Vendor Policy Change

Vendor policy changes refer to updates or modifications that service providers, technology partners, or third-party suppliers make to their terms of service, data handling practices, security requirements, or compliance standards. These changes directly impact organizations relying on external vendors and can create new obligations, risks, or operational adjustments that must be tracked and incorporated into enterprise governance frameworks. Monitoring vendor policy changes is critical for maintaining compliance, managing contractual obligations, and ensuring that third-party relationships continue to meet an organization's risk tolerance and regulatory requirements.

1 item

Corporate PolicyEU2026-09-02

Mistral Default Opt-In for Training Data Creates GDPR Exposure on Non-Enterprise Tiers

Mistral AI has updated its data policy so that user conversations and uploaded documents are used for model training by default on its Vibe consumer and standard API tiers. Enterprise customers on the Vibe Enterprise plan are opted out by default, with admin-level controls to manage opt-in. The split configuration requirement between Vibe and API surfaces creates separate compliance exposure that must be managed independently.

Mistral AI training data opt-out GDPR data governance vendor policy change enterprise AI policy consent