https://therapydraft.com/blog/ Essays on on-device AI, HIPAA architecture, and the clinical workflows TherapyDraft was built around. en-us Sat, 06 Jun 2026 22:00:00 GMT https://therapydraft.com/blog/opioid-treatment-programs-mate-act-ai-scribes-methadone-buprenorphine https://therapydraft.com/blog/opioid-treatment-programs-mate-act-ai-scribes-methadone-buprenorphine Sat, 06 Jun 2026 22:00:00 GMT OTPs are a distinct federally-regulated category under 42 CFR Part 8 — not general SUD counseling. SAMHSA certification and DEA registration make 42 CFR Part 2 applicability certain for OTPs. MATE Act 2023 eliminated the X-waiver and expanded office-based buprenorphine prescribing to a new class of clinicians. Both contexts produce session content — take-home methadone eligibility assessments, toxicology result discussions, dosing adjustment conversations, program compliance reviews — that cloud AI scribe vendors retain as independently held business records outside the OTP's own Part 2-protected clinical files. This post explains the OTP regulatory framework, what OTP sessions uniquely capture, how the MATE Act changed the buprenorphine prescribing landscape, why the vendor archive sits outside the program's own regulated records, and how on-device processing eliminates the independently held archive entirely. https://therapydraft.com/blog/ongoing-therapy-undocumented-clients-immigration-enforcement https://therapydraft.com/blog/ongoing-therapy-undocumented-clients-immigration-enforcement Sat, 06 Jun 2026 20:00:00 GMT Ordinary mental health sessions for clients who are undocumented, asylum-seeking, or in removal proceedings surface immigration disclosures — status, family locations, safety plans, persecution experiences — that a cloud AI scribe vendor retains as independently held business records. Immigration enforcement (HSI/ICE) can reach that archive through administrative subpoena to the vendor as a separate legal entity, without any demand on the therapist. This post addresses the ongoing-therapy context specifically — distinct from forensic immigration evaluations — and explains the legal pathways to the vendor archive, why therapist-patient privilege does not govern the vendor's response, and how on-device processing eliminates the independently held archive entirely. https://therapydraft.com/blog/court-ordered-therapy-probation-diversion-documentation https://therapydraft.com/blog/court-ordered-therapy-probation-diversion-documentation Sat, 06 Jun 2026 18:00:00 GMT Court-ordered therapy — in drug courts, DUI diversion, probation-mandated mental health treatment, and batterer intervention programs — requires treatment providers to report compliance to courts and probation officers by design. Clients sign releases authorizing those compliance reports. What the release does not cover is the cloud AI scribe vendor's independently retained archive of verbatim session audio: a separate body of records with independent legal status, reachable through probation revocation proceedings, criminal discovery, and civil subpoena on pathways that run outside the treatment provider's mandated-reporting framework. On-device processing eliminates the vendor archive — mandated reports still go to the court or probation officer, but no vendor holds a verbatim record of what was said. https://therapydraft.com/blog/guardianship-conservatorship-capacity-therapy-records https://therapydraft.com/blog/guardianship-conservatorship-capacity-therapy-records Sat, 06 Jun 2026 12:00:00 GMT Adult guardianship and conservatorship proceedings determine whether a living person has decision-making capacity — and therapy records are recognized evidence in these determinations. A cloud AI scribe vendor holds verbatim session audio as independently retained business records: a separate archive from the therapist's clinical notes, reachable by the adversarial petitioner through civil discovery without any demand on the therapist. This post explains how guardianship proceedings work, what session content bears on capacity and undue influence, how the privilege analysis shifts when the patient is the subject of a live proceeding — from the proposed ward's attorney, through the court visitor, to the appointed guardian — and how on-device processing eliminates the vendor archive entirely, keeping session content in one custody location under professional documentation judgment. https://therapydraft.com/blog/security-clearance-therapy-records-sf86-doha https://therapydraft.com/blog/security-clearance-therapy-records-sf86-doha Thu, 05 Jun 2026 24:20:00 GMT Clients holding or seeking federal security clearances face a documentation risk that does not apply to most therapy clients: DCSA background investigators can request healthcare records under the SF-86 release authorization, DOHA hearings adjudicating Guideline I (Psychological Conditions) can compel production of therapy records, and the psychotherapist-patient privilege established in Jaffee v. Redmond has limits in