Is it legal and ethical to use AI for therapy session notes?

It can be, with three conditions met: the tool signs a Business Associate Agreement (BAA) so PHI is handled under HIPAA; clients give informed, written consent before any session is processed; and your state rules and liability insurer are checked first. Purpose-built clinical tools meet the first condition. Consumer AI tools do not, and that's the line most 'AI for therapists' lists dangerously blur.

Research edition · Therapists & counselors

The AI Stack for Therapists

Q: Do clients need to consent to AI note-taking?

Yes: informed, written, and revocable. Explain what is processed, by whom, and how it's stored, and honor a no without friction. A client who declines still gets your full attention and hand-written notes; a client who discovers undisclosed AI processing may reasonably never trust the room again.

Q: Can I use ChatGPT or Claude for treatment planning?

Not with client information on consumer plans. No BAA means no PHI, and de-identification is much harder than removing a name. The safe use is the non-clinical half of the practice: website copy, psychoeducation handout drafts, policy templates, blank intake forms, and appeal-letter templates with no client details.

2026 Research Edition · Prices verified July 2026 · Page updated 2026-07-21 · Re-scored with hands-on results when the test cycle completes (how testing works)

Affiliate links are marked · our top pick pays us $0 · rankings are never for sale · how we stay honest

The rule before the tools: a therapy practice runs on Protected Health Information, and consumer AI tools do not sign Business Associate Agreements. That one sentence disqualifies most of what generic "AI for therapists" lists recommend. This stack has two halves, clinical tools that sign a BAA and general tools that never touch client data, and the wall between them is the whole point.

The short version: documentation is the burnout engine of private practice: practitioners routinely report notes eating evenings and weekends. The four tools below take the admin and marketing load off for ~$70–135/month depending on session volume (the notes tool bills per session and caps) while keeping every byte of PHI inside HIPAA-covered tools. Nothing here replaces clinical judgment; everything here defends the hours it needs.

The stack

Upheal: session notes with a signed BAA ($1/session, capped ~$69/mo)
SimplePractice: the practice backbone (from ~$29/mo)
Claude for the non-PHI half: marketing, templates, handouts ($20/mo)
Canva: psychoeducation handouts that look professional (free–$15/mo)

1. Upheal: the progress notes you stop writing at 9pm

Affiliate link · Signs a BAA · The non-negotiable

Upheal (solo tier)

$1/session, capped at ~$69/month · upheal.io

Purpose-built for clinicians: it processes sessions under a signed BAA and drafts progress notes, treatment plans, and intake summaries in clinical formats (SOAP, DAP, and others) for your review and sign-off. The draft is never the note (you are), but reviewing a solid draft beats reconstructing a session from memory at the end of a ten-client day.

Editorial rating (research edition, replaced with timed hands-on scores after our test cycle):

Note quality8.8

Compliance posture9.3

Value9.0

Skip this if: your clients decline recording, and honor that without pressure; the therapeutic alliance outranks any tool. Also skip if you're in a jurisdiction or specialty (some forensic and minors work) where recording rules are stricter than HIPAA alone. Check your liability insurer's position first; the good ones have written guidance now.

Consent, in writing, every time: what's processed, by whom, where it's stored, and a no-questions opt-out. One paragraph in your intake packet plus a sentence at session start covers it.

2. SimplePractice: the back office in one place

Affiliate link

SimplePractice (Starter/Essential)

From ~$29/month · simplepractice.com

Scheduling with client self-booking, telehealth, billing and insurance claims, client portal, and documentation: the EHR layer a solo practice actually needs, HIPAA-covered with a BAA as standard. Its growing AI features live inside that covered environment, which is exactly where practice-management AI belongs.

Skip this if: you're settled on TherapyNotes, Jane, or an agency EHR. Switching systems mid-caseload is weeks of unpaid admin, and the platforms are close enough that migration rarely pays for itself.

3. Claude: everything that never touches a client

Our pick for the non-clinical half · No affiliate program · We earn $0 recommending this

Claude (Pro plan)

$20/month · claude.ai

The half of private practice nobody trained you for: website copy that sounds like you, psychoeducation handout drafts, blog posts that bring the right clients, practice policies, blank intake templates, superbill explanations, and insurance-appeal letter templates. Kept strictly on the business side of the PHI wall, it's the most versatile $20 in the stack.

The hard rule: no client names, no session content, no case details on a consumer AI plan, ever. No BAA means it cannot touch PHI, and "I removed the name" is not de-identification under the Safe Harbor standard. If a prompt would make your compliance training wince, it doesn't get typed.

4. Canva: handouts clients actually keep

Affiliate link · Free tier is genuinely enough to start

Canva (Free or Pro)

Free · Pro ~$15/month · canva.com

Turn the handout drafts from Claude into clean PDFs (grounding exercises, sleep hygiene, values worksheets), plus a professional-looking psychology-today-adjacent web presence. Generic templates, no client data, zero compliance surface.

What we considered and rejected

Tool	Why it didn't make the stack
Otter / Fathom for sessions	Hard no. Excellent tools we recommend to consultants and writers, but standard plans don't sign BAAs. Recording therapy through them is a reportable breach waiting to happen. This is the row that most "AI for therapists" listicles get wrong.
Consumer ChatGPT for notes	Same wall: no BAA, no PHI. Fine for the marketing half; disqualified from the clinical half.
Blueprint / Mentalyc / Eleos	Credible Upheal rivals with BAAs, and the category is genuinely competitive; see our Upheal vs Blueprint head-to-head. If your EHR bundles one, try it before adding a subscription. Our pick is the strongest solo-tier default, not the only safe choice.
AI "therapy chatbot" adjuncts	Client-facing AI between sessions is a scope-of-practice, liability, and ethics question, not a productivity tool. Outside this stack's remit, deliberately.
Jasper / marketing suites	A solo practice needs one good generalist for marketing copy, not a content factory. Claude covers it at a fraction of the cost.

Common questions

Is AI note-taking legal and ethical?

It can be, with three conditions: a signed BAA, informed written client consent, and a check of your state rules and liability insurer's guidance. Purpose-built clinical tools clear the first bar; consumer tools don't. The APA and most liability carriers now publish positions on this. Read yours before the first session, not after.

Do clients need to consent?

Yes: informed, written, revocable, and honored without friction. A client who declines still gets your full attention and manual notes. A client who discovers undisclosed AI processing may never trust the room again, and they'd be right.

Can I use ChatGPT or Claude for treatment planning?

Not with client information on consumer plans. De-identification under HIPAA's Safe Harbor is far harder than removing a name: dates, locations, and unique circumstances re-identify people. Keep general assistants on the business side of the wall.

The math

Full stack: ~$70/month on a light caseload to ~$135/month at Upheal's cap (prices as of July 2026, so always verify vendor pages; Upheal bills $1/session capped at ~$69, which quietly favors part-time practices). The honest measure isn't hourly rate arithmetic. It's that documentation load is one of the most-cited drivers of clinician burnout, and note-drafting tools directly attack it. If this stack returns even three evenings a month to a full-caseload clinician, it has outperformed every other line item in the practice budget. And if your caseload is light enough that notes aren't a burden, skip all of it; that's a fine answer too.