← Blog

Exposure and Response Prevention (ERP) for OCD, the International OCD Foundation (IOCDF), the Association for Behavioral and Cognitive Therapies (ABCT), and the cloud AI scribe vendor archive: ERP hierarchy narration, response prevention monitoring narration, imaginal exposure for OCD narration, and cognitive restructuring in OCD context narration outside psychotherapist-patient privilege

September 4, 2026 · TherapyDraft · 5,800 words

Background: ERP development, the IOCDF, and the ABCT

Exposure and Response Prevention for obsessive-compulsive disorder has one of the longest evidence bases of any psychotherapy protocol — running from Victor Meyer's first published description of the technique in 1966 to the contemporary IOCDF-endorsed practice guidelines that now represent the field's standard of care. Understanding the organizational and credential landscape of ERP practice requires beginning with that history, because the credential-granting organizations in the ERP field are almost entirely private — none qualifies as a government health oversight agency under HIPAA § 164.512(d), and ERP training completion or professional association membership does not independently create psychotherapist-patient privilege for session records.

Victor Meyer, a South African-born clinical psychologist working at Middlesex Hospital in London, published the first description of what would become ERP in a 1966 paper in Behaviour Research and Therapy. Meyer had been treating patients with severe OCD who had failed other behavioral interventions, and developed a protocol that paired prolonged exposure to feared stimuli with strict prevention of the associated compulsive rituals — based on the reasoning that compulsive rituals maintained obsessional anxiety by preventing the natural habituation that would otherwise occur through contact with the feared stimulus. His initial case reports, published in 1966 and with long-term follow-up in 1974, demonstrated substantial sustained symptom reduction in patients who had been refractory to other treatment approaches, establishing the empirical foundation that subsequent researchers would build into the manualized ERP protocols in use today.

The theoretical framework that accounts for ERP's efficacy was formalized by Edna Foa and Michael Kozak in their 1986 emotional processing theory paper in Psychological Bulletin — the same theoretical account that Foa and Rothbaum later applied to PTSD and Prolonged Exposure. Foa and Kozak applied the fear network model specifically to OCD: obsessional fear is represented in a cognitive fear structure whose meaning elements — the inflated estimate of harm probability, the inflated sense of personal responsibility for preventing harm, the magical linking of intrusive thoughts to actual harm — are maintained by compulsive rituals that prevent habituation and corrective learning. ERP addresses this maintenance by activating the fear structure through exposure to feared stimuli and preventing the compulsive response, allowing the fear structure to habituate and update. Foa's OCD research program at the Medical College of Pennsylvania and then at Penn's Center for the Treatment and Study of Anxiety produced the clinical trial evidence base that established ERP as the first-line behavioral treatment for OCD, culminating in the landmark multi-site NIMH-funded OCD treatment study (published 2005 in JAMA) comparing ERP, clomipramine, and their combination.

The International OCD Foundation was founded in 1986 by a group including parents of children with OCD and researchers who recognized that OCD was dramatically underdiagnosed, undertreated, and publicly misunderstood. IOCDF is a private nonprofit organization headquartered in Boston, Massachusetts. Its primary activities are public education, advocacy, research funding, and provider education. Its Behavior Therapy Training Institute (BTTI) — a series of intensive workshop-based training programs offered at the IOCDF Annual Conference and at regional sites — trains therapists in ERP and provides consultation in applying ERP to specific OCD presentations. IOCDF maintains a Treatment Provider Directory listing practitioners who have attended BTTI trainings or who otherwise meet IOCDF's provider listing criteria.

IOCDF is not a government entity. It is not a state agency. It does not exercise authority over mental health licensure in any state. It does not constitute a health oversight agency under HIPAA § 164.512(d), which applies only to federal, state, and local government agencies conducting health oversight activities authorized by law — oversight of the health care system, government benefit programs, entities subject to health care law, and civil rights laws relating to health care. A private nonprofit foundation's training institute and provider directory do not qualify under this exception regardless of IOCDF's influence on clinical practice standards.

