GuideUpdated March 26, 2026

You're Skeptical of AI Therapy Notes. Good. You Should Be.

The marketing is ahead of the reality. Most tools claim "HIPAA-compliant" and mean they signed a piece of paper. Output sounds like it was written by someone who has never sat with a client. This guide covers what AI therapy notes actually are, what compliance actually requires, and how to evaluate whether any tool deserves a place in your practice.
12 min readBy Jesse, Registered Psychotherapist (Ontario)

Prefer someone to handle this for you? Get your free practice checkup

What this guide covers

Start here before you commit to the longer guide.

Compliance Floor

BAA required

If a vendor processes PHI for you, HIPAA starts with a Business Associate Agreement.

Workflow Split

Scribing vs generation

Recording-based and summary-based note tools create very different privacy and consent profiles.

Final Review

Still clinician-owned

The therapist remains responsible for the assessment, edits, and signature on every note.

I keep telling myself I'll catch up on notes this weekend. I never do.

Therapist, r/therapists (2025)

Started using an AI notes tool last month. Still review everything, but I actually leave the office on time now.

LMFT, r/privatepractice

Quick Answer

AI therapy notes are clinical documentation generated by AI from a session summary you provide. You describe what happened in the session. The AI structures it into your chosen format (SOAP, DAP, BIRP, etc.) in under two minutes. You review and edit. No recording required. You are always the clinician of record.

Why Trust This Guide

Built around the compliance and workflow questions clinicians actually ask

This guide is meant to separate real clinical-documentation tradeoffs from generic AI marketing. The useful distinction is not simply which tool sounds best. It is which workflow can legally handle PHI, how much data it exposes, and where review still sits with the therapist.

Compliance Floor

BAA required

If a vendor processes PHI for you, HIPAA starts with a Business Associate Agreement.

Workflow Split

Scribing vs generation

Recording-based and summary-based note tools create very different privacy and consent profiles.

Final Review

Still clinician-owned

The therapist remains responsible for the assessment, edits, and signature on every note.

Sources And Method

HHS OCR: BAA requirement for cloud service providers

HHS explains that covered entities need satisfactory assurances in the form of a BAA when a vendor handles PHI on their behalf.

OpenAI Help Center: BAAs for API and ChatGPT Enterprise/Edu

OpenAI documents which products can support a BAA and which standard plans cannot.

Google Cloud: Vertex AI Search compliance and BAA

Google Cloud documents HIPAA and BAA coverage for supported AI infrastructure.

Treat this as an evaluation framework, not a substitute for reviewing the exact contract and data path of a specific vendor.

AI Documentation Cluster

Use this page for the practical note-workflow view

This page sits between the broad AI policy guides and the format-specific note guides. Use it when the question is how AI note workflows actually fit into private practice.

Start with skepticism

The AI therapy note space has a trust problem. Every vendor claims HIPAA compliance. Every demo looks clean. But the demos use fabricated data, not real clients. And the privacy claims often amount to "we signed something."

Therapists are right to push back. You are not being paranoid. Your clients share things in session they have never told anyone. That data is irreplaceable and irreversible. If it ends up in a training dataset or a breach, you cannot undo it.

So before evaluating any AI note tool, ask these three questions:

Does the tool have a Business Associate Agreement (BAA)?

A BAA is the minimum legal threshold for HIPAA compliance. Without one, the tool is not HIPAA-compliant regardless of what their marketing says. Full stop.

Does the tool retain your session data?

A BAA is not enough if your client's words sit on a server somewhere. Ask whether data is processed for the request and not retained in our main database afterward, or whether it is stored. "We encrypt it" is not the same as "we do not store it."

Can you verify the architecture, not just the policy?

Policy promises are cheap. Architecture is harder to fake. Can you inspect what the tool actually sends across the wire? A tool confident in its privacy architecture will let you verify it.

If a tool passes all three, then you can evaluate everything else: note quality, format options, workflow fit.

Two approaches to AI therapy notes

AI therapy note tools take fundamentally different approaches. Understanding the difference matters for both privacy and workflow.

Ambient ScribingGeneration-Based
How it worksRecords session audio, transcribes in real-timeYou type a summary, AI structures it
Client consentRequired for recordingNo recording, no consent needed
Privacy surfaceFull session audio transmittedOnly what you choose to include
Best forHigh-volume practices, EHR-integrated settingsPrivacy-focused, private practice, telehealth
Note timingSimultaneous with sessionAfter session (2-3 minutes)
Clinical review neededAlwaysAlways

Neither approach is objectively better. The right one depends on your practice setup.

If you are in a group practice or hospital setting where sessions are already being recorded, ambient scribing can integrate directly into that workflow. If you are in private practice, see clients over telehealth, or have any reservations about recording, generation-based tools are usually the better fit.

