Security Software
Established in 2017, Mente has taken a considered and responsible approach to data protection and system security. Our platform is designed to support sensitive workplace information, with security built in from the start.
We operate in accordance with UK data protection standards and use established technical and organisational controls to protect the availability, integrity, and confidentiality of our systems.
Our approach is practical, proportionate, and designed to support employer compliance rather than create unnecessary complexity.
Infrastructure & Hosting
Secure infrastructure
Mente is hosted on Amazon Web Services (AWS), using UK-based infrastructure that meets recognised security and availability standards.
Our platform uses:
- Encrypted connections for data in transit
- Secure storage environments for data at rest
- Role-based access controls to limit internal access
- Ongoing system monitoring and maintenance
We use established cloud infrastructure to focus on platform reliability, resilience, and continuous improvement.
Ownership & Development
Built and owned by Mente
The Mente platform was built from the ground up and is wholly owned by the business.
No third party has ownership, control, or access rights to our software.
Development and maintenance are carried out by a dedicated team with over thirty years of experience building secure workplace systems. This gives us complete control over updates, security decisions, and long-term stability.
Data Handling
What data we do – and don’t – collect
Mente is designed to minimise the collection of personal data.
Where personal data is required for platform access, this is limited to basic information such as:
- Name or identifier
- Work email address (or employer-assigned ID)
- Role or organisation reference
We do not collect unnecessary personal or sensitive data.
Survey and reporting data are presented in aggregated form and are not used to identify individuals. Safeguards are in place to prevent reporting where participation levels could risk identification.
Compliance & Governance
UK compliance and governance
Mente operates in line with UK data protection requirements.
We are registered with the Information Commissioner’s Office (ICO), and our internal policies are reviewed regularly to ensure they remain current and appropriate.
This includes documented processes covering:
- Data retention
- Access control
- Incident response
- Privacy and confidentiality
View our ICO certificate here.
Security Practices
Our security approach includes
- Encrypted data transmission and secure storage
- Controlled internal access based on role and responsibility
- Regular system reviews and updates
- Secure hosting with high availability
- Clear internal policies covering data handling and access
- Ongoing maintenance by an experienced technical team
We focus on maintaining a secure, stable platform that employers can rely on as part of their duty of care.
Designed for Trust
We don’t use security language to impress or overwhelm.
We aim to provide employers with confidence that their systems, data, and records are handled properly and responsibly.
If you need further details for audits, internal reviews, or assurance purposes, we’re happy to provide them.
We take data protection seriously. Full details of how we collect, store, and protect information are set out in our privacy policy below.
Privacy Policy