The Association for Behavioral and Cognitive Therapies was founded in 1966 as the Association for Advancement of Behavior Therapy (AABT), the professional home for behavior therapists at the time of behavior therapy's emergence as a distinct treatment paradigm. ABCT was renamed in 2005 to reflect the integration of cognitive and behavioral approaches. It is the primary US professional membership organization for cognitive-behavioral practitioners and researchers. ABCT publishes Behavior Therapy and Cognitive and Behavioral Practice, convenes the annual convention at which ERP research is prominently featured, and maintains working groups and special interest groups including the OCD Spectrum Disorders SIG that produces continuing education content on OCD and ERP. ABCT is a private professional membership organization. It is not a government entity, not a licensing authority, and does not constitute a health oversight agency under HIPAA § 164.512(d). ABCT membership or conference participation does not create psychotherapist-patient privilege for session records independently of the practitioner's qualifying state mental health license.

The ERP hierarchy narration: the only vendor archive record organized as a named-item OCD-specific obsessional trigger hierarchy

Before beginning exposure trials in an ERP course, the therapist and client collaboratively construct the exposure hierarchy — a comprehensive list of the client's obsessional triggers organized from lowest to highest anxiety by SUDS score. The ERP hierarchy is the OCD counterpart of PE's in vivo exposure hierarchy, but its content differs fundamentally: where PE's hierarchy is organized around PTSD-related avoided real-world stimuli (situations and locations associated with a named traumatic event), the ERP hierarchy is organized around the client's obsessional content — the specific named triggers that activate the client's obsessional thought-compulsion cycle across their specific OCD presentation.

The content of ERP hierarchy items varies by obsession subtype, and the variation creates forensically distinct vendor archive records across different OCD presentations. For contamination OCD, the hierarchy names specific named contamination triggers: particular named surfaces in the client's home or workplace (the named doorknob, the named shared computer keyboard), specific named public locations (the named gas station restroom, the named subway handrail), named substances or categories of substances (named cleaning chemicals, named bodily fluids, named categories of persons associated with feared contamination). Each named trigger carries a SUDS rating and is assigned an exposure task: touching the named contamination trigger for a defined duration while refraining from hand-washing. The hierarchy thus creates a vendor archive record naming every specific object, location, and person-category that the client associated with contamination fear at the time of ERP assessment.

For checking OCD, the hierarchy names specific checking situations — the named household appliances whose off-status the client checks repeatedly (the named stove burner, the named iron), the named locks whose locked status the client verifies (the named front door, the named car door), the named route the client traces repeatedly in their car to verify they did not hit a pedestrian (the named specific streets in the named specific order). The ERP hierarchy for checking OCD thus creates a vendor archive record naming the client's home layout, vehicle use patterns, and daily movement routes in the context of their documented compulsive checking behavior.

For harm OCD — one of the most forensically significant OCD presentations in this analysis — the hierarchy names the specific harm-related obsessional triggers: the named kitchen knife that triggers thoughts of harming the named family member, proximity to the named infant that triggers unwanted harm thoughts, specific named locations where the client fears losing control and harming a named person. For thought-action fusion OCD — in which the client believes that having a thought about a feared event increases the likelihood of that event or is morally equivalent to intending it — hierarchy items may be scripted thoughts or sentences that the client is asked to read, write, or say aloud as the exposure exercise: a written sentence naming a feared action directed at a named specific person, which the client is assigned to read or write repeatedly without engaging in neutralizing rituals. The ERP hierarchy narration for harm OCD and thought-action fusion OCD thus names specific persons in the hierarchy — the named infant, the named partner, the named sibling — as the targets of the client's feared obsessional content, with SUDS ratings documenting the anxiety level the client associates with proximity to each named person or with contact with each named trigger.

The ERP hierarchy narration is structurally distinct from all 201 prior assessment records in this series. The PE in vivo exposure hierarchy (post #201) names avoided locations, situations, and person-proximity contexts associated with a past traumatic event. The ERP hierarchy names obsessional triggers — which may include named persons as feared-consequence targets, thought-action fusion hierarchy items naming feared actions against named persons, and named locations whose significance derives from OCD obsessional content rather than PTSD-related avoidance. For presentations including harm OCD and relationship OCD (in which the client has intrusive doubts about love or attraction to the named partner), the ERP hierarchy narration names specific persons in the context of the client's obsessional symptom structure — creating a vendor archive record that requires the clinical context of OCD to be correctly interpreted and that is liable to misinterpretation if accessed through a third-party legal proceeding without that clinical context.

