Contact
Assess · Mistral AI

Can you own it?

Ownership levelPartialnone·limited·partial·substantial·fullAnalytical input B · 73.2/100

This page is a projection of the one entry record, the Use & modify and Transparency factors that Assess covers. The full verdict is set by all four factors together, floor-weighted so the weakest caps the whole.

Which domain expands which factor
  • AssessUse & modify + Transparency
  • ImplementData control + Doesn't fail you
  • UseDoesn't fail you
  • SupportTransparency

Intended & out-of-scope use

Mistral's open-weight family is a general-purpose set of assistant, coding and multilingual text models, spanning the dense Mistral 7B, the Mixtral 8x7B / 8x22B mixture-of-experts models, the 128K-context Mistral Nemo (12B) and the 24B Mistral Small 3.x, plus specialist variants (Codestral for code, Mathstral, Devstral, Pixtral for vision). Its realistic differentiator is being the leading European open-weight family: EU-domiciled, strong multilingual coverage, and the cleanest GPAI regulatory posture in this class.

For adoption, deploy the instruct (safety-tuned) variant, not the base checkpoint, and - uniquely for this family - confirm the specific model's licence before any commercial deployment (the Apache flagship models are unconditional; the MRL research-only models are not). Mistral is not positioned as a safety-critical model; high-stakes, autonomous or regulated decision-making is out of scope without the external control stack described in the Implement domain.

Known limitations, bias & failure modes

  • Licence split is the headline risk. A team that assumes "Mistral = Apache" can trip over the research-only MRL models (Ministral 8B, Mistral Large, Pixtral Large) and the originally non-production MNPL Codestral. Commercial use of those requires a negotiated licence.
  • Lighter safety tuning. Instruct alignment withstands casual jailbreaks, but coverage is historically lighter than the largest US labs, and the companion classifier (the Moderation API) is a hosted service rather than a broadly-shipped open guard-weight.
  • Closed training data and code. Unlike a fully-open family, you cannot inspect or reproduce the training pipeline, so bias sources must be reasoned about from an opaque artifact.
  • Standard hallucination and prompt-injection profile for the class; treat retrieved/tool content as untrusted.

The offsetting advantage is regulatory: an EU-domiciled, Code-of-Practice-signatory provider with a genuine OSI licence on its flagship models.

Openness tier & components

Mistral earns open_weights honestly. The flagship general-purpose models ship downloadable Apache-2.0 weights - an OSI-approved permissive licence, not a click-through community gate - and documentation is good. But training data and training code are closed (no reproduction path, unlike a fully-open family), evaluation is only partial, and the licence component is split: a meaningful subset of the family is research-only MRL. That mix is why Dimension 1 scores 4, above a gated-open family but below the fully-open exemplars.

License terms & permitted use

There is no single licence - read the model card:

  • Apache-2.0 (OSI-approved, unconditional commercial use): Mistral 7B, Mixtral 8x7B / 8x22B, Mistral Nemo, Mistral Small 3.x, Magistral/Devstral Small. You may use, modify, redistribute and commercialize derivatives subject only to standard attribution/notice terms. Mistral has publicly recommitted to Apache-2.0 for general-purpose models with Mistral Small 3.
  • Mistral Research Licence (MRL-0.1), research-only: Ministral 8B, Mistral Large, Pixtral Large. Any commercial deployment requires a separately negotiated licence from Mistral.
  • MNPL (non-production): originally Codestral.

This split is a load-bearing input to both the openness (4) and legal (4) scores - the Apache core is genuinely clean, but the family is not uniformly open.

Supply-chain & provenance

Weights are distributed from the verified mistralai org on Hugging Face in safetensors (no pickle requirement) with per-file checksums. The checkpoint trust checklist scores about 6/8; the two missing controls are cryptographic weight signing (Sigstore/model-signing) and SLSA build attestation, which is why provenance is a 4, not a 5. No malicious-checkpoint incident is on record for the canonical org. Community GGUF/AWQ/FP8 quants and hosted cloud endpoints (Bedrock, Azure AI, Vertex, Together, OpenRouter) are separate artifacts - pin the exact mistralai revision and verify checksums on download.

