MentalthPersonal data protection
Reference framework for the processing of personal data.
Compliance and security
Trust center
What your legal and technology teams need to know, in a few lines: the legal framework, and what happens to each piece of data from the moment the person starts until your institution acts.
- Consent before starting
- Health data treated as sensitive data
- Your institution never sees the conversation
01
Legal framework
The reference regulations and Mentalth’s role in relation to them.
Mental health
Mental health law: reference framework for mental health care.
Código Dorado
Establishes the National Strategy for Comprehensive Health Care of people with suicidal behavior and creates the Código Dorado (art. 5).
Mentalth’s role: technology providerResolution 1644 of 2026, art. 3.27.
02
What happens to each piece of data
Follow the information from the person to your institution. Choose a point to see its legal basis.
The person learns their rights and gives consent
Before starting. Nothing is screened without that step.
Legal basis
Ley 1581 de 2012For minors, with the consent of their legal representative and under the best interests of the child.
Health data is treated as sensitive data
With the person’s explicit authorization.
Legal basis
Ley 1581 de 2012Conversation data is processed by external language-model providers
We say so openly, without naming providers.
Mentalth’s role
Technology provider · Res. 1644 de 2026, art. 3.27The conversation yields a result, not a text
Risk level, associated factors and referral.
What is generated
Risk levelFactorsReferralYour institution sees only results and alerts
The text of conversations with Ángel never reaches your institution.
What your institution sees
Prioritized results and alerts
The text of the conversation with Ángel
Security documentation
Available on request.