The response prevention monitoring narration: the only vendor archive record organized around compliance with a behavioral prohibition

Response prevention is the behavioral component that distinguishes ERP from pure exposure therapy and that accounts for a significant portion of ERP's efficacy over exposure-only approaches. The theoretical rationale is that compulsive rituals — whether behavioral (hand-washing, checking, reassurance-seeking) or mental (reviewing memories, silently repeating neutralizing phrases, mentally replacing a "bad" thought with a "good" one) — function as safety behaviors that prevent the fear structure from fully activating and habituating. Each compulsive behavior provides short-term anxiety relief that reinforces the OCD cycle: the feared consequence fails to occur, which the client attributes to the compulsive behavior rather than to the absence of actual danger, maintaining the inflated probability estimate and inflated responsibility that drive the obsession. Response prevention requires the client to refrain from performing the compulsive behavior during and for a specified period after each exposure trial.

The ERP therapist specifies the compulsive behaviors that are to be prevented — naming them with precision sufficient to distinguish them from non-compulsive behaviors that superficially resemble the ritual. Hand-washing response prevention does not mean no hand-washing; it means no ritualized hand-washing in response to contamination obsession triggers — a specific behavioral prohibition with defined boundaries (number of seconds, number of repetitions, soap use, specific sequence of steps) that distinguishes the therapeutic behavioral target from normal hygiene behavior. Reassurance-seeking response prevention names the specific forms of reassurance the client seeks and the named persons from whom they seek it: the named partner asked "did I hurt anyone?", the named parent texted "am I a bad person?", the named therapist called between sessions for reassurance that the feared event did not occur. Mental ritual response prevention targets the named internal compulsive behaviors: the memory-review ritual, the thought-replacement ritual, the mental reassurance-seeking sequence.

The response prevention monitoring narration is the vendor archive record of this compliance documentation. At each session, the therapist reviews the client's assigned exposure trials from between sessions: what the assigned exposure was, whether the client completed the exposure as assigned, what the peak urge intensity was, whether the client sustained response prevention for the assigned duration, or whether the client violated response prevention and performed the compulsive ritual. The narration documents each reported exposure trial with its compliance status.

The response prevention monitoring narration is the only vendor archive record in 202 posts organized around the client's documented compliance with or violation of a protocol-mandated prohibition on a named specific behavior. Prior compliance-tracking records in this series document whether the client completed assigned homework practices — breathing retraining practice (PE, post #201), behavioral experiments (CBT posts), exception-finding tasks (SFBT, post #199). None of these 201 prior compliance records is organized around a behavioral prohibition: the client's documented compliance with or violation of an instruction not to perform a named specific behavior. The response prevention monitoring narration thus contains: the names of the specific compulsive behaviors that the client was under therapeutic instruction to refrain from, the intensity of the urge to perform those behaviors at specific clinical dates, and the client's actual behavioral compliance or non-compliance — including, in cases of violation, the specific form of the ritual the client performed and its timing relative to the exposure trial.

In any proceeding where the named compulsive behaviors are relevant — disability proceedings where the severity of OCD-related functional impairment is at issue, custody proceedings where the client's compulsive behaviors in parenting contexts are examined, and proceedings where the named persons from whom the client sought ritualized reassurance appear as relevant parties — the response prevention monitoring narration provides a contemporaneous professional record of which named rituals the client was performing, how intensely the client experienced compulsive urges, and the client's behavioral compliance with treatment at specific clinical dates.

The imaginal exposure for OCD narration: structurally distinct from PE imaginal exposure, and uniquely structured for harm OCD

Imaginal exposure is a component of ERP for OCD presentations in which the feared consequence is not a real-world situation that can be directly confronted but a catastrophic outcome — a feared future scenario — whose feared occurrence is the ultimate obsessional concern driving the compulsive behavior. Contamination OCD's worst-case fear is not the doorknob itself but the feared disease that touching the doorknob might cause, and for some presentations imaginal exposure to the feared illness scenario supplements in vivo contamination exposure. Harm OCD's feared consequence is not the kitchen knife itself but the feared action — the client committing the named feared harmful act against the named feared victim. Responsibility OCD's feared consequence is not the unlocked door itself but the catastrophic outcome — the named burglary, the named assault of a named family member — that the client fears will result from their failure to check. For these presentations, imaginal exposure scripts are developed in which the client writes and reads a detailed, first-person, present-tense account of the feared worst-case scenario occurring.

