EHR for Therapists: How to Choose Software for a Private Practice

What an EHR for therapists covers

An electronic health record (EHR) holds the clinical record: intake, assessments, treatment plans and session notes. Therapy practice management software runs the business side. Most products sold as an EHR for therapists combine both and cover some or all of these jobs:

• Scheduling: individual, couples and group sessions, with reminders and no-show tracking
• Intake: forms and consents completed before the first session
• Notes and treatment plans: structured, signed notes and goals reviewed on a schedule
• Billing: invoices, superbills clients send to their own insurer, and claims for practices that bill payers
• Client portal: appointments, forms, documents, messages and payments
• Telehealth: video sessions started from the appointment

A solo self-pay practice may need only notes, scheduling and invoices; a group that bills insurance also needs claims and roles that keep front-desk staff out of session notes.

Therapy notes software: SOAP, DAP and BIRP formats

Good therapy notes software gives each note a structure, so records stay complete and consistent without taking longer than the session. SOAP notes for therapists are the best known, but not the only option:

• SOAP: Subjective (what the client reports), Objective (what you observe), Assessment (your clinical impression) and Plan.
• DAP: Data, Assessment and Plan. It merges subjective and objective details, so it is often quicker to write.
• BIRP: Behavior, Intervention, Response and Plan. It records what you did and how the client responded.

When you compare an EHR for therapists, check signing and corrections. A signed note should lock, and changes should be dated amendments that keep the original.

The federal health-privacy rules and your EHR

If your practice is a covered entity, the HHS Privacy Rule and Security Rule (45 CFR Parts 160 and 164) apply to your records. A provider is covered if it transmits health information electronically in a transaction HHS has a standard for, such as an insurance claim. State confidentiality laws apply either way and can be stricter, especially for minors.

• Minimum necessary: staff should use only the information their job needs, so look for roles that keep schedulers and billers out of session notes.
• Audit controls: the Security Rule requires a way to record and examine activity in systems with electronic health information. Ask to see who opened each record.
• Risk analysis: HHS requires an accurate and thorough risk analysis. Buying an EHR does not complete it for you.
• Client access: under 45 CFR 164.524, a covered provider generally must act on a records request within 30 days, with one 30-day extension.
• Retention: HHS says the Privacy Rule sets no retention period for medical records; state law generally does.

Psychotherapy notes and substance use records

45 CFR 164.501 defines psychotherapy notes as a mental health professional's notes on the contents of a counseling session, kept separate from the rest of the record. They exclude medication monitoring, session times, modalities and frequency of treatment, test results, and summaries of diagnosis, treatment plan, symptoms, prognosis and progress.

Most uses and disclosures of them need the client's authorization under 45 CFR 164.508(a)(2), with narrow exceptions, and section 164.524 excludes them from the right of access. Ordinary progress notes do not qualify. If you keep process notes, the EHR should store them apart from the chart, visible only to you.

A federally assisted substance use disorder program also follows 42 CFR Part 2; section 2.12 defines federal assistance broadly, including Medicare participation and federal funding. A 2024 final rule, with compliance required by February 16, 2026, aligned parts of Part 2 with the federal health-privacy rules and requires separate consent for SUD counseling notes.

Business associate agreements and vendor questions

A vendor that creates, receives, maintains or transmits client health information for your practice is a business associate, and a covered practice needs a written business associate agreement (BAA) with it. HHS's cloud computing guidance says this holds even for a provider that stores only encrypted data without the key. Before you sign with any EHR for therapists, or with telehealth and text reminder tools, ask:

• Will you sign a BAA, and will your subcontractors?
• How fast will you report a security incident or breach?
• Does each person get their own sign-in with multifactor authentication, and can we see who viewed or exported each record?
• Can we export every record at any time? The BAA must also cover returning or destroying data when the contract ends.
• Do AI features process client information, and is it used to train models?

HHS's pandemic-era telehealth enforcement discretion ended after a transition period on August 9, 2023.