the national security administrative context. A cloud AI scribe vendor holds verbatim session audio as independently retained business records outside the therapist's clinical records — records that capture adjudicatively relevant content across multiple guideline categories (financial stress, foreign contacts, substance use, professional conflicts) in the ordinary course of psychotherapy. This post explains the SF-86 release and what it authorizes, how DCSA investigators access healthcare records, what DOHA hearings are and when therapy records become central, the limits of Jaffee privilege against vendor subpoenas, and how on-device processing keeps session content in one custody location under the therapist's professional documentation judgment rather than distributed across a cloud vendor's independently retained archive. https://therapydraft.com/blog/marital-communications-privilege-couples-therapy-insurance-eob https://therapydraft.com/blog/marital-communications-privilege-couples-therapy-insurance-eob Fri, 05 Jun 2026 23:55:00 GMT Couples therapy creates privacy exposure on two tracks before any legal process begins: insurance Explanations of Benefits that reach the subscribing spouse as a routine billing artifact — no court order required — and a marital communications privilege doctrine whose application to sessions involving a therapist is legally unsettled and varies significantly by state. A cloud AI scribe vendor adds a third track: an independently held archive of session audio reachable through civil subpoena without any demand reaching the therapist first. This post distinguishes marital communications privilege from therapist-patient privilege, explains how the presence of a therapist may defeat the marital communications privilege threshold requirement in many jurisdictions, covers the insurance EOB as an administrative disclosure mechanism that precedes any adversarial legal process, and addresses how self-pay and on-device processing address different layers of the problem — EOB trail and vendor archive — neither alone addressing both. https://therapydraft.com/blog/intimate-partner-violence-therapy-documentation-hipaa-cloud-ai-scribe https://therapydraft.com/blog/intimate-partner-violence-therapy-documentation-hipaa-cloud-ai-scribe Fri, 05 Jun 2026 23:30:00 GMT Safety planning sessions capture a client's exit strategy — where they are going, who they are calling, what financial resources they have secured. That safety-enabling information becomes safety-defeating if it reaches the perpetrator. This post covers HIPAA's 45 CFR 164.512(c) domestic violence provision (permissive at the federal level, not mandatory) and how state mandatory reporting laws vary significantly; what a cloud AI scribe captures in IPV and safety planning sessions (perpetrator identification, housing destination, financial resources, exit timeline, legal proceeding details); why civil proceedings — protection orders, divorce, custody — allow subpoenas to be directed at vendors independently of any demand on the therapist; the privilege assertion gap when a vendor is the subpoena respondent rather than the therapist; the safety planning documentation paradox (specificity that enables safe exit is specificity that enables interception if it reaches the perpetrator); law enforcement access that runs around the therapist to the vendor; and how on-device processing eliminates the independent vendor archive entirely, keeping all session content in one custody location subject to the therapist's confidentiality framework. https://therapydraft.com/blog/lgbtq-therapy-documentation-gender-identity-hipaa https://therapydraft.com/blog/lgbtq-therapy-documentation-gender-identity-hipaa Fri, 05 Jun 2026 22:00:00 GMT Sexual orientation and gender identity are among the most sensitive categories of PHI in a therapy record — and the legal environment surrounding them has changed faster than any other area of health privacy law in the last three years. This post covers the 2024–2026 wave of state parental-notification laws (Florida, and successor laws in other states extending to licensed therapists in private settings), how these laws interact with HIPAA's minor-consent discretion, gender-affirming care restriction legislation and its documentation implications, conversion therapy ban documentation (how the same record defends against a conversion therapy complaint and potentially exposes the therapist in a gender-affirming care restriction claim), the cloud AI scribe as independent data custodian with a verbatim archive reachable through law enforcement process and civil subpoena in restrictive states, adult LGBTQ+ client exposure in employment disputes and security clearance proceedings, and how on-device processing eliminates the vendor archive and the legal exposure tied to it. https://therapydraft.com/blog/42-cfr-part-2-co-occurring-disorders-dual-record-ai-scribes https://therapydraft.com/blog/42-cfr-part-2-co-occurring-disorders-dual-record-ai-scribes