mentalhealthGPT
A clinical AI copilot for psychotherapists, psychiatrists and counsellors. It transcribes sessions locally in the browser, pseudonymises them before upload, and builds an encrypted per-case file for documentation, ICD-11/DSM-5 support and crisis screening, with data hosted in Switzerland.
What is mentalhealthGPT?
mentalhealthGPT is an AI clinical copilot for mental health professionals, published by aidX AG, a company entered in the Swiss commercial register in Pfäffikon ZH on 19 April 2024 and founded by Dr Peter Wildhaber (ETH Zurich doctorate, BSc in psychology, systemic counselling at ZHAW, MBA in Management of Technology at EPFL/UNIL). The publisher positions it as a ChatGPT specialised in psychiatry and psychotherapy, built around a security architecture rather than layered onto a general-purpose chatbot.
The unit of work is the Dossier, one case file per client, which accumulates transcripts, analyses, notes and reports over months or years. A session travels through a seven-stage chain: the microphone is captured in the browser, transcription runs locally and offline, pseudonymisation replaces identifying entities on the device, the audio is wiped from working memory, the pseudonymised text is transmitted encrypted, stored encrypted in the case file, and the model answers on that pseudonymised context only. Re-personalisation, turning [PERSON_1] back into a real name, happens on the device alone, after biometric unlock.
Answers draw on four context layers: a global clinical knowledge base (ICD-10/11, CBT, DBT, ACT and EMDR guidelines, pharmacotherapy, crisis intervention, assessment instruments), an institutional layer of house guidelines for clinics, a personal layer holding the practitioner's own methods and style, and the case history itself. A BERT intent classifier sorts context, urgency and crisis indications before the language model is called. After a session, five analysis styles are available, from a short version to a supervision question, and their results are ephemeral rather than stored. The tool also drafts progress notes, medical letters, discharge reports and epicrisis drafts in PDF and Word.
On the technical side: client-side AES-256-GCM encryption with one key per stored object, passwordless passkey and WebAuthn login where the smartphone serves as the security key and further devices are paired by encrypted QR code, speaker separation for up to four people with wireless microphones recommended, four interface and processing languages (German, English, French, Spanish), and a single third-party integration, Zoom through Real-Time Media Streams, accepting MP3, M4A, WAV and WebM files up to 500 MB.
The publisher is explicit about the limits: mentalhealthGPT is not a medical device, it does not replace a medical diagnosis, and clinical responsibility stays with the practitioner.
What it does
- Record and transcribe a session locally in the browser, with speaker separation for up to four voices
- Pseudonymise names, diagnoses and medication automatically before anything is sent out
- Build one encrypted case file per client that accumulates context from session to session
- Analyse a session in five styles: short version, structured summary, supervision question, intervention ideas and extracted themes
- Draft clinical documents in PDF or Word: progress notes, medical letters, discharge reports and epicrisis drafts
- Surface ICD-10/11 and DSM-5 diagnostic leads and run a crisis screening on the session material
- Capture a remote consultation through the Zoom Real-Time Media Streams integration
When to use mentalhealthGPT / When not to
A quick filter to help you decide if mentalhealthGPT is the right fit.
When to use mentalhealthGPT
- Solo psychotherapists, psychiatrists and clinical psychologists in private practice who write up their own sessions
- Psychological counsellors, coaches and consultants in private practice, the audience the Founding Member programme names explicitly
- Psychiatric clinics, therapy centres and university departments considering a seat-based rollout under the Institution tier
- Practitioners bound by strict professional secrecy who refuse to send client material in clear text to an outside service
- Clinicians following the same case over time, where the per-case memory only starts paying off after three to five sessions, and those running remote sessions on Zoom
When not to use mentalhealthGPT
- Clients and patients themselves: the product is built for professionals, not for the people they treat
- Anyone expecting a medical device or a diagnostic authority, since it replaces neither a medical diagnosis nor clinical judgement
- Teams that need programmatic integration into an electronic patient record or practice management software: there is no public API and Zoom is the only third-party connector
- Practitioners who want a native mobile app or installed desktop software, as everything runs in the browser
- Users looking for a permanently free tool, since a subscription becomes mandatory once the 30-day trial ends
How to use mentalhealthGPT
A typical end-to-end flow, from setup to results.