How generation-based notes work

The workflow is simple. After a session ends, you open the tool and type a brief description of what happened. Not a full note. Just the essentials you would tell a colleague in supervision.

1

Describe the session

Write 3-5 sentences covering the presenting concerns, what you worked on, any significant shifts or disclosures, and the plan going forward. Use your own clinical shorthand. The AI is trained on clinical language.

2

Select your format

Choose SOAP, DAP, BIRP, GIRP, PIRP, or Narrative. The AI structures your input into the correct sections for that format. You are not rewriting. You are choosing the container.

3

Review the output

The AI generates a complete clinical note in under two minutes. Sections requiring clinical interpretation you did not provide will show a placeholder like "[Therapist to complete]" rather than fabricated content. Edit as needed, then sign.

Why the placeholder approach matters

A note tool that fabricates clinical content rather than flagging gaps is a liability, not an asset. You need to know what the AI did not know. Placeholders tell you exactly where your clinical judgment needs to fill in. Fabricated content buries that gap.

The total time from session end to signed note: typically under three minutes. Compared to 10-15 for manual documentation, that is an hour or more returned to you across a full caseload day.

The six note formats

Each format captures the same clinical encounter through a different lens. Use whichever your licensing body, insurer, or practice setting requires.

SOAPSubjective, Objective, Assessment, Plan

The most universally recognized format across healthcare disciplines. Separates client report from clinician observation, then layers in your clinical interpretation and plan. Works with any insurer. Strong for documentation that needs to travel across providers.

DAPData, Assessment, Plan

Cleaner for outpatient therapy. Combines subjective and objective into "Data," which reads more naturally for mental health contexts. Common in private practice and community mental health. Shorter and faster to review.

BIRPBehavior, Intervention, Response, Plan

Focuses on what you did and how the client responded. Common in community mental health and substance use settings. Centers interventions more explicitly than SOAP, which makes it useful for demonstrating clinical activity to supervisors and auditors.

GIRPGoals, Intervention, Response, Plan

Anchors every session note to treatment goals. Opens with the specific goal being addressed before documenting intervention and response. Strong for managed care settings where goal progress documentation is required.

PIRPProblem, Intervention, Response, Plan

Problem-centered variant of BIRP. Opens with the presenting problem rather than behavior or goals. Useful when working with clients who have complex presentations with multiple active problems. Keeps documentation tied to diagnostic formulation.

NarrativeFree-form clinical narrative

No rigid structure. Tells the clinical story of the session in prose. Better for complex dynamics that do not fit neatly into boxes: trauma processing, relational themes, crisis work. Requires more clinical writing skill to do well, but captures nuance that structured formats flatten.

If your insurer has no preference, DAP or SOAP are the safest default. Both are widely accepted and clearly structured for audit purposes.

HIPAA compliance: what it actually requires

"HIPAA-compliant" is the most overused phrase in health tech. Here is what it actually requires in practice.

Business Associate Agreement (BAA)

Any vendor handling PHI on your behalf must sign a BAA. This is a legal contract defining their obligations under HIPAA. Without it, you are not covered. Many tools sign BAAs on request. Some build it into their terms automatically for healthcare customers.

Data minimization

HIPAA's minimum necessary rule means you should only transmit what is needed for the task. Full session transcripts contain far more PHI than a post-session summary. Generation-based tools inherently minimize data exposure because you control what you type.

No data retention

A BAA is not enough if session content is stored on vendor servers. Storage creates exposure. Look for tools that process data in-memory and discard it immediately. Zero-retention architecture is HIPAA-compliant by design, not just policy.

No training on your data

Consumer AI tools (ChatGPT free tier, Google Gemini without a business agreement) may use your inputs to train their models. Healthcare-grade deployments explicitly prohibit this. Confirm the vendor uses an enterprise or healthcare API configuration, not a consumer tier.

HIPAA-compliant by physics, not promises.

Reframe Practice processes notes through Google Vertex AI under a Business Associate Agreement. Data is handled in-memory with zero server retention. No session content touches our servers. Open your browser's Network Inspector while generating a note and watch what gets transmitted. Verifiable. Not a promise.

If a tool will not tell you exactly where data goes and how long it is retained, that is your answer.

When AI therapy notes make sense (and when they do not)

AI therapy notes are not for everyone. Be honest with yourself about whether this fits your practice.

AI notes make sense if...

  • Documentation is eating 2+ hours of your clinical day
  • You are batching notes at end of day from memory
  • You have a consistent note-writing process you want to speed up
  • You want to invest that time back into client work or self-care
  • You are comfortable with post-session review as part of your workflow

AI notes are not a fit if...

  • ×Your clinical notes are deeply narrative and require nuanced interpretation
  • ×You are in a supervised setting with specific note format requirements you have not confirmed are supported
  • ×You have strong ethical reservations about AI in clinical workflow and have not worked through them
  • ×You would not review and edit before signing — the AI is a draft tool, not a final product

The note is always your responsibility. AI does not change that. What it changes is how much of your cognitive load goes into structural formatting versus clinical thinking.

