Best AI Tools for Mental Health Virtual Assistants and Billers (Without Risking PHI)

This post may include affiliate links. If you sign up through one, I may earn a small commission at no extra cost to you. I only recommend tools I’d actually put in front of someone I know.

If you work with therapists, psychologists, counselors, or social workers, there’s a good chance you handle protected health information every day. That changes how you’re allowed to use AI.

Mental health virtual assistants and medical billers spend a surprising amount of time on repetitive admin work: writing emails, building SOPs, organizing projects, drafting checklists, researching software, troubleshooting workflows. AI can speed up almost all of it. But you can’t just paste a client’s insurance information into ChatGPT or connect an AI assistant to an EHR because it’s convenient.

The safest approach is a hard boundary. AI handles the admin work. Your approved, compliant systems handle anything that touches a real client.

This list is built around that boundary. Every tool below can genuinely help your day-to-day work without ever needing to see client information.

A quick note before we start: this isn’t legal or compliance advice. HIPAA requirements depend on your role, your client’s policies, your agreements, and how a specific tool is configured. When you’re not sure, ask the covered entity you’re working for, and a qualified HIPAA professional, before putting anything PHI-adjacent into an AI system.

Quick answer: General AI tools like ChatGPT and Claude are genuinely useful for mental health VAs and billers, as long as you keep protected health information completely out of the conversation. Use them for SOPs, templates, emails, and workflows built on generic or fictional data. Never paste in a claim, an EOB, a chart note, or anything else that could identify a real client, unless you’ve specifically confirmed the tool and your account are covered by a BAA and configured for HIPAA use.

The One Rule That Matters Most

If an AI tool doesn’t have an appropriate HIPAA configuration and a signed Business Associate Agreement, don’t put PHI into it. That includes:

• Client names, dates of birth, addresses, phone numbers, or emails
• Insurance member IDs or subscriber information
• Medical record numbers
• Diagnosis or treatment information
• Session notes
• Appointment details that identify a patient
• Claims, EOBs, insurance verification documents, or denial letters
• Referral information
• Anything that, combined with other details, could identify a specific client

And don’t assume removing the name is enough. A date of birth plus a provider name plus a diagnosis can still identify someone, even with the name stripped out.

What you can absolutely use AI for:

• Generic insurance verification checklists
• SOPs for claims submission or denial appeals
• Emails to a provider about a billing workflow
• Project management systems
• Blog topic brainstorming
• Website copy
• Onboarding checklists and training outlines
• Spreadsheet formulas built on fictional data
• Summarizing a software’s public documentation
• Troubleshooting a workflow without any patient details attached

The line is simple: “Help me write a generic claim-denial SOP” is fine. “Here’s Mary’s denied claim, tell me why it was rejected” is not.

1. ChatGPT

ChatGPT is genuinely useful for a VA or biller, as long as PHI never enters the conversation. It’s good at SOPs, checklists, email templates, training materials, workflow outlines, and spreadsheet formulas.

A safe starting prompt looks like this: “Create an SOP for verifying behavioral health insurance benefits for a private practice.”

What you shouldn’t do is paste an actual patient’s insurance details into the chat and ask ChatGPT to work out their benefits.

Good uses: SOP creation, workflow design, generic billing checklists, email drafts, administrative templates, training materials, content writing, spreadsheet help, brainstorming, non-PHI research.

Keep away: EOBs, claims, patient demographics, insurance IDs, clinical notes, diagnoses, anything containing PHI.

Best for: Almost any administrative or content task where you don’t need client information to complete it.

2. Claude

Claude handles a lot of the same territory as ChatGPT: turning a rough outline into a polished SOP, drafting training documentation, writing generic billing workflows, brainstorming, and helping with spreadsheets.

A useful test: if you could publish the information on your website without violating anyone’s privacy, it’s a reasonable candidate for a general AI workflow. If it came out of a patient’s chart, claim, EOB, or insurance portal, stop before you put it in.

Best for: Detailed writing, SOPs, research, and process development, without PHI in the mix.

3. Littlebird

Littlebird works more like a persistent AI assistant than a prompt-and-answer tool. It can capture and organize information from your computer activity, summarize meetings, and make your work searchable, which is exactly why you need to be deliberate about what it’s allowed to see if you handle PHI.

Littlebird does offer a healthcare configuration with HIPAA support, including a BAA. But if you’re using it as a general productivity assistant rather than inside a properly configured healthcare workflow, take the conservative route: don’t let it see your EHR.