Fri, 05 Jun 2026 18:00:00 GMT Most discussions of 42 CFR Part 2 and AI scribes stop at addiction counseling. But the majority of SUD treatment happens in co-occurring disorder (COD) contexts — integrated mental health and substance use treatment where the Part 2 boundary is harder to draw and the CARES Act 2024 final rule creates audit trail requirements that cloud AI scribe vendors are not built to satisfy. This post covers who qualifies as a Part 2 program (including integrated behavioral health practices billing Medicare/Medicaid that treat SUD alongside mental health); the content-based "identifiable as SUD" standard and why integrated COD notes are Part 2-protected in full; the hospital-based dual-record structure (HIPAA-only general medical record plus Part 2-protected SUD program record for the same patient); what the 2024 CARES Act final rule changed (general consent for TPO uses) and what remained stricter than HIPAA (law enforcement access, criminal proceedings prohibition, per-disclosure audit trail requirement); why the audit trail requirement creates a structural compliance gap for cloud AI scribes; what cloud scribes capture in a COD session that is Part 2-protected (SUD history verbatim, MAT medications, relapse disclosures, integrated MH/SUD narrative, legal history); and how on-device processing eliminates the vendor disclosure event and the compliance framework it triggers. https://therapydraft.com/blog/veterans-military-mental-health-records-ai-scribes https://therapydraft.com/blog/veterans-military-mental-health-records-ai-scribes Fri, 05 Jun 2026 03:00:00 GMT Veterans who see community-care therapists carry documentation concerns that have no civilian analogue: session records that can become VA disability evidence, disclosures shaped by DoD chain-of-command fears, and Military Sexual Trauma narratives that name perpetrators still connected to military systems. This post covers the three-track records landscape for veterans (VAMC, TRICARE community care, private pay); how VA disability claims create VBA access to treatment records via VA Form 21-4142; DoD chain-of-command fears among active-duty and Guard/Reserve members in community care; MST documentation specifics (perpetrator identification, incident details, reporting history) and why community-care MST survivors are specifically vulnerable when cloud AI scribes independently hold session content; what cloud AI scribes capture from PTSD sessions (combat narratives, disability claim context, symptom severity as disability evidence, substance use history, suicidal ideation); TRICARE billing as a secondary records trail; and how on-device processing eliminates the vendor archive and makes the therapist the sole custodian of all session content. https://therapydraft.com/blog/adolescent-therapy-records-parental-access-ai-scribes https://therapydraft.com/blog/adolescent-therapy-records-parental-access-ai-scribes Thu, 04 Jun 2026 23:30:00 GMT Most states allow minors ages 12–17 to consent to outpatient mental health treatment independently, giving therapists HIPAA discretion to withhold session records from parents. A cloud AI scribe vendor holds session audio as independent business records outside that discretion — directly reachable by a parent's attorney through a subpoena to the vendor. This post covers the HIPAA personal-representative framework and its minor-consent exceptions, the state-by-state minor consent landscape (California 12+, Illinois 12+, Washington 13+, Oregon 14+, Florida 13+), the mature minor doctrine and its limitations, how cloud AI scribe vendors hold session audio outside the therapist's consent-structure analysis, the authorized-representative access pathway, and how on-device processing eliminates the vendor's independently-held archive entirely. https://therapydraft.com/blog/eating-disorder-level-of-care-documentation-ai-scribes https://therapydraft.com/blog/eating-disorder-level-of-care-documentation-ai-scribes Thu, 04 Jun 2026 20:00:00 GMT The level-of-care decision in eating disorder treatment — IOP, PHP, residential, or inpatient — is the most legally exposed moment in the clinical record. When a cloud AI scribe is running during the LOC consultation, the vendor captures verbatim the medical instability criteria discussed, behavioral indicators disclosed, client behavioral self-report, and treatment team reasoning in expressing uncertainties or disagreements. This post covers the medical instability criteria that drive LOC decisions, the multi-disciplinary team custody problem (multiple vendors each holding independent archives of the same team consultation), the insurance dispute path and parity litigation context, the malpractice exposure from under-treatment medical complications, and how on-device processing eliminates the vendor's independent LOC consultation archive entirely. https://therapydraft.com/blog/safety-planning-documentation-ai-scribes https://therapydraft.com/blog/safety-planning-documentation-ai-scribes