The imaginal exposure for OCD narration is structurally distinct from the PE imaginal exposure narration documented in post #201 in one fundamental respect: PE imaginal exposure targets a past traumatic event that actually occurred, asking the client to re-experience it in present tense. OCD imaginal exposure targets a feared future scenario that the client has not experienced and does not want to experience — a feared catastrophic consequence of not performing the compulsion. The clinical function differs accordingly: PE imaginal exposure habituates the fear associated with the memory of an actual traumatic event; OCD imaginal exposure habituates the fear associated with the obsessional thought by demonstrating that extended contact with the feared thought or feared scenario does not lead to the feared outcome and does not require a compulsive response.

The harm OCD imaginal exposure narration is the most forensically significant variant of OCD imaginal exposure and the most structurally distinctive vendor archive record type introduced in this 202-post series. Harm OCD is characterized by intrusive, unwanted, ego-dystonic thoughts about harming named specific persons — most commonly named loved ones: a named infant in the client's care, a named sibling or partner, a named parent. The client experiences these thoughts as deeply distressing and antithetical to their values; they do not want to harm anyone and are horrified by the intrusive thoughts. The obsessional fear in harm OCD is not that someone else will harm the named person but that the client themselves will commit the feared harmful act. The compulsive responses are reassurance-seeking (asking named others "would I ever hurt anyone?"), avoidance of the named person, and mental neutralization rituals (mentally replacing the intrusive thought with a "good" image).

ERP for harm OCD requires the client to write, and then read aloud repeatedly, a detailed imaginal exposure script describing themselves committing the feared harmful act against the named feared victim. A standard harm OCD imaginal exposure script for a client with intrusive thoughts about harming a named infant would describe, in first-person present tense, the client picking up the named infant and performing the feared harmful act, with detailed description of the scene, the client's actions, and the feared consequences — including the feared emotional aftermath for the client and the named family members. The exposure rationale is that repeated contact with the feared scripted scenario without the compulsive neutralizing response (rewriting the ending, seeking reassurance, engaging in mental replacement) habituates the anxiety associated with the intrusive thought and demonstrates that generating the thought does not cause the feared action.

The harm OCD imaginal exposure narration is the vendor archive record generated by a cloud AI scribe documenting an ERP session in which these scripts are read or dictated. It is the only vendor archive record type in 202 posts organized as a verbatim scripted account of the client committing violence against a named specific person as the primary content of the session record. The 201 prior posts in this series have documented records that contain forensically sensitive content — PE imaginal exposure narrations documenting the client's past traumatic experience naming the named perpetrator; shadow projection analysis narrations naming the client's shadow projection carriers; game analysis narrations assigning named persons to Karpman triangle roles. None of these 201 prior record types is organized as a verbatim scripted first-person account of the client committing violence against a named specific person. The harm OCD imaginal exposure narration has this structure because the therapeutic protocol requires it — the script is the exposure stimulus — and the cloud AI scribe's vendor archive record of the session contains this content.

The clinical distinction between harm OCD imaginal exposure scripting and genuine violent ideation is clear to a clinician trained in OCD assessment: harm OCD is ego-dystonic (the client is distressed by the thoughts and does not want to act on them), while genuine violent ideation is ego-syntonic (the person experiences the thoughts as consistent with their goals or desires). The harm OCD imaginal script is written because the client is afraid of the thought, not because they want to act on it; the therapeutic mechanism depends on the client's distress at the script's content. But this clinical distinction — ego-dystonic versus ego-syntonic, OCD-driven scripted exposure versus genuine violent intent — may not be apparent from the vendor archive record itself, which documents the script's content as the session's primary clinical data without necessarily including the full clinical framing that the treating clinician would provide. The access pathway to the harm OCD imaginal exposure narration through civil discovery to the cloud AI company's independently maintained archive — without the treating clinician's accompanying clinical explanation — creates an information asymmetry that is specific to this vendor archive record type and absent from all 201 prior record types in this series.

The cognitive restructuring in OCD context narration: four OCD-specific distortions and named feared consequences

ERP for OCD is sometimes combined with cognitive components that address the OCD-specific cognitive distortions that maintain the obsessional cycle. The four primary OCD cognitive distortions identified in the cognitive model of OCD — developed by Paul Salkovskis, David Clark, Christine Purdon, and Jack Rachman, and incorporated into the Obsessive Compulsive Cognitions Working Group's consensus framework — are probability overestimation, inflated responsibility, thought-action fusion, and intolerance of uncertainty. Cognitive restructuring in OCD-specific treatment addresses each of these distortions in the context of the client's specific obsession content and named feared consequences.