EU AI Act posture

This is Mistral's standout. The open-weight family is a GPAI model set that sits well under the 10²⁵-FLOPs systemic-risk threshold (the Apache releases are ≤24B dense or Mixtral MoE; only the 123B Mistral Large 2 approaches it, and that is a research-only MRL model, not an Apache release), so no Article 55 regime applies. The flagship Apache-2.0 models plausibly qualify for the Article 53 open-source exemption from the Annex XI/XII technical-documentation duties; the research-only MRL models, carrying a field-of-use restriction, do not. Two further facts make Mistral the most EU-AI-Act-friendly non-US family here: it is EU-domiciled (Paris), and it was an early signatory of the EU GPAI Code of Practice - with no EU field-of-use ban of the kind that affects some competitors. The surviving copyright-policy and training-content-summary obligations are only partially met, because Mistral does not publish its training corpus. A fine-tuner placing a derivative on the EU market may become a provider for that derivative.

Benchmarks & evaluation

OneHill did not run its own benchmarks this session; the picture below is aggregated from independent public leaderboards and third-party coverage (ev-leaderboard, ev-wiki). Mistral models are competitive-to-strong within each size class: Mistral 7B and Mixtral were class-leading at release, and Mistral Small 3.x remains strong for a 24B. Mistral is consistently judged the leading European open-weight family. Treat published scores as third-party/in-class, not as an OneHill-verified claim of category leadership - performance is capped at 4 for exactly that reason.

How this scores

The ownership factors this domain covers, drawn from the one entry record.

1

Use and modify freelyCan you run, modify and adapt it with no gate and no field-of-use trap?

Moderate

The Apache-2.0 flagship models (Mistral 7B, Mixtral, Nemo, Small 3.x) can be run, modified, redistributed and used commercially with no gate - but Ministral 8B, Mistral Large and Pixtral Large are research-only MRL, and Codestral is non-production MNPL. Because the family is licence-split, you cannot treat the whole line as freely usable without checking each model, so use-and-modify is moderate rather than strong.

How this scores (AOI sub-dimensions)
Openness3/5how much is released - weights, data, code, licence - and how freelyOpen-weights tier: the flagship general-purpose models are downloadable under permissive OSI-approved Apache-2.0 - a genuinely open licence, unlike a click-through community gate - and documentation is good.
Legal4/5how permissive and clean the licence is for real commercial useA strong legal posture for the Apache-2.0 flagship models: OSI-approved, unconditional commercial use, EU-domiciled and accountable publisher, and an early signatory of the EU GPAI Code of Practice with no EU field-of-use ban.
2

TransparencyDo you know what it is: weights, training, behaviour, and legible terms?

Moderate

You can download and inspect the safetensors weights and read good model cards, but training data and training code are closed - you can see the model, not how it was made.

How this scores (AOI sub-dimensions)
Provenance4/5how well we can trace and verify what went into the modelVerified mistralai org on Hugging Face, safetensors-only distribution with per-file checksums, a clear canonical source and no malicious-checkpoint incident on record (checklist ~6/8).
Governance4/5how accountable and well-documented the publisher isReputable, legally accountable EU publisher with a predictable, dated release cadence, published model cards, a moderation offering and - distinctively - an EU GPAI Code of Practice signature.
What this means for adoptionYou own the Apache-licensed flagship models outright: self-host them and the model and your data are yours to run, modify and keep. Overall ownership is partial, not substantial, for one concrete reason - the family is licence-split, so a meaningful subset (Ministral 8B, Mistral Large and Pixtral Large are research-only MRL; Codestral is non-production MNPL) needs a separately negotiated commercial licence, and you cannot treat the line as uniformly free without checking each model. Training is also not transparent (data and code are closed). If you use Mistral's hosted API instead of self-hosting, turn off training and consider Zero Data Retention.

Sources

The same evidence records as the entry sheet. Read means the text was verified; unverified means it is known to exist but not yet read.

