]:
| Element | Term |
|---|---|
| Scope | Compliance with the license grant (Section 2.1) and the effects-of-termination clause (Section 7.5) |
| Period | During the term and for one year after |
| Frequency and notice | Up to one audit a year, on 30 business days’ notice, at Mistral AI’s expense |
| Auditor | A third party selected by Mistral AI, free of competitive interests and bound by professional confidentiality |
| Customer duties | Provide relevant documents, give access to premises and computer systems, cooperate in good faith |
| Findings of unauthorized use | Mistral AI may instruct the Reseller to charge the fees that should have been paid, or require destruction of unauthorized copies |
| Audit costs | Borne by the customer when findings indicate a breach |
Catalog rule: Partner-served deployments via a Reseller: one audit a year on 30 business days’ notice.
The Commercial Terms of Service contain no comparable audit section for Mistral AI Infrastructure. Mistral AI instead monitors use of products on its own infrastructure through automated means under the Usage Policy[2].
Assignment and governing law
Under the partner-served terms the customer may not assign or transfer any rights or obligations, and any attempt is void. Mistral AI may assign to an affiliate, subsidiary or successor[3]. French law and the Paris courts govern disputes, except for customers in the United States, where California law and the courts of Santa Clara County apply[3].
Out of scope
- Partner Terms: the cloud marketplace or reseller agreement, including partner pricing and support levels.
- Order Forms: negotiated terms for Customer Infrastructure deployments, which are not published.
- Open-weight model licenses (Apache 2.0, modified MIT, MRL, MNPL): see Mistral AI licensing.
- Accounts, fees and data use on Mistral AI Infrastructure: see Mistral AI commercial terms, accounts and data.
- Data Processing Addendum and the EU AI Act responsibilities in the Additional Terms.