- Open mentalhealth-gpt.ch in a browser: there is no application to install
- Create an account through the sign-in page; the 30-day trial starts without a credit card
- Complete the three-step setup: scan a QR code to register your smartphone as a trusted device, save the passkey, and the encrypted pseudonymised exchange is ready
- Create one Dossier per case, then record each session against it
- Open the microphone in the browser at the start of the session, or upload an existing recording
- Check and correct the transcript before sending it for processing
- Trigger an analysis in the style you need once the session is over
- Connect a Zoom account if you want remote consultations captured through the integration
- Repeat the QR pairing on any additional device; the subscription counts per account, with Professional capped at three devices
- Use the printable information sheet and the suggested wording the site provides for the informed consent conversation with the client
Pros & Cons
Pros
- A privacy architecture unusually far-reaching for this market: local transcription, local pseudonymisation and client-side encryption, with the publisher stating it cannot read stored content
- Clinical data stored in Switzerland with Infomaniak, outside US jurisdiction, and subprocessors named one by one in the privacy policy
- Genuine, documented clinical specialisation: ICD-10/11, DSM-5, CBT, DBT, ACT and EMDR guidelines, pharmacotherapy and crisis intervention
- Persistent case memory across sessions, which is the real point of difference against general-purpose language models
- No customer data used to train models, stated three times over on the site, in the privacy policy and twice in the FAQ
- A complete 30-day trial with no credit card and no automatic renewal, plus a Founding Member price locked for life for existing members
- Fully verifiable legal identity: the UID and commercial register number published on the site match the Swiss register, and the publisher documents the practitioner's own informed consent obligations
Cons
- The site contradicts itself on where processing happens: the privacy policy describes clinical analysis on Vertex AI in the EU, while the confidentiality page states all servers are in Switzerland with no transfer to third countries
- The Professional tier at CHF 189 per month, presented as the standard offer, is announced as coming soon with an inactive button, leaving the explicitly limited Founding Member programme as the only purchasable paid tier
- No data processing agreement is published or offered, which is unusual for a tool handling health data in institutional settings, and no EU representative under Article 27 GDPR is designated
- An ISO 27001 badge is displayed with no certificate number and no certification body; elsewhere the site speaks of compliance and compliance reports rather than a certificate held
- No public API and a single third-party integration (Zoom), so no connector to practice management software or an electronic patient record
- No native mobile application despite a workflow that treats the smartphone as the security key, and no permanently free plan
- Very young and very small publisher, registered in April 2024 with one board member on record, a team presented by function without names, no customer references, inconsistent copyright years and a privacy policy linking to a subdomain that does not resolve
Pricing & Plans
There is no permanently free plan. A full 30-day free trial is available without a credit card, limited to three case files and subject to a fair use policy, and it does not renew automatically. The lowest purchasable paid entry point is the Founding Member programme at CHF 111 per month, or CHF 1,111 per year, reserved for individuals and explicitly limited to a restricted group of early users, with the price locked for life for existing members. The Professional tier, announced at CHF 189 per month or CHF 1,990 per year, was still marked as coming soon with an inactive purchase button on 2 September 2026. Institutional and clinical deployments are priced per seat on individual quotation, with no public amount. Billing is available in CHF, EUR or USD depending on location, by card or SEPA direct debit, and annual payment is presented as two months free compared with twelve monthly instalments.
- 30 days
- free of charge
- no credit card
- up to three case files
- all functions available and community support
- but no PDF or Word clinical reports
- no multi-device use and no supervision mode
- CHF 111 per month or CHF 1
- 111 per year
- for individuals only
- with full access to present and future functions
- unlimited case files
- PDF and Word clinical reports
- multi-device use
- partial supervision mode
- CHF 189 per month or CHF 1
- 990 per year
- for individuals
- with unlimited case files and sessions
- supervision mode
- encrypted storage
- up to three devices and email support
- announced as coming soon and not purchasable as of 2 September 2026
- seat-based pricing on individual quotation
- covering everything in Professional plus an institutional context library
- team accounts and user management
- admin dashboard
- audit trail and compliance reports
- GDPR
- DSG and HIPAA documentation
- dedicated onboarding
Data, GDPR & hosting
A consolidated view of how mentalhealthGPT handles your data.