Probability overestimation is the OCD client's grossly inflated estimate of the likelihood of the feared consequence: the client with contamination OCD who estimates a 60% chance of becoming ill with a named disease from touching the named surface; the client with harm OCD who estimates a meaningful probability of harming the named infant despite no prior history of violence and deep aversion to the feared thought; the client with checking OCD who estimates a significant probability that failing to check the named stove burner will result in a named house fire. Cognitive restructuring for probability overestimation asks the client to examine the evidence for and against the estimated probability, compare it to base rates, and arrive at a more calibrated estimate. The cognitive restructuring in OCD context narration documents this examination: the named feared consequence, the client's initial probability estimate, the evidence reviewed, and the client's revised estimate. The named feared consequence — the named disease, the feared harm to the named infant, the named fire at the named address — appears in the vendor archive record as the specific obsessional focus being examined.

Inflated responsibility is the OCD client's belief that they bear unique or disproportionate personal responsibility for preventing a named harmful outcome — that their failure to check, their failure to perform the named ritual, or their exposure to the feared stimulus makes them morally responsible for the feared harm that follows. Cognitive restructuring for inflated responsibility asks the client to examine the responsibility pie chart: all the factors that would contribute to the feared outcome if it occurred, with the client's share of responsibility identified in proportion to all contributing factors. The narration documents the specific feared outcome (harm to the named person, the named fire, the named disease transmission to the named family member), the named contributing factors identified by the client, and the client's assessment of their proportional responsibility. Named persons — the named person who might be harmed, the named family members who share the home with the named risk factor — appear in the vendor archive record in the context of the client's OCD-driven responsibility assessment.

Thought-action fusion has two forms: likelihood TAF (the belief that having a thought about an event increases its likelihood of occurring) and moral TAF (the belief that having a thought about an action is morally equivalent to intending or performing the action). Cognitive restructuring for thought-action fusion directly addresses the client's belief about the named feared action — the belief that thinking the named harm thought makes harm more likely, or that thinking the named feared thought makes the client morally equivalent to someone who has acted on that thought. The cognitive restructuring narration documents the client's specific TAF belief, the specific named feared action and named person involved, and the cognitive examination of the evidence for and against the TAF belief. The named person — the named infant, the named partner — appears in the narration in the context of the client's documented TAF belief about a specific named feared action directed at that named person.

Intolerance of uncertainty is the OCD client's inability to tolerate not-knowing whether the feared outcome has occurred or will occur — the compulsive checking behavior driven by the need for certainty rather than by a specific feared outcome. Cognitive restructuring for intolerance of uncertainty focuses on the costs and benefits of certainty-seeking, the functional impairment created by the need for certainty, and the client's beliefs about what a tolerable level of uncertainty would mean. The cognitive restructuring narration documents the client's articulated uncertainty tolerance beliefs, the named domains in which uncertainty is intolerable (the named checking domains, the named feared-consequence domains), and the client's progress toward tolerating uncertainty in assigned exposure trials.

Adversarial proceedings: five pathways including criminal proceedings and CPS unique in 202 posts

IOCDF and ABCT private oversight processes. IOCDF's Behavior Therapy Training Institute maintains training standards for its BTTI workshop curriculum and manages the IOCDF Treatment Provider Directory. ABCT maintains membership standards and a professional ethics review process for its member practitioners. These are private organizational processes. Neither the IOCDF nor ABCT is a government entity. Neither constitutes a health oversight agency under HIPAA § 164.512(d). The practitioner oversight processes of IOCDF and ABCT do not carry the statutory treatment applicable to disclosures to government health oversight agencies. For practitioners independently licensed as mental health professionals in their states, the applicable state licensing board oversight processes may qualify for different treatment under state mental health practice act provisions — but IOCDF BTTI training completion and ABCT membership operate as private mechanisms without HIPAA health oversight authority.