Setting up your AI therapy notes workflow

The biggest mistake therapists make when starting with AI notes is treating the first attempt as a finished product. It is not. Budget a few sessions to calibrate.

1

Start with a low-stakes client

Pick a straightforward case you know well. Run the same session summary through two or three different note formats. See which output requires the least editing. That is probably your format.

2

Write your summary immediately after the session

The quality of the output directly reflects the quality of your input. Three sentences written five minutes after the session will produce better notes than seven sentences written three hours later. Build the habit of immediate post-session summary.

3

Edit before signing — every time

Read the full note before you sign it. Add your clinical interpretation where placeholders appear. Adjust any phrasing that does not reflect your voice. The edit pass should take two minutes or less once you are calibrated.

4

Track time saved, not just convenience

After two weeks, compare your documentation time before and after. If you are not seeing a meaningful reduction, either the tool is not the right fit or your input summaries need adjustment.

Try it before your next session

Reframe Practice generates structured clinical notes from your post-session summary. Six formats. Zero data retained. Describe the session, select your format, get a draft in under two minutes. No account required for your first 10 notes.

Generate a note free

Wondering if your online presence is helping or hurting referrals?

A free practice checkup covering your Google presence, PT profile, and website.

Get Free Practice Checkup

Frequently asked questions about AI therapy notes

Are AI therapy notes HIPAA-compliant?

It depends on the tool. Not the marketing. HIPAA compliance requires a Business Associate Agreement, data minimization, and ideally zero retention. Check whether the tool has a BAA, whether it stores session data, and whether you can verify the architecture through technical means rather than just trusting their policy page.

What is the difference between ambient scribing and AI note generation?

Ambient scribing records session audio and transcribes it in real-time. Generation-based tools take a written summary you provide after the session and structure it into a clinical format. No recording, no client consent for audio capture. Most private practice therapists prefer generation-based for exactly that reason.

Do I need to tell my clients I use AI for notes?

For tools that record sessions, yes. For post-session input tools that never record, requirements vary by jurisdiction and licensing body. When in doubt, disclosure is always the safer clinical and ethical choice. Many therapists include it in their intake consent forms as a standard practice.

Will AI-generated notes hold up for insurance audits?

Yes, if you review and edit before signing. Auditors evaluate final note quality, not how it was drafted. AI-generated notes that are clinically accurate, reviewed, and properly signed meet audit standards. You are the clinician of record regardless of how the draft was created.

Can AI capture clinical nuance in therapy notes?

It structures what you give it. Clinical interpretation is yours. A well-designed tool uses placeholders for sections requiring your input rather than fabricating content. That is the distinction that matters. AI handles the factual scaffolding so you can focus on what requires clinical judgment.

Which note format should I use?

Use what your licensing body and insurers accept. SOAP is the most universally recognized. DAP is cleaner for outpatient therapy. BIRP is common in community mental health. GIRP and PIRP are goal-focused variants useful for managed care. Narrative works when you need to tell the clinical story without rigid structure.

How long does it take to write AI therapy notes?

About two minutes. Type a brief session summary, select your format, get a structured draft. Review and edit the output. Total time under three minutes versus 10-15 for manual documentation. Across a full caseload, that is a significant return.

Can AI therapy notes be used with any EHR system?

Yes, if the tool generates text output you can paste. Most generation-based AI note tools produce a structured draft you copy into your existing EHR. Some ambient scribing tools offer direct integrations with SimplePractice, TherapyNotes, or Jane, but those typically require session recording. Verify the tool outputs your required note format before committing.

How do I know if an AI therapy note tool is HIPAA compliant?

Ask for three things: a signed Business Associate Agreement, documentation of their data retention policy, and clarity on whether PHI touches their servers. Many tools claim compliance but route audio through third-party transcription services. Zero-retention tools process everything in memory without storing session content. If the vendor cannot explain their data path plainly, assume PHI is retained.

What is the best AI therapy note tool for private practice?

It depends on your priorities. For zero data retention and no recording required, Reframe Practice is built specifically for private practice. For EHR integration in higher-volume settings, ambient scribing tools may fit better. Evaluate based on your privacy requirements and whether you want to record sessions.

Related guides

By Jesse, Registered Psychotherapist (Ontario). Used in private practice.

Reframe Practice was built because that tool did not exist for private practice therapists. A Registered Psychotherapist got tired of spending thirty minutes structuring notes. Tired of privacy claims without architecture behind them. Tired of output that sounded like a form.

Describe what happened in the session. Get a structured clinical note in under two minutes. Review it. Done.

Processed for the request. HIPAA-compliant by architecture. By Jesse, Registered Psychotherapist (Ontario).

Generate your first note free