This post contains affiliate links. If you click through and make a purchase, I may earn a commission at no extra cost to you. I only recommend tools I genuinely believe can help your practice.
If you have played around with ChatGPT or Claude, you have probably had this thought at some point: “Wait, am I even allowed to use this in my practice?”
It is a fair question. You handle protected health information every day, and the last thing you want is to accidentally create a HIPAA problem while you are just trying to save yourself some time.
Here is the good news. There are dozens of ways to use AI in a mental health practice that never touch a client’s information at all. The trick is knowing where the line is, and building habits that keep you on the right side of it.
Quick Answer
AI is safe to use in your practice as long as it never sees protected health information, that is, anything that could identify a specific client along with their health, treatment, or payment details. Administrative tasks like writing SOPs, drafting policies, creating checklists, researching software, and editing website copy are all generally safe uses. Anything involving an actual client’s name, diagnosis, insurance details, or session content is not, unless the tool has a signed Business Associate Agreement and you have configured it correctly for that purpose.
Below are 15 specific, practical ways to use AI without putting client privacy at risk, plus a simple test you can run before you use AI for anything new.
The Real Question Isn’t “Is This Administrative?”
A lot of therapists assume that if a task is administrative rather than clinical, it is automatically fine to hand to AI. That is not quite right.
The real question is whether the AI tool receives, sees, stores, or has access to protected health information while you are doing the task. An administrative task can still be risky if you paste in a client’s name or upload a document with identifying details.
So before you use AI for anything, run through this quick checklist:
- Does this contain PHI? If yes, stop.
- Does the AI tool have access to a system where PHI lives? If yes, stop and think through how that access is configured.
- Does the tool have a Business Associate Agreement in place if one is required? If no, do not use it for PHI.
- Can you accomplish the same task without giving the AI any client information? If yes, do that instead.
Keep that framework in mind as you go through the list below. Every one of these 15 uses is built around giving AI your process, not your patients.
15 Privacy-Safe Ways to Use AI in Your Practice
1. Create an Insurance Verification SOP
Give AI your general verification process, your typical payer requirements, and the steps you follow. Do not give it a patient’s name, date of birth, member ID, or diagnosis.
Try a prompt like: “Create a step-by-step insurance verification SOP for a solo mental health practice, including eligibility, benefits, copay, deductible, coinsurance, authorization requirements, and how to document the verification.”
This turns a process that lives in your head into something you can hand to a VA or biller, without a single client detail involved.
2. Build an Insurance Denial Workflow
Have AI map out a decision tree for handling denials: denial received, identify the reason, decide whether to correct or appeal, gather documentation, submit, track, follow up. None of that requires an actual patient’s claim.
If you want to go deeper on the appeals side, we have a full step-by-step guide to appealing an insurance denial that pairs well with this workflow.
3. Build a New Client Administrative Checklist
Ask AI to build a generic checklist covering intake paperwork, consent forms, insurance information, payment setup, portal access, appointment reminders, and documentation requirements. You are creating the process here, not processing anyone’s actual information.
For a more detailed starting point, our insurance verification checklist for therapists covers what to check before that first appointment.
4. Write Practice Policies
This is a great one to hand to Claude specifically, since it tends to be strong with longer, structured documents. Think cancellation policy, no-show policy, communication policy, telehealth policy, payment policy, records request policy, and insurance billing policy.
Just remember AI can draft the structure and language, but you (or your consultant) should review the final version for accuracy in your state and specialty.
5. Turn Your Own Knowledge Into a Formal SOP
If you already have a process running in your head, describe it in plain language and let AI clean it up. For example: “When a new insurance client comes in, I verify benefits before the first appointment. If authorization is required, I get it before billing.”
Feed that into ChatGPT or Claude and ask for a formal, step-by-step SOP. No client information required, and you walk away with documentation you can actually hand off to someone else.
6. Prep for a Non-Clinical Meeting
Tools like Littlebird are built to sit in the background and help you capture and organize meetings, whether that is a call with a virtual assistant, a biller, a website designer, an EHR vendor, or a business coach.
Used correctly, this can save you real time. Used carelessly, it can turn into a privacy problem, because tools like this are designed to see what is on your screen. More on exactly how to handle that in a moment.
7. Take Notes During Business Meetings
The same idea applies to meeting-notes tools like Granola. These are genuinely useful for business meetings: vendor calls, consultations, planning sessions with your team.
The line to draw here is clear. A business meeting about your practice operations is a very different situation than a therapy session containing PHI. AI notetakers should never be anywhere near the second one.
8. Build a Practice Dashboard
Give AI fictional numbers or genuinely de-identified totals, like monthly revenue, expenses, new client counts, and session volume, and ask it to identify trends or build you a simple dashboard in a spreadsheet.
What you should never do is upload an actual patient-level billing report with names, dates of birth, or claim numbers attached.