My recommended setup: block your EHR URLs and any other PHI-containing systems, whether that’s SimplePractice, TherapyNotes, Jane, your clearinghouse, insurance portals, or secure client communication platforms.

Littlebird should see: your project management system, general research, internal admin work, non-PHI documents, meetings that don’t touch PHI, and your notes on general business operations.

Littlebird should not see: your EHR, patient charts, claims, EOBs, insurance portals with patient info, clinical documentation, or secure patient communications.

You don’t have to choose between using AI and protecting PHI. You can build the boundary in before you ever start using the tool.

Best for: VAs and billers who want a genuine AI assistant for admin work while keeping a hard wall around their EHR and any other PHI-containing systems.

See how Littlebird can help with non-clinical practice tasks while giving you control over which websites it can access.

4. Granola

Granola is an AI meeting-notes tool that captures and organizes meetings without a traditional bot joining the call. For a mental health VA or biller, that’s useful for non-clinical meetings: business operations calls, software demos, vendor conversations, planning sessions, training, and general team meetings.

Draw a firm line around therapy and clinical conversations. Don’t use Granola to record or transcribe anything containing PHI unless you’ve independently confirmed the workflow is HIPAA compliant and covered by an appropriate BAA. A practice meeting where someone happens to mention a client’s name can create the same problem. “It’s only a meeting” isn’t a sufficient safeguard when PHI is involved.

Best for: Non-clinical business and administrative meetings.

Spend less time typing during practice-management meetings with Granola.

5. Canva Magic Studio

Canva’s AI tools are useful for the marketing side of a VA or billing business: client onboarding materials, generic educational handouts, checklists, presentations, blog graphics, service guides, and training documents.

The key word is generic. Don’t upload a screenshot of a patient’s insurance information and ask Canva to redesign it. Don’t upload an EOB for it to summarize. Don’t upload a client roster. Build a generic template instead.

Good: “Create a professional insurance billing checklist for therapists.” Not good: “Turn this patient’s EOB into a checklist explaining what we need to do.”

Best for: Creating visual business and administrative materials without PHI.

6. Perplexity

Perplexity is handy for research where you want sources alongside the answer: insurance terminology, general billing concepts, CPT terminology, practice management trends, software comparisons, and industry news.

Don’t research using patient-specific details. Instead of “Why did this patient’s insurance deny CPT 90837,” ask “What are common reasons an insurer might deny CPT 90837,” then investigate the actual claim through your approved systems.

Best for: General research and source-backed information without client-specific data.

7. Grammarly

Grammarly is useful for the everyday writing VAs and billers do constantly: emails, SOPs, training documents, website copy, internal communications, and proposals.

Remember that emails can contain PHI. If you’re writing about a specific patient, strip the identifying details before you paste it in. Instead of “Please contact Jane Smith regarding her 8/21 appointment and claim #123456,” use “Please rewrite this email professionally, it concerns a patient billing issue and asks the provider to follow up,” then add the identifying details back in yourself afterward.

Best for: Polishing administrative writing without exposing client information.

8. Microsoft Copilot

If your business already runs on Microsoft 365, Copilot is useful for everyday productivity: drafting documents, working in spreadsheets, building presentations, organizing information, and creating meeting agendas.

Don’t assume every Copilot workflow is automatically appropriate for PHI just because it’s built into Microsoft 365. Your specific licensing, configuration, permissions, and organizational policies matter. If you’re working with a therapist’s PHI, follow the covered entity’s policies and verify your specific configuration first.

Best for: Microsoft-based admin workflows where your organization’s setup has been properly evaluated.

9. Google Gemini

Gemini covers similar ground to other general AI assistants: brainstorming, writing, research, SOPs, checklists, and project organization.

If you’re working inside a Google Workspace environment that contains PHI, don’t assume every Gemini feature is automatically appropriate for every HIPAA workflow. Compliance isn’t a label attached to an entire company. The specific product, account, configuration, data, permissions, and agreement all matter.

Best for: General admin and productivity work outside your PHI environment.

Learn How to Incorporate AI Into Your Private Practice: Thera AI Hub

Most of the tools above are general-purpose, which means you’re doing the work of adapting them to mental health billing and practice management. Thera AI Hub is built specifically around therapy practice use cases, with prompt libraries and workflows designed for this field rather than borrowed from a generic business template.

I put together a full breakdown of this resource library in my Thera AI Hub review, if you want the details before trying it.

