AI tools for therapists, as I mean them here, don't do therapy and don't talk to your clients. They run the office around your sessions: sorting the admin inbox and drafting replies, preparing expense receipts for bookkeeping, building and maintaining your website, drafting social media posts. In my business these jobs go to AI employees, AI roles with a fixed job, their own rules and your approval before anything leaves the practice. Treatment, diagnosis and every decision about a client stay with you, and client health information never goes into a cloud service without the right agreement in place. The roles on this page run in my own business. I don't have an AI case from a therapy practice yet, so applying them to a practice is a proposal for how it could work.
Many AI tools marketed to therapists are note tools that listen to sessions and draft progress notes. That's clinical documentation, a different decision with different risks. I cover it in Therapy Notes Software for Psychotherapists. This page is about everything else.
This isn't legal advice. The legal points refer to the US HIPAA rules as of November 2026; your state and your licensing board may add their own. Other industries are collected on AI by industry.
Who this page is for
Licensed therapists, counselors and psychologists in private practice, and small group practices without office staff. If you bill insurance electronically, you're likely a HIPAA covered entity; more below. If you're cash-only, the office work is the same, and so is your duty of confidentiality.
Where the office eats your time
Without an office manager, the admin work lands on you, in small pieces:
Email: new client inquiries, insurance questions, referral partners, landlord, vendors.
Phone: calls during sessions, callbacks between them.
Receipts: rent, software, supervision, continuing education, books. All of it has to reach your bookkeeping.
Website and visibility: pages nobody has touched in years, a contact form that fails on phones.
Social media: posting regularly in weeks that are already full.
Templates: intake info sheets, answers to the same questions.
None of this needs your clinical training. Part of it touches health information, though, and that's where this page draws the line.
AI tools for therapists: which AI employee takes which office task
My business runs on an AI workforce of fifteen employees. Seven of them fit a practice, plus one building block without its own AI employee:
Every row follows my own rule: the AI drafts, a human approves.
Inbox and inquiries: Frieda and Sonja
Frieda runs in my own business. She sorts the inbox into four piles, Now, Today, Can wait and Trash, plus a fifth for cases that need my judgment, and she drafts replies. She has never sent anything on her own. By her instructions, sensitive folders are off-limits, health among them. Sonja writes business emails in my voice, checks every fact against the source and leaves the result as a draft.
For a practice, that means separating the admin inbox from client communication. Even "I'd like to schedule an intake appointment" tells someone that a person is seeking care. The admin inbox with vendors, referral partners and your landlord goes to the AI employee. For client inquiries it prepares templates that you send yourself, ideally from your practice software's secure messaging. How the pile system works day to day is in Sorting Your Inbox: The Pile System.
Peter has been running in my business since August 19, 2026. He works in my bookkeeping interface in the browser, screens newly arrived receipts, assigns each one the right receipt type, matches the credit card statement line by line and reports what doesn't fit. He doesn't book entries.
In a practice, Peter only gets expense receipts: rent, software, supervision, training. A client invoice or superbill shows that someone is in treatment, so it's protected health information and stays in your practice software. How to file receipts so they hold up is in Digital Receipt Filing That Holds Up.
Website and visibility: Ralf and Sebastian
Ralf builds new websites, modernizes old ones and checks them on desktop and mobile; he prepares the launch, and approval stays with you. Sebastian is my AI employee for SEO, AI search and the blog.
There is a real case here, from Germany and without names: Ralf built the website of a licensed couples therapist, and Sebastian researched search terms and prepared the first blog posts for it. The caution travels: no promised outcomes, no client stories, and your licensing board's advertising rules before launch. How a rebuild runs is in Modernizing a Website With AI: How To, and how clients nearby find you in How Do I Get Found on Google? Local SEO.
Social media and video: Conny and Eddi
Conny turns a topic, a link or a recording into hooks, scripts and captions; Eddi edits real footage, adds subtitles and checks the finished video. I approve the final post. For a practice, add one rule: no stories from sessions, not even disguised ones.
HIPAA and client data: the part that comes first
This section comes before any tool. HIPAA's privacy rules apply to covered entities. A health care provider is one if it "transmits any health information in electronic form in connection with a transaction covered by this subchapter", insurance billing being the typical case. Protected health information (PHI) is individually identifiable health information in any form.