GDPR overview
aidX AG claims GDPR compliance explicitly. Its privacy policy, in force since 1 January 2025 and updated on 1 July 2026, names aidX AG, Bachtelstrasse 57, 8330 Pfäffikon ZH, Switzerland (hello@aidx.ch) as controller under both the Swiss Federal Act on Data Protection (DSG) and the GDPR. Processing is grounded on Article 6(1)(b) and (f) GDPR and Article 31(2)(a) DSG. The policy sets out rights of access, rectification, erasure, restriction, portability and objection, exercised through hello@aidx.ch, and directs complaints to the Swiss FDPIC (EDÖB) or, for EU residents, to their own supervisory authority. Transfers out of Switzerland are said to rest on appropriate safeguards, chiefly standard contractual clauses or adequacy decisions. Two gaps remain: no representative under Article 27 GDPR is designated and no data protection officer is named, although the product openly addresses EU users from Switzerland.
Who owns the data?
aidX AG states that the content belongs to the user. Session material is encrypted on the device with a key that never leaves it, each stored object receiving its own key, and the publisher declares it cannot read stored content. The smartphone acts as the hardware key, unlocked by Face ID or fingerprint; additional devices are paired through an encrypted QR code and can be revoked individually without data loss. After cancellation, access stays open until the end of the paid period; beyond that the publisher says even it cannot reach the content, for want of the key, so exporting before expiry is advised. aidX AG nonetheless remains the controller under the Swiss FADP and the GDPR.
Reuse rights
Local pseudonymisation runs before anything leaves the device: names, places, diagnoses, medication, Swiss AHV numbers, phone numbers, IBANs and dates of birth are replaced by markers, and only the pseudonymised text reaches a model. The audio itself is never transmitted, because transcription happens entirely in the browser, offline, with the recording wiped from working memory immediately afterwards. A BERT intent classifier sorts context, urgency and crisis indications before any call to a language model; clinical analysis then runs on Google Cloud Vertex AI in EU data centres, in memory only and without durable storage, and session analyses are themselves ephemeral. The privacy policy and the FAQ state three times over that customer content is never used to train models, third-party models included. With the optional Zoom integration, the audio stream received through RTMS is processed in memory and never stored as raw sound, while OAuth tokens are encrypted and revoked as soon as the integration is disconnected. Website data such as IP address, timestamp, URL and browser type is deleted after 30 days, and the publisher uses no marketing tracker, neither Google Analytics nor Meta Pixel.
Data retention & training
Hosting summary
Core application data and stored transcripts are held on infrastructure in Switzerland operated by Infomaniak Network SA, and server-side transcription, where it is not performed locally, also takes place in Switzerland. The audio itself never leaves the device. Clinical analysis of pseudonymised text runs on Google Cloud Vertex AI in EU data centres, in working memory only and without durable storage. Payment data is handled exclusively by Stripe and never reaches the publisher's servers. Five subprocessors are named: Infomaniak Network SA in Switzerland, Google Cloud and Vertex AI in the EU, Zoom Video Communications, Stripe and Weglot. Transfers outside Switzerland are said to rest on standard contractual clauses or adequacy decisions. The public site aidx.ch is served from a Cloudflare anycast node, while the application domain resolves to an Infomaniak address in Geneva. One reservation: the confidentiality page claims the entire AI infrastructure is in Switzerland with no third-country transfer, which the privacy policy contradicts.
Things to keep in mind
Risks and trade-offs to weigh before adopting mentalhealthGPT.
- The site contradicts itself on where processing takes place. The privacy policy, in force since 1 January 2025 and updated on 1 July 2026, describes clinical analysis on Google Vertex AI in EU data centres, while the confidentiality page states in its FAQ that all servers are in Switzerland with no transfer to third countries. The privacy policy is the contractual and more recent document, but the discrepancy should be settled in writing before any deployment.
- An ISO 27001 badge appears among the compliance badges with no certificate number and no certification body, while elsewhere the site speaks of ISO 27001 compliance and compliance reports rather than a certificate held. No certification is credited to the publisher here. The Swiss host, Infomaniak, is itself ISO 27001 certified, which is the usual source of this confusion. HIPAA is likewise presented as technically met and HIPAA-ready, never as a certification or a business associate agreement on offer.
