CSAIChaptersEventsBlog
Join the June 2 webinar to learn how AI-driven threats are reshaping enterprise security and what teams can do to stay ahead. Register now →

CSA STAR Registry

Security, Trust, Assurance, and Risk Registry

Listings for Mendje shpk

Listings for Mendje shpk

Mendje is a digital mental health platform serving Albanian-speaking communities across Europe and the diaspora. Service Mobile-first telemental health platform (iOS, Android) connecting users with a network of 40+ licensed psychologists across 9 countries. Features include secure sessions with psychologists, AI-assisted self-care chatbot, in-app journaling, mood tracking, and culturally adapted psychoeducational content. Mission Make culturally relevant mental health care accessible to Albanian-speaking communities worldwide, with strict commitment to privacy, clinical quality, and data protection. Security & Compliance Data protection: GDPR-compliant; Article 9 special-category data safeguards; DPIA maintained Data residency: EU primary processing region (Firebase europe-west) Encryption: TLS 1.3 in transit; AES-256 at rest Authentication: Firebase Auth with MFA; admin MFA enforced across all systems Monitoring: GCP Cloud Audit Logs; Firebase Crashlytics; Dependabot Sub-processors Infrastructure security inherits from certified providers: - Google Cloud / Firebase — ISO 27001, 27017, 27018, SOC 1/2/3, BSI C5 - Stripe — PCI DSS Level 1, SOC 1/2 Type II, ISO 27001 - Anthropic (Claude AI) — SOC 2 Type II, ISO 27001 - Resend — SOC 2 Type II All sub-processors operate under Data Processing Agreements with EU Standard Contractual Clauses where applicable.

Mendje

Mendje is a mobile-first mental health platform delivered as Software-as-a-Service to end users across 9 countries, with a focus on Albanian-speaking communi...

Listed Since: 2026-05-25

CAIQ
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).