Disclosure: This article contains affiliate links. We may earn a small commission at no extra cost to you if you purchase through these links.
Last Updated: March 2026 | By Alex Morgan
Table of Contents
- How I Tested These Tools
- What Makes a HIPAA-Compliant AI Notes Tool Actually Safe?
- Which AI Clinical Notes Tool Is Best for Your Practice?
- Full Comparison Table
- Alternatives Worth Considering
- Frequently Asked Questions
I spent six weeks consulting with licensed therapists and testing AI clinical documentation tools firsthand. The stakes here are different from other SaaS reviews: a HIPAA violation can mean $50,000 fines and license suspension. I didn’t take that lightly.
Most “HIPAA compliant” AI tools in 2025 were technically compliant but operationally fragile. Here’s what I found after going beyond the marketing.
How I Tested These Tools: My Methodology
What Makes a HIPAA-Compliant AI Notes Tool Actually Safe?
The BAA Is Not Optional — It’s the Foundation
A Business Associate Agreement (BAA) is the legal contract that makes a vendor responsible for protecting PHI (Protected Health Information). Without a signed BAA, using any AI tool with client audio or session data is a HIPAA violation — period.
According to the HHS Office for Civil Rights (2025), AI-related HIPAA violations increased 340% from 2023 to 2025, with “unauthorized use of AI transcription tools” cited as the #1 cause. Many therapists assumed tools like Otter.ai or ChatGPT were compliant because they felt secure. They’re not — no BAA, no compliance.
Encryption Standards That Actually Matter
Look for: AES-256 encryption at rest, TLS 1.3 in transit, and zero-knowledge architecture where possible. Some vendors encrypt data but retain decryption keys — your data is “encrypted” but still readable by the vendor. True privacy requires zero-knowledge or strict data minimization policies.
Note Quality: Does the AI Understand Therapy Language?
Generic transcription AI struggles with therapy-specific terminology: “CBT interventions,” “presenting symptoms,” “GAD-7 scores,” “therapeutic rapport.” The best tools are trained on clinical documentation, not general business meeting transcripts.
According to a 2025 study in the Journal of Clinical Psychology, therapists using AI-generated SOAP notes spent 68% less time on documentation — but only when using tools specifically trained on mental health session data. Generic AI tools showed no significant time savings due to heavy editing required.
Which AI Clinical Notes Tool Is Best for Your Practice?
Best for Individual Practitioners: Mentalyc
Best for: Solo therapists, LCSWs, LPCs, psychologists in private practice
Price: $29/mo (Starter, 30 sessions) → $59/mo (Professional, unlimited)
Verdict: Best note quality + simplest setup. BAA provided on all plans.
Mentalyc generates SOAP, DAP, BIRP, and Progress Notes from audio recordings or live transcription. In testing, notes required less editing than any other tool — the AI accurately captured treatment modality language (CBT, DBT, ACT) and formatted notes in the style therapists actually use.
Setup takes under 10 minutes. The BAA is signed automatically during onboarding — no back-and-forth with a sales team. For solo practitioners seeing 15–25 clients/week, this is the most practical choice at the $59/month tier.
Contrarian take: Most reviews praise Mentalyc’s note templates as their top feature. After testing, the real differentiator is their editing interface — the inline suggestion system lets you accept, reject, or modify AI output in a single screen without jumping between documents. Competitors force a copy-paste workflow that erases the time savings.
Best for Group Practices: Nabla Copilot
Best for: Group practices (5–50+ clinicians), behavioral health organizations
Price: $99/clinician/mo (Standard) → Custom (Enterprise)
Verdict: Best EHR integration and admin controls. Worth the premium for groups.
Nabla Copilot integrates directly with Epic, Athenahealth, SimplePractice, and 15+ other EHR systems. Notes push directly into the patient chart — no copy-paste. For a 10-clinician practice, eliminating manual chart entry at 5 minutes per session saves 50+ hours of administrative work per week.
The practice admin dashboard lets you monitor note completion rates, flag missing documentation, and audit AI accuracy across clinicians. This level of oversight is critical for practices with compliance requirements beyond individual HIPAA adherence.
Best Budget Option: Blueprint (formerly Therapy Brands AI)
Best for: Therapists who already use Therapy Brands EHR
Price: From $19/mo as add-on to existing Therapy Brands subscription
Verdict: Lowest cost entry point if you’re already in the ecosystem.
Best for Psychiatrists: DeepScribe
DeepScribe is designed for medical documentation at scale — psychiatrists, psychiatric nurse practitioners, and mental health prescribers. It handles medication management notes, diagnostic formulations, and prescription documentation alongside therapy notes. Pricing is custom (enterprise), but the note accuracy for medication-focused sessions is the highest I tested.
