Security and HIPAA Compliance

Your data is protected by design. We built this tool with HIPAA compliance as a core principle, not an afterthought.

How We Protect Your Data

Zero data retention

Your session keywords and generated notes are never stored. Data is processed in memory and discarded immediately after the response is returned.

Encrypted in transit

All data between your browser and our servers is encrypted using TLS 1.2 or higher.

HIPAA-eligible infrastructure

Data processing runs on infrastructure covered by a signed Business Associate Agreement (BAA). The AI model does not store inputs, outputs, or use your data for training.

No accounts, no tracking cookies

We do not require signup or login. We use privacy-focused, cookie-free analytics that track only page views and button clicks - never clinical content.

What We Never Collect

Session keywords you enter
Generated SOAP notes
Patient or client information
Your identity

Your Responsibilities

This tool is a documentation assistant, not a substitute for clinical judgment.
Review and edit generated notes for accuracy before use.
Check with your organization's compliance team before using external documentation tools.

Notehouse is a simple, yet powerful case management solution

Once you have generated your SOAP note, you will want a secure place to store it alongside your other client documentation. Notehouse is a HIPAA-compliant case management platform built specifically for social workers - organize case notes, track client progress, and keep everything in one place.

Try Notehouse Free