World class cloud. Careful AI.
MendAI is built on Amazon Web Services with our AWS partner Cloudvisor. We pair best-of-breed cloud technology with carefully constrained AI, so that the most private thing a person writes is handled by infrastructure that deserves it.
We did not build a data centre. We chose the best one.
A small team should spend its effort on the product and the care around it. Everything underneath is rented from the people who do it best.
Built on AWS
MendAI runs entirely on Amazon Web Services — the cloud that healthcare, finance and public services around the world already depend on. We build on its managed services rather than running machinery of our own.
AI under constraint
Diary's AI runs on modern language models inside our AWS environment. It has one job — to reflect and ask a single open question — and it is built so that it cannot quietly become something else.
Private by design
Encrypted in transit and at rest, with access limited to the people and systems that need it. The consent boundary is enforced by the system itself, not left to policy.
Cutting-edge models, kept on a short lead.
Diary's AI runs on Amazon Bedrock, AWS's service for running large language models. That means what a person writes is processed inside our AWS environment, under the same protections as the rest of their data.
Bedrock offers models from several makers, so we can adopt a better model when one arrives without rebuilding the product or moving anyone's data. What does not change is the AI's brief: reflect, ask one open question, hand the thinking back.
- Runs on Amazon Bedrock, inside our AWS environment
- Uses the model best suited to the job, and can change it without moving your data
- Treats what a person writes as their words — never as instructions to follow
- Ships the model, its settings and its instructions together as one reviewed release
- Uses what a person writes to train AI models
- Sends diary text to a consumer AI service
- Advises, diagnoses, or grades what was written
- Predicts how someone will do, or scores risk
Built with Cloudvisor.
Cloudvisor is an AWS partner that works with startups. They are our partner for building and running MendAI on AWS.
Working with a specialist means our architecture is held to AWS's own best practice by people who see many systems, not just ours — and that we have experienced help on hand as the product grows.
Cloud
Amazon Web Services
The infrastructure, the data services and the AI platform MendAI runs on.
Partner
Cloudvisor
Our AWS partner, alongside us on architecture and operations.
Security is the way the system is put together.
Not a layer added at the end. These are the practices every part of MendAI is built to.
Managed, not hand-built
We use AWS-managed services, so the underlying infrastructure is patched, scaled and kept available by AWS — not by a server we forgot about.
Defined as code
Every environment is described in code and reviewed before it changes. What runs is what was approved, and it can be rebuilt the same way each time.
Encrypted throughout
Data is encrypted in transit and at rest, with encryption keys that we manage and that rotate automatically.
Least privilege
Each part of the system can reach only what it needs to do its job, and nothing more. The same rule applies to our own team.
Recoverable
Data is backed up continuously, so it can be restored to an earlier point if something goes wrong.
Observed
Errors and slowdowns raise an alert and are traced when they happen — not when someone reports them.
One build, three ways to run it.
MendAI is built to be deployed the same way each time. A facility or programme can use the service we operate in an EU region, a dedicated instance in a named EU region, or a deployment into infrastructure it controls.
Where a programme's data lives is written into its agreement, not inferred. The deployment options are described on the Platform page, and how we handle personal data is set out in Data Protection.
AWS's infrastructure is independently audited against recognised security standards. That describes AWS — it is not a certification held by MendAI, and we do not present it as one.
Our data handling is GDPR-aligned and HIPAA-aligned. We say “aligned” because that is what is true today.
This page describes how we build, not every detail of what we built. Publishing a map of a system that holds what people write in private would serve the wrong reader.
Need the detail? Ask us.
If you are evaluating MendAI for a facility or programme, we share architecture and security detail under a confidentiality agreement, and we are glad to work through your security questionnaire with you.
Get in touch