menchipatient concierge

Menchi Sub-processors

Menchi uses a small number of service providers to answer a call, understand it, and store what was said. This page sets out where they operate, what they receive, and how they are governed.

Last updated: 2026-10-18

What you can rely on

  • Calls are never recorded. No audio is stored anywhere, by us or by any provider. What exists after a call is a written transcript.
  • Everything Menchi stores is in Canada. Transcripts, bookings and audit logs are held in Montréal, encrypted at rest. The service that runs the conversation also runs in Canada, in Toronto.
  • Some processing happens in the United States while a call is in progress. Speech and conversation text pass through US-based providers during the call itself. No audio is retained by anyone. The provider that generates Menchi’s replies deletes the text it receives within 30 days; a zero-retention agreement is not in place, and we do not claim one.
  • No provider trains AI models on this data. That is a contractual prohibition, not a preference.
  • Every provider is governed by a data protection agreement, with two exceptions. One provider pre-signs its agreement and Zalto has not yet countersigned. Another provider’s agreement applies, by its own terms, only to its paid plans, and Zalto is not yet on one, so no agreement covers that processing today. We would rather say both here than let a clinic discover them during review.

The named list

We do not publish which companies these are. The complete list, naming every provider with its role, country, what it receives and the status of its data protection agreement, is disclosed to a Clinic and its counsel as part of the Information Manager Agreement. That is where it belongs, because that is where it binds us and where a Clinic can hold us to it.

Cross-border processing

Menchi is operated by Zalto Inc., a Canadian corporation in Mississauga, Ontario. We acknowledge that some PHI processing occurs in the United States while a call is in progress, and each US-based sub-processor operates under a data protection addendum, subject to the exceptions noted above.

For more on how PHIPA cross-border requirements are met, see our Privacy Policy at trymenchi.com/privacy.

Notification of changes

Material changes (a new sub-processor, a change in country of processing, or the removal of an existing one) are communicated to Clinic customers at least 30 days before they take effect. Clinic customers may object to a new sub-processor on reasonable grounds; objections that cannot be resolved are grounds for termination of the Clinic’s Information Manager Agreement.

Questions

Email menchi@zalto.live with any question about how patient information is handled.