The key rule for every vendor, AI included, is in 45 CFR 164.502(e). A covered entity may let a business associate "create, receive, maintain, or transmit protected health information on its behalf" only if it "obtains satisfactory assurance that the business associate will appropriately safeguard the information", documented in a written contract: the business associate agreement (BAA). Psychotherapy notes have an extra layer: most uses and disclosures need the client's authorization (45 CFR 164.508(a)(2)).
For Claude, Anthropic's help center says (as of November 2026, retrieved 06.11.2026): Anthropic provides a BAA covering its HIPAA-ready services, "such as use of our first-party API, Claude in Microsoft Foundry, or Enterprise plans". A standard Enterprise plan does "not include BAA coverage without action from a Primary Owner", and enabling HIPAA "doesn't bring Claude Code or Cowork under your BAA" without a separate configuration. Consumer plans such as Free, Pro, Max and Ultra fall under the consumer terms. What Claude does with your data by plan is in Claude Privacy and GDPR: What Applies, and how I decide what an AI may see in AI and Privacy: What the AI Gets to See.
That gives the rule for this whole page: client data never goes into the cloud unprotected. The building blocks above work without it.
The data lock: pseudonymize before anything reaches Claude
For practices and firms that work with confidential personal details, there's what I call the data lock. It sits between your practice and Claude. Before a request goes to Claude, it replaces names and other details that point to a person with placeholders: "Ms M. Example wants to move her appointment on Tuesday" reaches Claude as "[Person 1] wants to move her appointment on Tuesday". Claude gets the placeholders instead of the names. The list of which placeholder stands for whom stays on our server in Germany, and that's where the data lock puts the real names back into the answer. It works with Claude Code and the AI employees built on it. I also describe the principle in Claude Code Mods for Tax Firms: Uses, Risks.
The principle of the data lock, shown with a made-up example and simplified placeholders. Graphic: Kevin Welter
The data lock is ready. I set it up for each practice individually and tailor it to the way your practice works. It wasn't designed with HIPAA in mind, and pseudonymized is not de-identified. No automatic detection finds every detail, so some content shouldn't go to Claude at all. We'll look together at what your practice needs.
Therapy and counseling. No AI employee talks to clients about why they came, not by email and not on the phone.
Diagnosis and treatment planning. Not even as a suggestion.
Clinical records. Notes and treatment plans live in your records system; an AI employee doesn't write them.
Decisions about people. Who gets a slot, who goes on the waitlist, when treatment ends.
Promises. No page and no post promises a treatment outcome, whoever drafted it.
What's left is the office around your sessions: recurring, rule-based and doable without client data.
Frequently asked questions
Can AI replace a therapist?
That's not what this page is about. Here the AI takes over office work: inbox, receipts, website, social media. AI in treatment itself is a clinical and professional question for your licensing board and your professional association.
Can I paste client information into an AI chat?
Not without protection. As a covered entity you need a BAA with any vendor that handles PHI for you, for the specific product you use. Without that, keep client information out.
Which office task should I hand off first?
The one that works without client data and costs you time every week. Often that's expense receipts or the website. The inbox comes next, once admin mail and client communication are separated.
Can I use the data lock in my practice?
For practices in Germany and elsewhere in the EU: yes, after a call. It's ready, and I set it up and tailor it for each practice individually. In the call we work out which tasks it should cover, what that takes, and whether another route fits your case better, such as a local AI on your own hardware. The data lock wasn't designed with HIPAA in mind, so for a US practice it isn't an answer to HIPAA. Book a call
How to keep going
Before any AI service sees data from your practice, work through the AI privacy check: five yes-or-no questions and a 20-point checklist. It's built on the GDPR and the EU AI Act, not HIPAA, but its core question carries over: which data goes where, under which agreement. Then note for one week which office work needs no client data. The task that costs you the most time is your first AI employee. If you'd like to look at it together, book a strategy session: in 20 minutes we look at the one workflow that depends on you the most.
Kevin Welter
Developer, IT architect, author of technical books (Kubernetes, cloud infrastructures) and speaker. Runs his business with an AI workforce of fifteen AI employees and shows solo business owners in his community how to hire their first AI employee.
