STAR Registry Listing for
Mendje
Mendje
Mendje is a mobile-first mental health platform delivered as Software-as-a-Service to end users across 9 countries, with a focus on Albanian-speaking communities.
What the service does
- Connects users with licensed psychologists for telemental health sessions
- Provides an AI-assisted self-care chatbot for between-session support
- Offers in-app journaling, mood tracking, and culturally adapted psychoeducational content
- Manages secure user accounts, scheduling, and payments
Service architecture
- Client: Native iOS and Android apps (Flutter), bundle ID com.mendje.app
- Backend: Firebase (Authentication, Firestore, Cloud Functions, Cloud Messaging) in Google Cloud europe-west region
- AI: Anthropic Claude API for conversational self-care features (transferred under EU Standard Contractual Clauses)
- Payments: Stripe (Mendje systems never receive card data)
- Email: Resend for transactional messaging; Zoho Mail for support correspondence
Data processed
- User account and authentication data
- Mental health journal entries and mood data (GDPR Article 9 special category)
- AI chatbot conversation history
- Payment status metadata (Stripe holds full PCI scope)
Service customer responsibilities
End users are responsible for securing their device, using a strong account password, and enabling MFA where offered.
Availability
Targets: 99.5% monthly availability; RTO 4 hours; RPO 1 hour.

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about Mendje
Listed Since: 05/25/2026
Listed Since: 05/25/2026
STAR Level 1
Self-Assessment & Partner-Provided
Cloud Controls Matrix

CAIQ Self-assessment v4.1.0
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Created or renewed about 12 hours ago, on May 25, 2026.