- Pricing needs care. The Professional tier at CHF 189 per month, presented as the standard offer, was announced as coming soon with an inactive button on 2 September 2026, so the only purchasable paid tier was the Founding Member programme at CHF 111 per month, explicitly limited in time and in places. The entry price will change once that programme closes. The homepage JSON-LD advertises a price of 0 CHF, which is the free trial and not a price point, and the amounts are absent from the pricing page HTML because they are loaded from an API; they were confirmed against paragraph 4 of the terms.
- The refund page describes the payment provider as merchant of record while paragraph 5 of the terms states the opposite. Since that determines who you actually contract with and who owes you a refund, clarify it before an institutional purchase.
- No data processing agreement is published or advertised, and no representative under Article 27 GDPR is designated, even though the product openly addresses EU users from Switzerland. Any buyer processing health data on behalf of an institution should ask for both in writing.
- The output is generated text and can be wrong or plausibly misleading. The publisher itself states this is not a medical device, that clinical responsibility stays with the practitioner, and that informed client consent must be obtained before any recording. Signing off drafted notes without rereading them, or letting the tool frame the diagnostic hypothesis, quietly hands part of the clinical reasoning to a model that only ever sees pseudonymised text.
- External signals about the publisher are thin: a company registered in April 2024 with a single board member on record, a team presented by function without names, no public social presence, no named customer references, copyright years that disagree from page to page, and a privacy policy linking to app.mentalhealth-gpt.ch, a subdomain that does not resolve. Note too that the source site is in German and its English and French versions are machine translations.
Setup & Integrations
Technical difficulty
Very low. Nothing is installed: everything runs in the browser, and the publisher describes setup in three steps, scanning a QR code to register the smartphone, saving the passkey, then starting. Biometric authentication is configured once per device, and connecting a Zoom account through OAuth is optional. Portable wireless microphones are recommended for better speaker separation but are not required. There is no infrastructure to configure, no server to deploy and no API key to manage. The one real prerequisite is organisational rather than technical: obtaining the client's informed consent before any recording.
Deployment
Integrations
Supported languages
Behind mentalhealthGPT
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement mentalhealthGPT.
Frequently asked questions
Does the audio ever leave my device?
Can aidX AG read my client data?
Is my data used to train AI models?
Where is the data hosted?
Do I need a credit card for the trial?
Can I use it on several devices?
Do I have to tell my client that AI is being used?
Is mentalhealthGPT a medical device?
Is there a mobile app or an API?
How do I cancel, and which languages are supported?
Should you pick mentalhealthGPT?
mentalhealthGPT makes a narrow, legible promise: clinical documentation and case reflection in mental health, not a general-purpose assistant. Its central argument is architectural rather than functional, resting on local transcription, local pseudonymisation, client-side encryption and storage in Switzerland, and it goes further than this market usually bothers with. Legal credibility is strong for a company this young: the identity published on the site matches the Swiss commercial register, subprocessors are named one by one, and the disclaimers on medical devices, clinical responsibility and informed consent are stated plainly rather than buried.
The reservations are commercial and evidential rather than technical. The publisher was registered in April 2024, has a single board member on record and presents its team by function without names. The commercial offer is still under construction: the tier presented as standard, Professional at CHF 189 per month, is announced as coming soon and cannot be bought, so the only purchasable paid entry point is the explicitly limited Founding Member programme at CHF 111 per month. The ISO 27001 badge carries neither certificate number nor certification body. The site contradicts itself on where clinical analysis actually happens, EU data centres according to the privacy policy against Switzerland only according to the confidentiality page. And no data processing agreement is published, which is unusual for a tool handling health data in institutional settings.
An institutional buyer should put four questions in writing before deploying: where processing occurs, what ISO 27001 means here, whether a DPA can be signed, and who acts as merchant of record. A solo practitioner faces a far smaller decision, since the 30-day trial is complete, needs no card and does not renew by itself, which makes it the cheapest way to judge whether the case memory earns its CHF 111 a month.
- Choosing a selection results in a full page refresh.
- Opens in a new window.