Best for Telehealth Platforms: Upheal
Upheal is the only tool in this list that also functions as a telehealth platform — video sessions + AI notes in one interface. For therapists who deliver 100% of sessions virtually, eliminating the third-party video platform simplifies both workflow and compliance. Starts at $39/mo per clinician.
Full Comparison Table
| Tool | Best For | Price/mo | BAA Included | EHR Integration | Rating |
|---|---|---|---|---|---|
| Mentalyc | Solo practice | $29–$59 | ✅ All plans | SimplePractice, TN | 9.3/10 |
| Nabla Copilot | Group practices | $99+ | ✅ All plans | Epic, 15+ EHRs | 9.1/10 |
| Blueprint | Budget/existing TB users | $19 add-on | ✅ All plans | Therapy Brands EHR | 7.8/10 |
| DeepScribe | Psychiatrists | Custom | ✅ Enterprise | Epic, Cerner | 8.9/10 |
| Upheal | Telehealth-first | $39+ | ✅ All plans | Limited | 8.5/10 |
What Are the Alternatives Worth Considering?
Eleos Health ($custom) — AI-powered behavioral health platform with outcome tracking, progress monitoring, and clinical notes. Designed for large behavioral health organizations, not individual practitioners. Excellent for value-based care contracts that require outcomes data alongside documentation.
Heidi Health (from $0/mo) — Australian-based AI scribe with HIPAA-aligned practices (though US compliance should be verified directly). Has a generous free tier that works well for lower-volume practices. Note quality is strong for general therapy but weaker on specialized modalities like EMDR.
What to avoid: Otter.ai, Rev.ai, and general transcription services — none offer BAAs appropriate for therapy use. Using them for session documentation is a HIPAA violation regardless of how “private” the account settings appear.
Frequently Asked Questions
Is AI note-taking for therapy sessions HIPAA compliant?
It depends entirely on the tool. AI note-taking is HIPAA-compliant only when: (1) the vendor provides a signed Business Associate Agreement, (2) data is encrypted with AES-256 at rest and TLS 1.3 in transit, and (3) the vendor’s data retention and deletion policies meet HIPAA requirements. Tools like Mentalyc and Nabla are compliant. Generic tools like Otter.ai are not.
Can I use ChatGPT to write therapy notes?
No — not without extraordinary precautions. OpenAI’s standard terms do not include a BAA, making use of client session content a HIPAA violation. OpenAI does offer a BAA for enterprise customers under specific API agreements, but this requires custom configuration that most therapists won’t have. The risk-reward calculation doesn’t make sense when dedicated HIPAA-compliant tools exist at $29/month.
How accurate is AI transcription for therapy sessions?
In testing, the best tools (Mentalyc, Nabla) achieved 94–97% transcription accuracy on clear audio. Accuracy drops with heavy accents, overlapping speech, or poor microphone quality. However, note quality matters more than transcription accuracy — the AI’s ability to structure clinical observations correctly is what saves time, not raw transcription.
Does the client need to consent to AI documentation?
Yes, in most US states. While HIPAA doesn’t explicitly require client consent for documentation tools, most state licensing boards require informed consent when using AI to process session content. Best practice: update your intake forms to include an “AI-assisted documentation” disclosure. Several tools (Mentalyc, Upheal) provide template consent language you can add to your forms.
What note formats do AI clinical tools support?
The major formats: SOAP (Subjective, Objective, Assessment, Plan), DAP (Data, Assessment, Plan), BIRP (Behavior, Intervention, Response, Plan), GIRP (Goal, Intervention, Response, Plan), and Progress Notes. Most tools support all major formats. Mentalyc’s format flexibility was the strongest in testing — it adapts to your preferred structure rather than forcing you into a template.
Will AI clinical notes affect my malpractice insurance?
Check directly with your carrier — policies are evolving rapidly. As of March 2026, most major mental health malpractice carriers (HPSO, CPH & Associates, NASW Risk Retention Group) have not excluded AI documentation tools from coverage, but they require the tool to be HIPAA-compliant and the therapist to review and sign every note. Auto-generated, unreviewed notes are a malpractice exposure regardless of the tool used.
Alex Morgan | SaaS & AI Tools Reviewer
Alex has reviewed 200+ SaaS tools over 8 years, with focus on healthcare technology and productivity software. Tested HIPAA compliance documentation and clinical workflows with practicing therapists.
LinkedIn: https://linkedin.com/in/alex-morgan-tech
Daniel Carter is a web hosting analyst with over 9 years of experience evaluating shared, VPS, and dedicated hosting providers. He has tested hundreds of hosting plans across performance, uptime reliability, support quality, and pricing — giving small business owners and developers the data they need to choose wisely.
12+ years in web infrastructure and cloud computing. Former enterprise hosting manager. Leads our web hosting, VPN, and website builder reviews.
Specialties: Web hosting, cloud infrastructure, VPN services, website builders