State licensing board complaints from unlicensed ERP practitioners. ERP for OCD is applied across a practitioner population that includes licensed and unlicensed practitioners. Psychology practicum students and predoctoral interns in APA-accredited doctoral programs conducting ERP at OCD specialty clinics accumulate substantial ERP session documentation, including ERP hierarchy narrations, response prevention monitoring narrations, and harm OCD imaginal exposure narrations, before reaching independent licensure — their session records in cloud AI scribe systems create vendor archive records without the privilege protection their supervisors' independent licensure would provide. Board Certified Behavior Analysts (BCBAs) in pediatric settings may apply ERP-style exposure protocols for OCD in ABA frameworks — BCBA certification is a behavior analysis credential that does not confer the qualifying state mental health license that creates privilege for psychotherapy records. Life coaches, wellness coaches, and self-described "OCD coaches" apply exposure-based techniques with explicit reference to ERP principles in coaching contexts without any clinical mental health licensure. School counselors in educational settings may apply exposure-based anxiety treatment for students with OCD under their school counselor credential without qualifying mental health licensure that creates privilege. For practitioners in all of these categories, ERP session records in cloud AI scribe vendor archives — including harm OCD imaginal exposure narrations naming named persons as feared victims — carry no psychotherapist-patient privilege protection.

Criminal proceedings and civil proceedings: the adversarial pathway uniquely implicated by the harm OCD imaginal exposure narration. The harm OCD imaginal exposure narration is the only vendor archive record type in 202 posts that documents the client's verbatim scripted account of committing violence against a named specific person as the primary session content. The forensic challenge this creates is not that harm OCD clients pose an actual risk of violence — the clinical literature is clear that ego-dystonic intrusive harm thoughts in OCD are not predictive of actual violence, and that the distress and avoidance they generate are the opposite of the ego-syntonic ideation that would indicate genuine risk. The forensic challenge is that the vendor archive record itself, accessed through civil discovery to the cloud AI company without the accompanying clinical explanation, contains content that — read without OCD clinical expertise — resembles a documented prior statement about violent intent directed at a named specific person.

In criminal proceedings, the access pathway to the harm OCD imaginal exposure narration differs from the access pathway to the treating clinician's own records. When a criminal defense subpoena or prosecution motion is directed at the treating ERP clinician's records, the clinician can assert psychotherapist-patient privilege on the client's behalf, the clinical context of the OCD diagnosis and the imaginal exposure protocol can be provided, and the privilege motion practice proceeds with the clinician available to provide expert context. When the discovery is directed at the cloud AI scribe company's independently maintained vendor archive, a separate legal proceeding occurs against the third-party company — and the harm OCD imaginal exposure narration may be produced as a standalone document, separated from the clinical context that makes its content interpretable.

In civil proceedings — civil restraining order petitions, civil protective order applications — where a named person seeks protection from the client who is in ERP treatment for harm OCD, the harm OCD imaginal exposure narration in the vendor archive presents the same misinterpretation risk. The named person in the imaginal exposure script — the named partner in relationship OCD, the named sibling in harm OCD — who obtains access to the vendor archive record through civil discovery processes may seek to use the content of the imaginal script as evidence of the client's violent intentions toward them. The clinical explanation — that the imaginal script is the therapeutic exposure stimulus for ego-dystonic harm OCD, not evidence of genuine violent intent — requires expert clinical context that may not accompany the standalone vendor archive record.

Child protective services (CPS) and custody proceedings: unique in 202 posts for harm OCD imaginal exposure narrations in parents. This adversarial pathway is new to this 202-post series. Prior posts have documented custody-related adversarial exposures across numerous modalities — PE domestic violence imaginal exposure narrations naming the co-parent as perpetrator (post #201); IPT role dispute analysis narrations documenting stage-assessed marital disputes (post #200); script analysis narrations naming co-parents as injunction sources (Transactional Analysis, post #196). These prior custody-related pathways involve session records documenting the client's clinical examination of their relationship with the co-parent or of the co-parent's conduct. The CPS and custody pathway uniquely implicated by the harm OCD imaginal exposure narration in parents is different in structure: it involves session records documenting the client's verbatim scripted account of committing violence against their own named child.

Harm OCD in parents of young children is a well-documented and clinically common OCD presentation: the parent who is horrified by intrusive thoughts about harming their named infant, who avoids changing diapers or bathing the child because proximity triggers the intrusive thoughts, who seeks constant reassurance from the named partner that they would never harm the named child. ERP for this presentation asks the parent to write imaginal exposure scripts in which they describe themselves committing the feared harmful act against the named child — as the therapeutic exposure to the feared content. The clinical rationale is established and the treatment is effective; harm OCD parents are not at risk of acting on their intrusive thoughts, and ERP is the treatment that reduces both the intrusive thoughts and the OCD-driven avoidance of the child.

