Clinic AI in Mexico City, what private clinics and health systems should know in 2026

The private care market in Mexico City

The 2020 census counted 9,209,944 people in Mexico City, 7.3% of the national population, with Iztapalapa the most populous borough at 1,835,486.⁶

INEGI's survey of private health establishments found 2,747 providing health services across Mexico in 2024, with Mexico City second among the states at 8.3% of them, after the state of México.⁵ Most, 90.2%, were general hospitals.⁵ Those private establishments recorded 14,533,217 outpatient consultations nationally that year, 48.0% of them specialist consultations.⁵

The rules a clinic in Mexico City works under

Mexico's federal law on personal data held by private parties was reissued as a new law, published in the Diario Oficial on 20 March 2025.¹ It treats data that may reveal present or future health as sensitive, and requires express written consent to process it, given by handwritten signature, electronic signature or another authentication mechanism.¹ Consent is not needed where data is indispensable for care while the patient cannot give consent and the processing is done by someone bound by professional secrecy.¹

Transfers in Mexico or abroad may go ahead without consent when they are needed for diagnosis, health care, treatment or the management of health services.¹ The law names the Secretaría Anticorrupción y Buen Gobierno as its authority, and its site confirms data protection is now its responsibility.¹²

The clinical record follows NOM-004-SSA3-2012. It may be kept on electronic media, must protect the confidentiality of patient data, and is kept for at least 5 years from the last medical act.³ Electronic record systems follow NOM-024-SSA3-2012, which applies to every establishment in the national health system that adopts one and calls for the advanced electronic signature of the health professional and export of the patient's information.⁴

COFEPRIS, the federal commission for protection against sanitary risks, oversees medicines and medical devices as part of protecting the public from sanitary risk.⁷ The city's own health ministry is the Secretaría de Salud Pública de la Ciudad de México.⁸

wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. wai is compliant with these rules and built for clinics in Mexico City. Signed notes and letters can be exported from wai into any system, so the record the clinic keeps under NOM-004 stays complete.

The languages Mexico City patients write in

In the 2020 census, 1.40% of Mexico City residents aged three and over spoke an indigenous language.⁶ Náhuatl was the most frequent at 32.1% of those speakers, followed by Mazateco at 12.1%.⁶

wai works in any language.⁹ Bring a week of real messages to the demo, including any from visiting patients, and judge each draft before your team approves it.

What a demo shows in Mexico City

A patient in Coyoacán sends a WhatsApp at 21:30 asking for a gynaecology appointment this week. wai reads the doctor's busy times in Google Calendar, Outlook or Apple Calendar, offers an open Thursday time and drafts the reply in the clinic's voice. The front desk approves it the next morning, and a reminder follows before the visit.

She books on the clinic's own website in three taps and pays the deposit by card or Apple Pay into the clinic's Stripe account, with the clinic as merchant of record.¹⁰ The intake questionnaire arrives with her confirmation, and the clinic collects its signed health data consent before she walks in.¹⁰¹

A missed call during a busy morning becomes a drafted text for the team to send. In the consulting room wai drafts the note and the doctor reviews and signs it. The consent form wording is in the consent form template.

For hospital groups, insurers and public bodies in Mexico City

wai builds one care pathway at a time on its live platform for hospital groups, insurers and public institutions, with outcomes agreed first and data, model rights and exit terms written into the contract. See wai for organisations.

Where to start

First, update the privacy notice and add a signed consent for health data, as the 2025 law requires, and include recording for AI notes in it.¹ Second, check that your record keeps each entry for at least 5 years from the last medical act and can export the patient's information.³⁴

Third, export a week of WhatsApp and phone enquiries and mark the ones that came in after hours. Bring them to a fifteen-minute demo, and see the prices on the pricing page.

Frequently asked questions