Workspace is on sale for your first year. Use code FALL39
Start with WorkspaceWorkspace is on sale for your first year. Use code FALL39
Start with WorkspaceHIPAA & CLINICAL DOCUMENTATION
Therapy notes can contain sensitive health information. AutoNotes supports privacy-conscious documentation workflows, with security and compliance information available through its Trust Center.
Client discussed recent stressors and reported using coping strategies between sessions.
Client demonstrates growing awareness of triggers and continued engagement in treatment.
01
Review AutoNotes' published privacy, security, and subprocessor information before entering protected health information.
02
Organizations subject to HIPAA should determine whether a Business Associate Agreement is required and ensure the appropriate agreement is in place before using a vendor with PHI.
03
AI-generated drafts should be checked and approved by a qualified clinician before inclusion in a patient record.
04
Follow your organization's policies for patient consent, recording, access controls, retention, and handling of clinical information.
HIPAA compliance depends on the full workflow—not just an AI feature label. Relevant questions include permitted uses and disclosures, business associate arrangements, safeguards, access, retention, and how the organization actually operates the tool.
CONNECTED CLINICAL WORKFLOWS
Review agreement responsibilities and vendor-evaluation questions.
Explore notes, planning and connected documentation workflows.
Explore therapy-specific note formats and editing workflows.
AutoNotes is designed for behavioral health documentation workflows. Clinicians remain responsible for reviewing, correcting, and approving generated content before it enters the clinical record. For details on privacy practices, security, and applicable agreements, visit the Trust Center. Confirm plan-specific availability on the Pricing page.
No. The appropriate assessment depends on the vendor, contractual arrangements, security practices, and the healthcare organization's own use of the tool.
When a vendor acts as a business associate and handles PHI on behalf of a covered entity, a BAA is generally required. Organizations should confirm their specific obligations.
Do not enter PHI into a service unless your organization has evaluated and authorized that workflow, including required contractual and security safeguards.
Start with the AutoNotes Trust Center and request any additional documentation your organization needs.