Documentationread2026-07-25
Mistral's model-weights documentation page, read verbatim, assigns licences per model: "Mistral 7B, Mixtral 8x7B/8x22B, Codestral Mamba, Mathstral, Mistral Nemo, Pixtral 12B, Mistral Small, Magistral Small and Devstral Small are under Apache 2 License"; "Codestral is under Mistral AI Non-Production (MNPL) License"; "Ministral 8B, Mistral Large, and Pixtral Large are under Mistral Research License."
Model cardunverified2026-07-25
Mistral open-weight checkpoints are hosted on the verified mistralai organisation on Hugging Face in safetensors with per-file checksums.
Vendor announcementunverified2026-07-25
Mistral Small 3 (24B) is released under Apache-2.0 as Mistral recommits to Apache for general-purpose models and moves away from MRL; it offers a 128K context window, tool use and structured output.
Licenceread2026-07-25
The Mistral Research Licence (MRL-0.1), read verbatim, permits use "solely for (a) personal, scientific or academic research, and (b) for non-profit and non-commercial purposes" - excluding revenue activity and SaaS distribution, under France/Paris jurisdiction; it applies to Ministral 8B, Mistral Large and Pixtral Large.
Licenceread2026-07-25
The Mistral AI Non-Production Licence (MNPL-0.1), read verbatim, restricts use: "You shall only use the Mistral Models and Derivatives for testing, research, Personal, or evaluation purposes in Non-Production Environments" - no commercial supply "including...
Vendor announcementunverified2026-07-25
Mistral Nemo (12B) is a 128K-context model released under Apache-2.0 in collaboration with NVIDIA, using the Tekken tokenizer.
Third-party analysisunverified2026-07-25
Mistral AI is a Paris-based EU company and was among the first signatories of the EU General-Purpose AI Code of Practice in 2025.
Vendor announcementunverified2026-07-25
Mistral offers a hosted Moderation API - a fine-tuned Ministral 8B classifier spanning multiple harm categories and 11 languages - plus system-level guardrailing guidance for downstream deployments.
Documentationunverified2026-07-25
Mistral documents its instruct tokenization and chat templates: mistral-common is the ground truth, newer models use the Tekken tokenizer, and the Hugging Face chat template matches mistral-common output.
Documentationunverified2026-07-25
mistral-inference is Mistral's official inference library; the models also load on vLLM, llama.cpp, Ollama, TGI and transformers.
Third-party analysisunverified2026-07-25
Mistral models are competitive-to-strong within their size classes on independent public leaderboards.
Third-party analysisunverified2026-07-25
Mistral AI is a France-based lab whose open-weight lineage (Mistral 7B, Mixtral, Nemo, Mistral Small, specialist variants) is broadly adopted, with mixed Apache-2.0 and research-only licensing and wide ecosystem/cloud availability.
Privacy Policyread2026-07-25
Mistral's Privacy Policy: by default data is hosted in the EU (servers in the EU), with a US API endpoint option that hosts data in the US; non-EU processors are covered by GDPR Article 46 Standard Contractual Clauses.
Documentationread2026-07-25
Mistral help centre: input and output data are used by default to train Mistral's models unless you opt out (via the data-sharing / 'allow your interactions to be used to train our models' control); training does not apply to Team and Enterprise plans.
Documentationread2026-07-25
Mistral help centre: for the API, input and output are kept for the period needed to generate the output and then for thirty (30) rolling days; for Le Chat, kept until you delete the conversation or your account.
Documentationread2026-07-25
Mistral help centre: Zero Data Retention (ZDR) can be activated for eligible accounts.
Data Processing Addendumread2026-07-25
Mistral's Data Processing Addendum (DPA), read verbatim, uses SCCs Module 4 (Processor-to-Controller) for transfers under French governing law (Sec 8), lists sub-processors on the Trust Centre with a 10-day objection window (Sec 7), and provides that data "will no longer be accessible upon the expiry of a thirty (30) days period following the termination" (Sec 10).