Mistral Data Lifecycle Governance

Overview

Map every data class through provider transit, app storage, derived artifacts, state, retention, and deletion. Never infer privacy from one endpoint or account feature.

Prerequisites

• A data inventory, lawful purpose, tenant boundary, retention requirements, and privacy owner.
• Current endpoint/account evidence including ZDR applicability.
• Deletion, subject-request, incident, and derived-data policies.

Current Contract

ZDR covers supported stateless paid-plan calls but excludes stateful products/APIs including Agents, Batch processing files, Conversations, Libraries, and /v1/files. Each workload needs review.

Authentication

Authorize data independently of the provider key. Never put credentials or customer content in logs, receipts, or diagnostics.