Sleep Soundly, Knowing You Are Using the Most Secure AI-Scribe There Is

Yes — 100% HIPAA & SOC 2 Type II compliant in the U.S., plus built to meet Australian Privacy Principles and Canada’s PIPEDA standards.

If you purchased the plan yourself, your supervisor or practice manager won’t know you’re using the app unless you choose to share that information.

However, if your practice purchased the plan for you, they may be able to see the clients linked to your account. If you’re working with clients who aren’t part of the group practice, we recommend using a separate personal account to ensure client confidentiality.

We understand how important your privacy is. To make your notes smarter and more accurate, we carefully use information that’s been fully de-identified, meaning all personal details are removed to protect both you and your clients.

Our platform is fully HIPAA-compliant and built with rigorous security measures. We never sell or share your data with anyone else. Your confidentiality always comes first. De-identified data is used only for learning purposes to improve your experience with Mentalyc.

If you’re on our Super or Team plan, you also have full control to opt out of any data use whenever you wish.

You can also choose partial anonymization for your notes, keeping basic details like first names for context while removing sensitive data, all within our HIPAA-compliant system.

Yes! Mentalyc is a well-established company that has been a pioneer in AI-powered note-taking since 2021. We know the field inside out, including both therapists and people who’ve experienced therapy firsthand. We build Mentalyc in close collaboration with practicing clinicians, shaping every feature around their real needs.

We are:
✔️ HIPAA-compliant
✔️ Profitable and independent
✔️ Trusted by over 30,000 therapists
✔️ Continuously evolving with feedback from our community

We’re here for the long term, focused on building a secure, ethical, and therapist-centered tool you can rely on.

Want to learn more about who we are and why we do this? [Click here.]

Yes! When you create an account, you agree to our BAA. You can review it anytime in your profile and download a signed version if needed—just click [Generate BAA].

Mentalyc temporarily uses your session recording to create a transcript. We securely store the audio for up to 3 days, just in case something needs to be fixed or retried with your note. After that, the audio is automatically deleted. The transcript we create is fully anonymized, so it never includes names or personal details. Everything is handled with care and stays fully HIPAA- and SOC 2 II-compliant.

Anonymizing your notes means removing identifying details from transcripts to help keep sessions private. We don’t require identifiable client data in order to generate notes. Our approach is to store only the minimum necessary information to provide value to clinicians—nothing more.

For those who prefer a balance, we also offer partial anonymization: we keep limited details like first names, while removing sensitive identifiers. This option is especially helpful for therapists who need clearer context—like in family sessions—without compromising on security. Thanks to our HIPAA-compliant infrastructure and robust security practices, both options are safe and secure.

In Mentalyc, session transcripts are fully anonymized—they don’t include names or any information that could identify a specific client or therapist. Because of this, they are not considered medical records. However, if you choose to keep transcripts linked to a client's name in your own records, those could be treated as part of their medical file, depending on your local regulations.

Mentalyc is fully compliant with the data protection regulations in Canada, including PIPEDA, PIPA, PHIA and PHIPA. It adheres to the highest standards of confidentiality and privacy to ensure the safety of our clients' data. 

Will my clients know I’m using Mentalyc?
Not automatically. It’s up to you whether to share that you’re using Mentalyc—but we recommend being transparent to support trust and a strong therapeutic relationship.

Will clients know if their session is being recorded?
It depends on how you record:
- using external recorders, e.g., Zoom’s built-in recording: Clients are typically notified automatically when recording begins.
- using Mentalyc’s recorder (also during a Zoom call): Clients are not notified (only audio is recorded).

What if a client doesn’t want to be recorded?
That's okay - you can still use Mentalyc by summarizing the session afterward using our simple dictation feature.

Need help getting consent?
We provide a customizable Client Consent Form along with helpful talking points to make the process clear and smooth.

Yes, Mentalyc complies with New Zealand’s Privacy Act. You have the right to access, correct, and control your personal information, including opting out of marketing. For full details, check out our Privacy Policy

No, your clients do not have direct access to your notes in Mentalyc. Only you can view them. If you choose to share notes, you can do so by downloading them and sending them via email or printing them out. Your notes are private, secure, and accessible only by you or someone you’ve specifically authorized.

No. ChatGPT (or similar platforms) is not HIPAA-compliant and must not be used to write or store clinical notes. It lacks the required security measures (like a BAA), and entering client data into it puts privacy at risk — even if de-identified. To stay HIPAA-compliant, always use trusted, secure platforms — like Mentalyc — that are designed for clinical use.

Yes! Mentalyc provides a ready-to-use client consent form designed by industry experts to ensure privacy and compliance. You can easily download, customize, and share it with your clients while keeping a copy for your records. We also offer helpful talking points to guide your discussions about consent. And if a client prefers not to be recorded, you can still use Mentalyc’s dictation feature to document sessions smoothly.

Whether Mentalyc notes may be requested in court depends on how you use the app. If you create progress notes with client info, they can become part of the medical record and might be disclosed. But if you use the app just for reference or education without including client details, it’s unlikely these notes will be requested.

Keep in mind, courts can request information if needed, though this is extremely rare. To reduce the chance of your notes being requested, you can delete transcripts after recording, carefully review and finalize your notes, and sign them, so no extra data stays in the app.

Yes. Mentalyc is fully committed to protecting your data and maintaining the highest standards of privacy and security. It is 100% compliant with major data protection regulations, including: HIPAA (U.S.), SOC 2, PIPEDA, PHIPA, PIPA, and PHIA (Canada), APP (Australia).

Mentalyc also goes beyond just compliance. It offers enhanced privacy through full data anonymization, so your client information remains secure.