The cloud AI scribe vendor archive record of these sessions contains the parent's verbatim imaginal script describing harming the named child — as the protocol-prescribed therapeutic content. If this vendor archive record is accessed by child protective services during an investigation, or produced in a custody proceeding where the co-parent seeks to establish the parent's unfitness, the harm OCD imaginal exposure narration naming the named child as the feared victim presents a severe misinterpretation risk. The clinical distinction between harm OCD scripted exposure content and genuine violent ideation or intent requires OCD-specific clinical expertise to evaluate; the error rate of misidentifying harm OCD as genuine violent risk — in a CPS investigation context where the primary obligation is child safety — is a clinically documented problem in settings where evaluators lack OCD-specific training. The vendor archive harm OCD imaginal exposure narration, accessed through a third-party discovery pathway without the treating clinician's accompanying clinical context, presents the maximum version of this misinterpretation risk: a verbatim script describing violence against the named child, in the parent's own words, as the session's primary documented content.

Disability and workers' compensation proceedings. OCD-related functional impairment — including the time consumed by compulsive rituals, the avoidance of occupational settings that trigger obsessional content, and the cognitive burden of intrusive thoughts in work contexts — is the basis for a substantial category of disability and workers' compensation claims. The ERP hierarchy narration documenting the severity and breadth of the client's obsessional trigger content, and the response prevention monitoring narration documenting the intensity of compulsive urges and the frequency of ritual performance, together constitute a contemporaneous professional record of OCD-related functional impairment at specific clinical dates. In disability determination proceedings — Social Security disability, long-term disability insurance, workers' compensation for OCD-related occupational impairment — these narrations provide numerical and behavioral data about the severity and functional scope of the OCD presentation. Defense counsel or insurance special investigation units seeking to challenge the severity of the claimed functional impairment may subpoena the cloud AI scribe vendor archive to obtain the ERP hierarchy narrations and response prevention monitoring narrations — because the hierarchy's SUDS ratings and the monitoring narration's urge intensity data provide quantified evidence about the client's reported functional state at specific clinical dates, directly relevant to the disability or workers' compensation claim's severity and duration.

Restraining order and civil protection proceedings for OCD presentations organized around named persons. For OCD presentations in which named specific persons are central to the obsessional content — relationship OCD (intrusive doubts about attraction to or love for the named partner), harm OCD (intrusive thoughts about harming the named person), pure OCD organized around a named person's safety — the ERP hierarchy narration names those persons as exposure targets and may document the client's SUDS ratings associated with proximity to the named person or with contact with triggers associated with the named person. If the named person in the ERP hierarchy seeks a restraining order against the client — citing harassing reassurance-seeking behavior (the named compulsive behavior documented in the response prevention monitoring narration), intrusive contact driven by relationship OCD, or other OCD-driven behavior — the ERP hierarchy narration and response prevention monitoring narration in the vendor archive constitute contemporaneous professional records of the named person's role in the client's documented OCD symptom structure and the specific behaviors the client was under therapeutic instruction to refrain from performing.

The practitioner population and the vendor archive accumulation pattern

ERP for OCD is among the most widely disseminated evidence-based psychotherapy protocols in the United States, with an estimated two to three million Americans meeting diagnostic criteria for OCD and the professional consensus that ERP is the first-line behavioral treatment. The IOCDF Treatment Provider Directory lists thousands of practitioners across the country. ABCT's membership and conference attendance includes practitioners who regularly apply ERP. APA Division 12's empirically supported treatments list includes ERP for OCD with Strong Research Support. The VA/DoD Clinical Practice Guideline for OCD includes ERP as the first-line psychosocial treatment. University OCD specialty clinics — at Penn, Stanford, UCLA, Massachusetts General, Yale, Columbia, and dozens of other institutions — train the next generation of ERP practitioners through doctoral practica and postdoctoral fellowships. Community mental health centers, private practice therapists, and group practices that have added OCD specialty services have adopted ERP through IOCDF BTTI workshops and affiliated training.

