Mistral for customer inference
Mistral has confirmed zero data retention for our stateless API calls. Customer AI remains paused until the remaining provider and customer checks are complete.
Security & Sovereignty
Verified work and remaining limits.
The applications are deployed; AI calls are currently paused. Data processing and the quality of complete answers need further checks before use with company documents.
Operational status
Hosting and recovery.
Our applications run on Hetzner in Germany. TLS and recovery of encrypted backups from separate EU storage have been checked. This does not establish a complete rebuild on a replacement server.
- Hosting
- Hetzner · Germany
- Application AI
- Paused
- Backups
- Encrypted · recovery checked
- Access
- Tenant and role scoped
Before a pilot
AI inference in EU and EFTA countries.
We plan to use Mistral’s regional endpoint for inference in EU and EFTA countries. EFTA means Iceland, Liechtenstein, Norway and Switzerland. Hosting remains in Germany. Before customer use, we agree and check the provider terms, data use, retention and access rights.
Separate model experiments
In separate model experiments, we compare models using fictional cases. This does not establish suitability for your documents or approve processing of customer data.
The EU and EFTA scope describes model inference, not every account, billing or operational metadata flow. Mistral’s clarification of those flows and the applicable terms is still pending. Answer-quality checks and human review remain separate.
In practice
Safeguards and their limits.
Tenants and roles
The application scopes access through tenant and role rules. We will check intended access and offboarding together before customer use.
Sources and approval
Saved evidence, review states and decisions support human review. A source reference or score does not guarantee a correct answer.
Transport and backups
TLS connections and encrypted offsite backups have been checked. Encryption of the running server volumes has not yet been verified.
Recovery
Database and image archives have been read back and decrypted from Cloudflare R2 in the EU. Starting the complete application on a replacement server remains unproven.
As of 19 September 2026, we are validating the product and have no customers yet. Our own ISO 27001 certification, complete-answer qualification and approval of the customer model route remain open.
Next step
Plan a suitable pilot together.
In an initial call, we discuss your workflow. Company documents follow only after the agreed data-handling and quality checks.