Thu, 04 Jun 2026 16:00:00 GMT When a client presents in suicidal crisis, the safety planning session contains the most legally consequential content in clinical practice: means access disclosures, C-SSRS or CAMS interview content, prior attempt history, and the hospitalization decision exchange. When a cloud AI scribe is running, every word enters a third-party archive held independently on the vendor's servers — reachable in wrongful death litigation and licensing board investigations separately from the therapist's own clinical record. This post covers what crisis sessions contain, the malpractice exposure structure in wrongful death cases, licensing board investigations after a client's death, the limits of the psychotherapy notes exception, and how on-device processing eliminates the third-party archive entirely. https://therapydraft.com/blog/neuropsychological-evaluation-documentation-ai-scribes https://therapydraft.com/blog/neuropsychological-evaluation-documentation-ai-scribes Thu, 04 Jun 2026 12:00:00 GMT Neuropsychological evaluations produce quantified cognitive profiles — IQ scores, memory index scores, executive function deficits, dementia staging determinations — that carry lifelong consequences in disability, litigation, and guardianship proceedings. When a cloud AI scribe is present for any portion of the evaluation (clinical interview, history-taking, feedback session, verbal dictation), the vendor holds an independent archive of this data. Disability insurers, personal injury attorneys, and guardianship courts subpoena all available record sources. The cognitive profile is also highly re-identifiable: IQ pattern, memory index, processing speed, age, and diagnosis create a near-unique cognitive fingerprint. This post covers the TBI litigation context, dementia staging and contested guardianship, forensic competency evaluation, the longitudinal data retention problem, and how on-device processing eliminates the vendor archive entirely. https://therapydraft.com/blog/group-practice-contractor-baa-ai-scribe https://therapydraft.com/blog/group-practice-contractor-baa-ai-scribe Thu, 04 Jun 2026 08:00:00 GMT Group practices are covered entities; their clinicians are often independent contractors, not employees. When a contractor brings a personal cloud AI scribe subscription into a group practice setting, the group practice typically has no BAA with the vendor and may not even know the tool is being used. This post covers how the workforce member vs. business associate distinction determines liability, what the Omnibus Rule sub-contractor BAA chain requires, how a breach of a contractor's personal vendor exposes the group practice to notification obligations, and how on-device AI scribe processing eliminates the cloud vendor from the BA chain entirely. https://therapydraft.com/blog/psypact-telehealth-cloud-data-custody https://therapydraft.com/blog/psypact-telehealth-cloud-data-custody Wed, 03 Jun 2026 20:00:00 GMT PSYPACT lets psychologists practice telehealth across 38+ states on one compact authorization. It says nothing about which state's privacy law governs session data held by a cloud AI scribe vendor. When a PSYPACT practitioner uses a cloud AI scribe, the vendor independently holds session audio from clients across multiple compact states — each with its own breach notification law, state-level privacy statute, and privilege framework. This post covers what PSYPACT actually authorizes, the three-jurisdiction data custody map for a PSYPACT telehealth session with a cloud AI scribe, the state breach notification patchwork, state privacy laws that exceed HIPAA (California CMIA, New York Mental Hygiene Law, Texas HB300), and how on-device processing eliminates the vendor's independent multi-state data custody entirely. https://therapydraft.com/blog/immigration-psychology-evaluations-asylum-documentation https://therapydraft.com/blog/immigration-psychology-evaluations-asylum-documentation Wed, 03 Jun 2026 18:00:00 GMT Immigration psychological evaluations — asylum, VAWA, U-visa, T-visa, and hardship assessments — contain persecution narratives identifying specific countries and persecutors, detailed trauma histories, immigration status information, and expert clinical opinion on whether the client's presentation is consistent with claimed persecution. When a cloud AI scribe is present during the clinical interview, the vendor holds a verbatim record of all of that independently — reachable by USCIS, ICE, immigration courts, and potentially by foreign governments through Mutual Legal Assistance Treaty processes. This post covers what immigration evaluations document, what cloud AI scribes capture from evaluation sessions, who can reach the vendor's independently-held data, why attorney work-product doctrine does not extend to vendor records, and how on-device processing keeps verbatim persecution narratives under single-custodian control. https://therapydraft.com/blog/mandated-reporting-ai-scribes-cps-documentation