Good faith estimates for self-pay clients

Under the No Surprises Act, providers must give uninsured and self-pay clients a good faith estimate of expected charges. Self-pay includes insured clients who do not want a claim submitted for your services. 45 CFR 149.610 sets the basics:

• Timing: within 1 business day if a service is booked at least 3 business days ahead; within 3 business days if it is booked 10 or more business days ahead or if the client asks.
• Recurring sessions: one estimate may cover up to 12 months if it states the expected frequency.
• Notice: tell self-pay clients that estimates are available, on your website, in the office and when scheduling.
• Records: keep the estimate in the client's record and provide copies from the last 6 years on request.
• Disputes: a client billed at least $400 more than the estimate may be able to use patient-provider dispute resolution.

Look for an EHR that builds estimates from your rate card and files them to the record.

A checklist for choosing an EHR for therapists

Run each shortlisted option through the same mock week, using made-up clients and never real records:

• Book a new client, send intake forms and view the portal on a phone.
• Write a SOAP or DAP note, sign it, then correct it. Is the original kept?
• Can a scheduler or biller open a session note? They should not need to.
• Store a psychotherapy note separately and confirm who can open it.
• Issue an invoice, a superbill, a good faith estimate and, if you bill insurance, a claim.
• Start a telehealth session from the appointment.
• Export one client's full record, then the whole practice.
• Get the BAA, the total price for your clinicians and the support hours in writing.

If you serve Spanish-speaking clients, check that forms, reminders and the portal are in Spanish.

Moving to a new system

1. Request a full export early. Ask what it includes, in which formats and at what cost.
2. Move the client list first. Contact details usually import from a spreadsheet; re-enter active treatment plans if needed.
3. Keep history readable. Many practices keep read-only access to the old system, or a full archive, for the state retention period instead of migrating every note.
4. Pick a cutover date. New sessions go in the new system from that day.
5. Rebuild templates and train each role. Set up notes, rates, consents and reminders, then train clinicians, front desk and billing on their own screens.
6. Update your paperwork. Add the new vendor and its BAA to your risk analysis.

Where ASL Therapy fits

ASL Therapy is therapy practice management software for solo therapists, group practices and court-directed treatment programs. A session moves from the calendar to a signed note, a drafted invoice and the client portal. Eleven note templates ship ready to use, including SOAP, DAP and BIRP. Signed notes are corrected by amendment, and court or probation reports need a second authorized person to approve them by default.

Access is set in three layers: nine roles, six capabilities granted person by person and four visibility levels on each client record, checked on every request. Note text and client identifiers are encrypted at rest, and ASL support has no standing access to a practice. Staff can switch the workspace between English and Spanish, and clients whose file says Spanish get the portal and notices in Spanish.

Limits to weigh:

• Real client records go in only after a written activation review of agreements, risk analysis, policies and training; until then the workspace holds demonstration records.
• It does not migrate another vendor's clinical notes; the client directory imports from a spreadsheet.
• Online payment, text reminders and accounting sync must be connected to the practice's live accounts, and live video sessions need their own configuration, notices and recording policy.
• Notes have no supervisor co-signature step, and insurance claim submission is not among its published features. Pricing is quoted per practice.

Frequently asked questions

What is the best EHR for therapists?

There is no single best EHR for therapists. The right one fits your billing, note formats, caseload and languages, signs a business associate agreement and lets you export everything. Test each option with the same mock week.

What are SOAP notes for therapists?

SOAP stands for Subjective, Objective, Assessment and Plan: what the client reports, what you observe, your clinical assessment and the next steps. DAP and BIRP are common alternatives.

Are progress notes the same as psychotherapy notes?

No. Progress notes document the session for the record. Psychotherapy notes, as defined in 45 CFR 164.501, are separate notes on the contents of a session, and most disclosures of them need the client's authorization.

Do I need a business associate agreement with my EHR vendor?

Yes, if your practice is a covered entity and the vendor handles client health information for you. HHS lists EHR vendors and cloud providers among its examples of business associates.

Do therapists have to give good faith estimates?

Yes, to uninsured clients and to clients who choose not to use insurance for your services. Give it on time, tell clients it is available and keep a copy in the record. Check cms.gov for updates.

Related guides

• Secure Video Conferencing: What Makes a Video Call Private and How to Set One Up
• NPI Lookup: How to Find and Read a Doctor's NPI Number

Explore the complete product

Read features, current access and limitations