Best for: VAs and billers who want to learn how to use AI in a way that is mental-health-specific. It provides pre-built customized prompts, administrative templates, and workflows

Explore Thera AI if you’re looking for a more therapy-focused approach to using AI in your private practice.

The AI + HIPAA Workflow I Recommend

You don’t need to eliminate AI from your work because you handle PHI. You need AI-free zones around anything that touches client information.

For a mental health billing VA, that might look like this:

AI can access: email drafts with PHI removed, generic SOPs, project management, your business website, generic spreadsheets, marketing materials, public research, software documentation, non-clinical meeting notes, generic templates.

AI cannot access: your EHR, patient charts, claims, EOBs, insurance portals, patient rosters, clinical notes, diagnosis information, secure patient messages, or any document containing PHI.

If your AI assistant lets you block specific websites or apps, use that feature. Block every EHR and PHI-containing system you regularly touch, whether that’s SimplePractice, TherapyNotes, Jane, your clearinghouse, or payer portals. Make the safe choice the default one instead of relying on yourself to remember it every time. Better yet, use a separate laptop or desktop.

What About De-Identifying PHI?

People get themselves into trouble here more often than you’d think. “I’ll just remove the patient’s name” isn’t necessarily enough. HIPAA’s de-identification standard is more involved than dropping a name, since other details can still identify someone when they’re combined.

For routine VA and billing work, use a simpler rule: if you don’t need the client’s information to get the AI task done, leave it out. You almost never need a patient’s actual name, date of birth, insurance ID, or claim number to ask AI for a generic billing workflow.

AI Prompts You Can Safely Use

A few examples that don’t require any PHI:

• “Create a step-by-step SOP for following up on unpaid behavioral health claims.”
• “Create a training checklist for a new medical billing VA who will work with private practice therapists.”
• “Create a checklist of common items a biller should verify before submitting a mental health insurance claim.”
• “Create a generic insurance denial appeal workflow for a mental health private practice.”
• “Identify five ways a solo therapist could streamline administrative workflows.”
• “Create an Excel formula that calculates the number of days between a claim submission date and a payment date.”

Notice what’s missing from every one of these: no patient names, no dates of birth, no insurance IDs, no clinical information, no claim numbers. That’s the whole point.

What I Would Never Paste Into a General AI Tool

Treat these as a hard stop unless you’ve specifically confirmed the tool and workflow are approved for PHI:

• “Here’s the patient’s EOB, explain the denial.”
• “Here’s the patient’s chart, write a billing note.”
• “Here are today’s claims, tell me which ones need follow-up.”
• “Here’s a screenshot from SimplePractice, what should I do?”
• “Summarize these therapy notes.”
• “Here’s the patient’s insurance card, tell me what their benefits are.”

Those might be genuinely useful AI applications someday. Right now, for most general tools, they cross into a completely different compliance category.

My Picks for Mental Health VAs and Billers

Tool	Best use	PHI recommendation
ChatGPT	SOPs, writing, workflows, brainstorming	Keep PHI out unless specifically approved
Claude	Writing, SOPs, detailed workflows	Keep PHI out unless specifically approved
Littlebird	Persistent AI assistant, non-PHI meetings	Block EHR/PHI sites; use the HIPAA configuration and BAA if PHI is ever involved
Granola	Non-clinical meeting notes	Keep out of PHI or clinical meetings
Canva	Graphics, documents, marketing	Don’t upload PHI
Perplexity	General research	Don’t research using patient-specific information
Grammarly	Editing emails and documents	Remove PHI before submitting text
Microsoft Copilot	Microsoft 365 productivity	Verify your specific HIPAA configuration first
Google Gemini	General productivity	Verify your specific configuration first

FAQ

Final Thoughts

AI can be a real productivity boost for mental health virtual assistants and medical billers. The goal isn’t to give AI access to everything you do. It’s to identify the work that doesn’t require PHI and speed that part up.

You can build your SOPs without giving AI a patient’s chart. You can create billing checklists without uploading an EOB. You can improve your emails without including a patient’s name. And you can use an AI assistant like Littlebird while deliberately blocking your EHR and any other PHI-containing sites.

Don’t rely on memory or willpower to protect PHI. Build the boundary into your workflow so the AI never has the chance to see it in the first place.

For more on the admin side of this work, check out my complete guide to mental health billing, or if you’re weighing AI tools from the therapist’s side of the desk rather than the VA or biller side, see Best AI Tools for Solo Therapists.

If you’re newer to this work, 25 ChatGPT Prompts for Therapists and Mental Health Billers and Best AI Scribes for Therapists are good next reads.