https://therapydraft.com/blog/mandated-reporting-ai-scribes-cps-documentation Wed, 03 Jun 2026 16:00:00 GMT The session in which a client discloses reportable abuse is the most forensically significant documentation event in a clinical record. The client's first-narrative disclosure — the exact words, sequence, and detail they used before any formal investigative interview — carries substantial evidentiary weight in criminal prosecutions, CPS investigations, and family court proceedings. When a cloud AI scribe was running during that session, the vendor independently holds a verbatim audio record of the disclosure, reachable by subpoena to the vendor as a separate legal entity. This post covers what mandated reporting documentation contains, the HIPAA mandatory-reporting exception and what it does not cover for vendor-retained records, what categories of proceedings can reach the vendor's disclosure audio, and how on-device processing eliminates the vendor's independent custody of the first-narrative record. https://therapydraft.com/blog/psychiatric-medication-management-documentation-ai-scribes https://therapydraft.com/blog/psychiatric-medication-management-documentation-ai-scribes Wed, 03 Jun 2026 14:00:00 GMT Medication management visits produce documentation that is categorically different from therapy notes — PDMP query results, controlled substance prescriptions, mental status exams, and suicidality screening records. When a cloud AI scribe is running during a prescriber encounter, the vendor retains a verbatim record of all of it, including the patient's controlled substance fill history as discussed in session. This post covers what a medication management visit actually documents, what PDMP queries reveal and how they appear in cloud scribe data, why PMHNPs who prescribe and provide brief therapy in the same encounter create an undifferentiated audio stream the vendor holds without structural separation, and how on-device processing eliminates the vendor's independent record. https://therapydraft.com/blog/school-based-counseling-documentation-ferpa-hipaa https://therapydraft.com/blog/school-based-counseling-documentation-ferpa-hipaa Wed, 03 Jun 2026 12:00:00 GMT School-employed mental health professionals — school counselors, school psychologists, school social workers — work under FERPA, not HIPAA. HIPAA contains an explicit carve-out for education records covered by FERPA. Private-practice therapists who treat students, receive school records, or conduct independent educational evaluations operate in the boundary zone between the two frameworks. This post covers what the distinction means for documentation obligations, the sole possession exception for school counselors, how independent evaluation records split across FERPA and HIPAA simultaneously, how records flow between school and private-practice settings, and what cloud AI scribe vendor authorization looks like under FERPA's school-official standard vs. HIPAA's BAA framework. https://therapydraft.com/blog/adhd-autism-evaluation-records-hipaa-ai-scribes https://therapydraft.com/blog/adhd-autism-evaluation-records-hipaa-ai-scribes Tue, 02 Jun 2026 23:50:00 GMT A psychological evaluation for ADHD or autism is not a therapy progress note — it is a comprehensive cognitive profile containing IQ scores, processing speed indices, working memory measures, adaptive behavior ratings, and a diagnostic conclusion that follows the client for years. When a cloud AI scribe processes clinical interview or feedback sessions, that profile sits on vendor infrastructure independently of the clinician's records. This post covers what assessment documentation actually contains, how FERPA and HIPAA intersect for the same child's evaluation records, what insurers receive during pre-authorization, and how on-device processing keeps the verbatim developmental history and diagnosis disclosure under one custodian. https://therapydraft.com/blog/ehr-paste-formatting-simplepractice-theranest-therapynotes https://therapydraft.com/blog/ehr-paste-formatting-simplepractice-theranest-therapynotes Tue, 02 Jun 2026 23:30:00 GMT AI-drafted therapy notes don't match EHR field structures by default. Each of the five most common private-practice EHRs — SimplePractice, TheraNest, TherapyNotes, Jane App, IntakeQ — has a different note editor and paste workflow. This guide covers format tips per platform: which EHRs take a full SOAP/DAP paste directly, which require splitting across structured fields, and what documentation custody means once the note is signed in your chart — whether the AI was cloud-based or on-device. https://therapydraft.com/blog/eating-disorder-therapy-notes-hipaa https://therapydraft.com/blog/eating-disorder-therapy-notes-hipaa Tue, 02 Jun 2026 22:00:00 GMT Eating disorder clients often self-pay specifically to keep their diagnosis off insurance records. Minor patients in many states can consent to ED treatment without parental involvement and have a legal interest in controlling their