https://therapydraft.com/blog/ Essays on on-device AI, HIPAA architecture, and the clinical workflows TherapyDraft was built around. en-us Fri, 01 May 2026 01:16:46 GMT https://therapydraft.com/blog/hipaa-for-private-practice-therapists-2026-edition https://therapydraft.com/blog/hipaa-for-private-practice-therapists-2026-edition Thu, 30 Apr 2026 12:00:00 GMT What changed for private-practice mental-health HIPAA compliance between 2022 and 2026 — subprocessor-breach reality, plaintiff-side discovery against AI vendors, the new AI-scribe question, and the five-page checklist a solo practice can actually keep current. https://therapydraft.com/blog/what-cloud-ai-scribes-actually-send-to-servers https://therapydraft.com/blog/what-cloud-ai-scribes-actually-send-to-servers Thu, 30 Apr 2026 12:00:00 GMT A category-by-category factual read of what cloud AI scribes for therapists transmit, store, and process — drawn from each vendor's public privacy disclosures and the unavoidable architecture of a cloud SaaS. No reputational claims, just the data flow. https://therapydraft.com/blog/can-an-ai-therapy-note-be-subpoenaed https://therapydraft.com/blog/can-an-ai-therapy-note-be-subpoenaed Sat, 25 Apr 2026 12:00:00 GMT How civil and criminal subpoenas reach AI-generated therapy notes in 2026 — the custody question, the notification question, psychotherapist-patient privilege, and how architecture changes who gets served. https://therapydraft.com/blog/what-is-a-baa-and-what-it-doesnt-cover https://therapydraft.com/blog/what-is-a-baa-and-what-it-doesnt-cover Fri, 24 Apr 2026 12:00:00 GMT A plain-language walkthrough of what a Business Associate Agreement actually does, what it doesn't, and why the 2026 subprocessor-breach pattern has changed how clinicians should read one.