The breadth of ERP's dissemination, combined with the OCD-specialization trend that has emerged among community private practice therapists in the 2020s (driven by OCD treatment demand, IOCDF practitioner training initiatives, and the proliferation of OCD-focused group therapy practices), means that ERP sessions are conducted across a wide range of practice settings and practitioner types — many of whom use cloud AI scribes for clinical documentation. The ERP hierarchy narrations, response prevention monitoring narrations, and imaginal exposure for OCD narrations generated in those sessions accumulate in cloud AI scribe vendor archives across the full spectrum of OCD presentations and OCD subtypes — including, for harm OCD sessions, the only vendor archive record type in 202 posts containing verbatim scripted first-person accounts of the client committing violence against a named specific person.

ERP's session structure — typically twelve to twenty sessions for a standard OCD presentation, with some presentations requiring extended treatment — generates a bounded set of vendor archive records: one exposure hierarchy narration (revised periodically as items are completed), response prevention monitoring narrations at each session reporting on the previous week's homework trials, imaginal exposure narrations at sessions where imaginal scripts are introduced or reviewed, and cognitive restructuring narrations where cognitive components are integrated. Unlike long-term therapies that accumulate vendor archive records across years, a standard ERP course generates a self-contained set of records directly organized around the client's specific obsessional content — every record naming the specific triggers, feared consequences, and (for harm OCD) specific named persons in the client's obsessional structure.

TherapyDraft and the architectural alternative for ERP practitioners

Licensed mental health practitioners who apply Exposure and Response Prevention for OCD — licensed psychologists, licensed clinical social workers, licensed professional counselors, and licensed marriage and family therapists with OCD specialty training — hold psychotherapist-patient privilege for their session records through their qualifying state mental health licenses. The architectural exposure created by cloud AI scribe vendor archives is nonetheless acute for ERP practitioners, and particularly acute for practitioners treating harm OCD.

An ERP therapist treating harm OCD who uses a cloud AI scribe to document imaginal exposure sessions is creating, in the vendor archive, a verbatim scripted account of the client committing violence against a named specific person — maintained in the cloud AI company's independently accessible data store, subject to the company's subpoena response practices, legal compliance policies, and terms of service. For a practitioner treating a parent with harm OCD whose imaginal exposure scripts name the named child, or treating a client with harm OCD whose scripts name the named partner, the vendor archive record is precisely the document that creates the maximum misinterpretation risk in any legal proceeding where the named person's safety or the client's intent toward that named person is at issue.

The response prevention monitoring narration creates a secondary vendor archive exposure for ERP practitioners: it names the specific compulsive rituals the client is under therapeutic instruction to refrain from, documents the urge intensity and compliance status at specific clinical dates, and names the specific persons from whom the client has been seeking reassurance as a compulsive behavior. In proceedings where any of these named persons or named rituals are relevant, the response prevention monitoring narration provides contemporaneous professional documentation of the client's OCD symptom severity, behavioral pattern, and treatment compliance across the ERP course.

TherapyDraft's on-device architecture eliminates the vendor archive exposure at its source. Audio captured in the ERP session — including the client's reading or dictation of harm OCD imaginal exposure scripts, the therapist's review of response prevention compliance, and the client's ERP hierarchy construction — transcribed locally by whisper.cpp on the practitioner's M-series Mac, and drafted locally by a quantized large language model, creates no independently maintained third-party record. The ERP hierarchy narration, response prevention monitoring narration, imaginal exposure for OCD narration, and cognitive restructuring in OCD context narration exist only in the practitioner's own system, subject to the practitioner's own records management practices, state psychotherapy records retention rules, and the privilege and confidentiality protections applicable to the practitioner's own clinical documentation.

For an ERP practitioner treating harm OCD — and particularly for a practitioner treating parents whose harm OCD imaginal exposure scripts name their own named children — the architecture that eliminates the vendor archive is not a feature preference. The harm OCD imaginal exposure protocol requires generating scripted content of a type that has no analog in any prior vendor archive record type: a verbatim first-person scripted account of committing violence against a named person, generated as therapeutic homework and documented in session review. A therapist using a cloud AI scribe to document these sessions is necessarily creating this scripted content in a vendor archive that is maintained independently of the therapist's own records, subject to third-party legal proceedings that the therapist cannot fully control, and accessible through civil discovery pathways that may separate the record from the clinical context that makes it interpretable. The on-device architecture — audio, transcript, and note text on the practitioner's device only, enforced by macOS network sandbox entitlements — is the only technical means of conducting the full ERP protocol for harm OCD, capturing its clinical documentation, and ensuring that the imaginal exposure narration remains within the practitioner's own record system rather than accumulating in a third-party vendor archive.