records. When a cloud AI scribe processes those sessions, the vendor holds verbatim audio of restriction behaviors, purging history, and body image disclosures on its own infrastructure — outside the therapist's disclosure controls and independently subpoenable. This post covers why ED records require extra care, what the insurance-disclosure and minor-consent dimensions mean for documentation architecture, and how on-device processing keeps one custodian for the most sensitive session content therapists generate. https://therapydraft.com/blog/tarasoff-duty-to-warn-ai-scribe-documentation https://therapydraft.com/blog/tarasoff-duty-to-warn-ai-scribe-documentation Tue, 02 Jun 2026 18:00:00 GMT When a client makes a Tarasoff-triggering threat in a cloud-scribed session, the vendor holds verbatim audio of the threat, the victim's name, and the surrounding clinical context — an evidentiary record reachable by the victim's attorney, law enforcement, or a licensing board separately from the therapist's own documentation. The same custody problem applies to mandatory reporting: child abuse disclosures in cloud-scribed sessions create an independent vendor record available to CPS proceedings and criminal prosecution. Here is what duty-to-warn documentation requires, where cloud scribe records create independent legal exposure, and how on-device processing keeps the verbatim record under one custodian. https://therapydraft.com/blog/grief-therapy-documentation-probate-subpoena-risk https://therapydraft.com/blog/grief-therapy-documentation-probate-subpoena-risk Tue, 02 Jun 2026 12:00:00 GMT HIPAA protects deceased clients' therapy records for 50 years after death. The executor of the estate inherits the patient's HIPAA access rights. Probate courts routinely subpoena mental health records in contested-will proceedings where testamentary capacity is at issue. When a cloud AI scribe processed grief sessions, the vendor holds the deceased client's audio on its own infrastructure — reachable by legal process the therapist cannot intercept. Here is what grief therapists need to know about deceased-patient PHI, probate subpoenas, and why on-device note drafting keeps session custody with the therapist. https://therapydraft.com/blog/supervision-consultation-documentation-phi https://therapydraft.com/blog/supervision-consultation-documentation-phi Mon, 01 Jun 2026 23:55:00 GMT Clinical supervision requires disclosing client PHI to a third party. When a cloud AI scribe has already processed the session, the vendor holds the full transcript before the supervisee says a word to their supervisor. Peer consultation groups multiply the exposure further. Here is what HIPAA's minimum-necessary rule requires in supervision contexts, whether supervisors need BAAs, and how on-device note drafting keeps the disclosure decision in the therapist's hands. https://therapydraft.com/blog/perinatal-mental-health-documentation-ai-scribes https://therapydraft.com/blog/perinatal-mental-health-documentation-ai-scribes Mon, 01 Jun 2026 23:30:00 GMT Perinatal mental health sessions routinely capture health information about the fetus or infant — a person who has not signed any consent form. When cloud AI scribes process a postpartum session, the vendor holds the infant's health disclosures, name, and voice on their infrastructure. Here is what that means for consent, CPS subpoena risk, and why on-device processing resolves both problems at the architectural level. https://therapydraft.com/blog/cbt-progress-notes-insurance-utilization-review https://therapydraft.com/blog/cbt-progress-notes-insurance-utilization-review Mon, 01 Jun 2026 22:00:00 GMT Insurance utilization review for outpatient CBT requires medical necessity language, functional impairment descriptors, measurable goal progress, and a continued-care rationale — elements that standard SOAP notes often omit. Here is what insurance-ready CBT documentation looks like, where AI scribes fall short by default, and how TherapyDraft's CBT template generates the right structure on-device. https://therapydraft.com/blog/family-therapy-records-custody-ai-scribes https://therapydraft.com/blog/family-therapy-records-custody-ai-scribes Mon, 01 Jun 2026 18:00:00 GMT Family therapy sessions capture PHI on parents, children, and extended family in a single recording. Both parents with legal custody can access minor child therapy records under HIPAA — and in a custody dispute, both attorneys can subpoena the cloud AI scribe vendor for raw session audio. Here is what the dual-subpoena risk means and why on-device processing eliminates the vendor from the chain. https://therapydraft.com/blog/group-therapy-notes-hipaa-multi-party-phi https://therapydraft.com/blog/group-therapy-notes-hipaa-multi-party-phi Mon, 01 Jun 2026 12:00:00 GMT In group therapy, one session recording contains the protected health information of 6 to 12 clients simultaneously. Here is what that means for AI scribe data custody, consent, and the legal risk that