9. Create a Referral Tracking System
Have AI design a spreadsheet with columns for referral source, date received, contact status, appointment scheduled, referral status, and follow-up date. Build the structure with AI, then fill in real names yourself, outside the AI conversation.
10. Build a HIPAA Training Checklist
AI can help you organize a generic training program covering PHI basics, the minimum necessary standard, password and security practices, email, texting, telehealth, incident reporting, social media, and device security. Have your practice verify the final material against current HIPAA requirements before using it for training.
11. Improve Your Website Copy
This one is easy, since your website content is public information anyway. Use ChatGPT to rewrite your homepage headline, draft FAQ questions for a specific specialty, or clean up a service description so prospective clients understand it faster.
12. Create Blog Content
Brainstorming topics, building outlines, rewriting drafts, generating FAQs, improving readability, writing meta descriptions, this is one of the most natural fits for AI in a practice. The one rule to keep in mind is to never feed AI actual client stories or session material, even anonymized ones that might still be identifiable.
If you want a running list of prompts built specifically for this kind of work, check out our 25 ChatGPT prompts for therapists and mental health billers.
13. Research EHRs and Practice Software
Perplexity is a solid choice here because it is built for research and tends to cite its sources. You can ask something like “Compare SimplePractice, TherapyNotes, Sessions Health, and Jane for a solo therapist who accepts insurance,” and get a useful, sourced overview.
That is a completely different situation from pasting in your own EHR record and asking AI what you are doing wrong with a specific client. The first is research. The second is PHI.
Curious how these platforms stack up? We have several head-to-head comparisons, including SimplePractice vs Jane and Sessions Health vs SimplePractice.
14. Create Patient Education Templates
AI can help you draft generic educational handouts: what to expect at a first appointment, understanding your deductible, what happens after a denied claim, how telehealth appointments work, how to prepare for a session. These are written for clients in general, not about any specific client, so review the clinical accuracy and you are good to go.
15. Write Better Administrative Emails
Instead of pasting an actual client’s email into AI, build a generic template first. Something like “Write a friendly email reminding a client to complete their intake paperwork before their first appointment,” then drop in the real details yourself afterward. Grammarly works well here too, especially if you just need a quick tone or clarity check on something you already wrote.
A Note on Tools That Can See Your Screen or Work in the Background
A few of the tools mentioned above, Littlebird for screen capture and Cowork for running background tasks, work differently than a typical chatbot. Instead of only responding when you type a prompt, they are designed to observe your screen or work across your apps in the background, which is exactly what makes them useful for things like meeting notes and multi-step tasks.
That same capability is also exactly why you need to set a boundary before you turn one on.
If you use a screen-aware or background AI tool, check for a setting that lets you exclude specific sites or apps from its view, sometimes called a block list, an app exclusion list, or a privacy zone. Use it to turn off visibility for:
- Your EHR (SimplePractice, TherapyNotes, Jane, or whatever you use)
- Any billing or clearinghouse portal
- Your bank account or financial software
- Anywhere you log in with a password, including your email if it contains client correspondence
Think of it the same way you would think about a person sitting in your office. You would not want an assistant reading over your shoulder while you pull up a client’s chart, even if they are only there to help you take notes on a totally separate call. Give AI tools that same boundary, on purpose, before you start using them day to day.
When AI Should Not Be Used
To bring it back to the framework from earlier in this article, here is the short version. AI is not automatically safe just because a task feels administrative. Before you use it, ask whether the tool will see, store, or have access to anything that could identify a client, whether that is a name, a diagnosis, an insurance detail, or session content.
If the answer is yes, find another way to get the task done, or confirm the tool has a proper Business Associate Agreement in place and is configured correctly for that use.
Frequently Asked Questions
Is ChatGPT HIPAA compliant?
The free and standard consumer versions of ChatGPT do not include a Business Associate Agreement, which means they should not be used with protected health information. That does not stop you from using ChatGPT for the administrative and non-clinical tasks covered in this article. They do offer options with a BAA and for healthcare providers.
Can I use AI notetakers like Littlebird or Granola during therapy sessions?
No. These tools are built for business and administrative meetings, not clinical sessions. Keep them completely separate from any appointment where PHI is discussed.
What is the simplest rule for deciding if a task is safe for AI?
Ask yourself if the tool will see, store, or have access to anything that could identify a client. If the answer is yes in any way, do not use it for that task without a proper BAA in place.
Do I need a Business Associate Agreement for every AI tool I use?
Only for tools that will have access to PHI. If you are only using AI for the kinds of administrative tasks covered here, like SOPs, checklists, and website copy, a BAA is not necessary because the tool never touches client information in the first place.
Next Steps
Start small. Pick two or three tasks from this list, like building your insurance verification SOP or cleaning up your cancellation policy, and try them this week. Once you get comfortable with what “privacy-safe” actually looks like in practice, the rest of this list becomes second nature.
For more on where AI fits into the bigger picture of running your practice, take a look at our guides to the best AI tools for solo therapists and best AI scribes for therapists.
