CSAIChaptersEventsBlog
Join the June 2 webinar to learn how AI-driven threats are reshaping enterprise security and what teams can do to stay ahead. Register now →

STAR Registry Listing for

Mendje

Mendje

Mendje is a mobile-first mental health platform delivered as Software-as-a-Service to end users across 9 countries, with a focus on Albanian-speaking communities.

What the service does

  • Connects users with licensed psychologists for telemental health sessions
  • Provides an AI-assisted self-care chatbot for between-session support
  • Offers in-app journaling, mood tracking, and culturally adapted psychoeducational content
  • Manages secure user accounts, scheduling, and payments

Service architecture

  • Client: Native iOS and Android apps (Flutter), bundle ID com.mendje.app
  • Backend: Firebase (Authentication, Firestore, Cloud Functions, Cloud Messaging) in Google Cloud europe-west region
  • AI: Anthropic Claude API for conversational self-care features (transferred under EU Standard Contractual Clauses)
  • Payments: Stripe (Mendje systems never receive card data)
  • Email: Resend for transactional messaging; Zoho Mail for support correspondence

Data processed

  • User account and authentication data
  • Mental health journal entries and mood data (GDPR Article 9 special category)
  • AI chatbot conversation history
  • Payment status metadata (Stripe holds full PCI scope)

Service customer responsibilities

End users are responsible for securing their device, using a strong account password, and enabling MFA where offered.

Availability

Targets: 99.5% monthly availability; RTO 4 hours; RPO 1 hour.

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about Mendje
Listed Since: 05/25/2026

STAR Level 1

Self-Assessment & Partner-Provided

Cloud Controls Matrix

CAIQ Self-assessment v4.1.0

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

Created or renewed about 13 hours ago, on May 25, 2026.