no BAA can fully address. https://therapydraft.com/blog/aba-session-notes-rbt-bcba-supervision-loops https://therapydraft.com/blog/aba-session-notes-rbt-bcba-supervision-loops Sun, 31 May 2026 12:00:00 GMT RBTs write ABA session notes daily; BCBAs review and co-sign weekly. This guide covers the documentation workflow, what cloud AI scribes do with that multi-seat behavioral data, and why on-device drafting fits the supervision loop better. https://therapydraft.com/blog/dbt-chain-analysis-notes-ai-scribes https://therapydraft.com/blog/dbt-chain-analysis-notes-ai-scribes Sun, 31 May 2026 12:00:00 GMT Chain-analysis notes contain behavioral detail — self-harm methods, precipitating events, named third parties — that standard SOAP notes never capture. Here is what cloud AI scribes receive from a DBT session and why on-device processing changes the risk calculus. https://therapydraft.com/blog/emdr-trauma-processing-notes-and-vendor-data-flows https://therapydraft.com/blog/emdr-trauma-processing-notes-and-vendor-data-flows Sun, 31 May 2026 12:00:00 GMT EMDR session notes capture detailed trauma disclosures, SUD/VOC scores, and reprocessing sequences. This guide covers what cloud AI scribes actually do with that audio — and why on-device inference matters for trauma-specialized practices. https://therapydraft.com/blog/play-therapy-documentation-and-minor-phi https://therapydraft.com/blog/play-therapy-documentation-and-minor-phi Sun, 31 May 2026 12:00:00 GMT Play therapy session notes capture what children cannot say in words — and that makes their PHI especially sensitive. This guide covers documentation requirements, what cloud AI scribes do with child therapy audio, and the on-device drafting alternative. https://therapydraft.com/blog/psychotherapy-notes-vs-progress-notes-hipaa https://therapydraft.com/blog/psychotherapy-notes-vs-progress-notes-hipaa Sun, 31 May 2026 12:00:00 GMT Under HIPAA, 'psychotherapy notes' and 'progress notes' are legally distinct categories with different access rights, retention rules, and disclosure requirements. Here is what that means for therapists using AI scribes in 2026. https://therapydraft.com/blog/telehealth-therapy-notes-hipaa-state-lines https://therapydraft.com/blog/telehealth-therapy-notes-hipaa-state-lines Sun, 31 May 2026 12:00:00 GMT HIPAA applies uniformly across state lines — but state privacy laws do not. Here is how cross-state telehealth sessions create compounding documentation and AI-scribe risk that a signed BAA does not resolve. https://therapydraft.com/blog/42-cfr-part-2-and-ai-scribes-for-addiction-counseling https://therapydraft.com/blog/42-cfr-part-2-and-ai-scribes-for-addiction-counseling Sat, 30 May 2026 12:00:00 GMT How 42 CFR Part 2 — the federal statute stricter than HIPAA for substance use disorder records — applies to AI session note tools in 2026. The consent-per-disclosure problem, what cloud scribes trigger, and why on-device note generation removes the compliance gap entirely. https://therapydraft.com/blog/couples-therapy-records-divorce-discovery https://therapydraft.com/blog/couples-therapy-records-divorce-discovery Sat, 30 May 2026 12:00:00 GMT Can couples therapy notes be used in divorce proceedings? A 2026 guide for couples therapists covering privilege, joint-client complications, the cloud AI scribe custody problem, and why on-device note generation changes the calculus. https://therapydraft.com/blog/hipaa-for-private-practice-therapists-2026-edition https://therapydraft.com/blog/hipaa-for-private-practice-therapists-2026-edition Thu, 30 Apr 2026 12:00:00 GMT What changed for private-practice mental-health HIPAA compliance between 2022 and 2026 — subprocessor-breach reality, plaintiff-side discovery against AI vendors, the new AI-scribe question, and the five-page checklist a solo practice can actually keep current. https://therapydraft.com/blog/what-cloud-ai-scribes-actually-send-to-servers https://therapydraft.com/blog/what-cloud-ai-scribes-actually-send-to-servers Thu, 30 Apr 2026 12:00:00 GMT A category-by-category factual read of what cloud AI scribes for therapists transmit, store, and process — drawn from each vendor's public privacy disclosures and the unavoidable architecture of a cloud SaaS. No reputational claims, just the data flow. https://therapydraft.com/blog/can-an-ai-therapy-note-be-subpoenaed https://therapydraft.com/blog/can-an-ai-therapy-note-be-subpoenaed Sat, 25 Apr 2026 12:00:00 GMT How civil and criminal subpoenas reach AI-generated therapy notes in 2026 — the custody question, the notification question, psychotherapist-patient privilege, and how architecture changes who gets served. https://therapydraft.com/blog/what-is-a-baa-and-what-it-doesnt-cover https://therapydraft.com/blog/what-is-a-baa-and-what-it-doesnt-cover Fri, 24 Apr 2026 12:00:00 GMT A plain-language walkthrough of what a Business Associate Agreement actually does, what it doesn't, and why the 2026 subprocessor-breach pattern has changed how clinicians should read one.