Can You Use Claude AI for Therapy Notes? HIPAA, BAA & What Clinicians Need to Know

Quick Answer: Can You Use Claude for Therapy Notes?

Yes, with the right plan and setup. Anthropic has launched Claude for Healthcare with HIPAA-ready infrastructure, making Claude one of the first frontier AI models to offer genuine healthcare compliance. But the details matter.

Claude for Enterprise / Healthcare (HIPAA-ready):

• HIPAA-ready infrastructure with Business Associate Agreement (BAA)
• New in July 2026: the organization's Primary Owner can turn on HIPAA and accept the BAA in settings, with no sales cycle
• Conversations are NOT used to train models
• Healthcare-specific connectors (CMS Coverage Database, ICD-10, NPI Registry, PubMed)
• Agent Skills for prior authorization, FHIR development, and clinical workflows
• Available via Claude for Enterprise and the Claude Developer Platform
• Used by Banner Health, Elation Health, Commure, Carta Healthcare, and others

Claude Pro/Max (Consumer plans -- limited for PHI):

• Personal health data integrations (Apple Health, Android Health Connect, HealthEx, Function)
• Health data is NOT used to train models
• Contextual disclaimers and uncertainty acknowledgment
• But: no BAA for individual consumer accounts
• Not designed for clinical documentation workflows with PHI

Claude Free (Not safe for PHI):

• No BAA available
• No healthcare-specific safeguards
• Not appropriate for any task involving Protected Health Information

Bottom line: Claude for Enterprise with a BAA is a legitimate, HIPAA-ready option for healthcare organizations, and since July 2026 an eligible Enterprise organization can switch it on itself. Team and individual plans still can’t, and only some Claude features are covered by the BAA. For individual therapists and solo practitioners, purpose-built clinical AI like ClinikEHR's Clinical Note AI remains the most practical choice -- it combines AI notes with scheduling, billing, and patient records in one integrated platform.

What is Claude for Healthcare?

In 2026, Anthropic announced Claude for Healthcare -- a set of tools and resources that allow healthcare providers, payers, and health tech companies to use Claude for medical purposes through HIPAA-ready products.

Unlike the consumer version of Claude, Claude for Healthcare is built on enterprise-grade infrastructure with compliance controls designed for organizations handling Protected Health Information (PHI).

What Claude for Healthcare Offers

Healthcare-Specific Connectors:

• CMS Coverage Database -- verify coverage requirements, support prior authorization checks, build claims appeals
• ICD-10 Database -- look up diagnosis and procedure codes for medical coding and billing accuracy
• NPI Registry -- provider verification, credentialing, and claims validation
• PubMed -- access 35+ million pieces of biomedical literature for evidence-based decisions

Agent Skills for Clinical Workflows:

• Prior Authorization Review -- cross-reference coverage requirements, clinical guidelines, and patient records
• FHIR Development -- connect healthcare systems faster with fewer errors
• Clinical Trial Protocol Drafting -- create drafts accounting for FDA and NIH requirements

Key Compliance Features:

• HIPAA-ready infrastructure
• Business Associate Agreement (BAA) available for Enterprise customers
• Conversations not used for model training
• Audit trails for clinical decisions
• Source citations for verifiable answers

Who Is Using Claude for Healthcare?

According to Anthropic's announcement, Claude for Healthcare is being used by major organizations including:

• Banner Health -- tackling physician burnout with an AI platform for clinical documentation
• Elation Health -- reduced chart review time by 61%
• Commure -- automating clinical documentation at scale, saving clinicians millions of hours annually
• Carta Healthcare -- reduced clinical data processing time by 66% with 99% accuracy
• Flatiron Health -- enabling researchers to converse with datasets for real-world disease insights

July 2026 Update: Claude’s HIPAA Setup Is Now Self-Serve

On July 14, 2026, Claude’s release notes announced that organizations can now manage HIPAA readiness themselves, on both Claude Enterprise and the Claude API. Until then, getting a BAA meant going through sales. The steps below are for Claude Enterprise; the Claude API has its own HIPAA setup, linked from the same help article.

How it works

According to the Claude Help Center article on HIPAA-ready Enterprise plans:

• Enterprise plans only. It works on self-serve and sales-assisted Enterprise plans. Team plans and individual plans (Free, Pro and Max) can’t enable HIPAA.
• The Primary Owner turns it on. In organization settings, under Data and privacy, the organization’s Primary Owner reviews the BAA and the implementation guide, then accepts. Other owners and admins can’t complete it for them.
• The BAA is click-to-accept. It’s a standard agreement with nothing to sign and return, and it can’t be modified.
• It’s a one-way change. Once HIPAA is on, it can’t be switched off from settings, and some organization settings reset to their defaults.

What the BAA doesn’t cover

Turning on HIPAA doesn’t bring every Claude feature under the BAA. Each feature is either covered, available but not covered, or disabled, and protected health information should only go through covered features. The implementation guide lists the status of each one. Two are called out directly: Claude Code is covered only with zero data retention on qualified accounts, and Cowork isn’t covered yet.

What it means for therapists

1. A BAA no longer needs a sales cycle, but it still needs Enterprise. A group practice on an Enterprise plan can now set Claude up for PHI itself. A solo therapist on Pro or Max still can’t get a BAA.
2. Check which features your workflow uses. Drafting a note in a covered feature is different from using one that isn’t covered. Ask whoever runs your Claude organization to confirm against the implementation guide before anyone enters client details.
3. Psychotherapy notes need extra care. HIPAA gives psychotherapy notes, the process notes kept separate from the rest of the record, extra protection. Keep the minimum necessary in any AI tool, even under a BAA.
4. Claude still isn’t an EHR. A note drafted in Claude has to be copied into your record, scheduling and billing yourself.

ChatGPT took a different route this autumn: in September 2026 it gained a read-only Epic integration for health systems on organization workspaces, which we cover in Can You Use ChatGPT for Therapy Notes?. As of October 1, 2026, Claude’s healthcare announcements don’t include a comparable clinician-facing Epic integration; its healthcare tools center on connectors for CMS coverage, ICD-10, the NPI Registry and PubMed, plus a skill for FHIR development.

Claude vs ChatGPT vs ClinikEHR: Which Should Therapists Use?

The Key Difference for Therapists

Here is the practical reality for most therapists and solo practitioners:

Claude for Enterprise is designed for organizations -- hospitals, health systems, health tech companies. Since July 2026 an eligible Enterprise organization can turn on HIPAA and accept the BAA itself, but it still needs an Enterprise plan, someone to manage the organization’s settings, and care over which features are covered. Most solo therapists will not go through this process.

ChatGPT for Clinicians is designed for individual verified US clinicians and is free. It is more accessible for solo practitioners but is US-only and is a standalone chat tool.

ClinikEHR is designed specifically for solo practitioners and small practices. AI notes flow directly into your patient records, connect to scheduling and billing, and work globally. No enterprise procurement needed.

What HIPAA Says About Using Claude

The same HIPAA principles that apply to ChatGPT apply to Claude:

1. Business Associate Agreement (BAA): Required for any vendor handling PHI. Claude for Enterprise offers a click-to-accept BAA that the organization’s Primary Owner can enable in settings. Claude Free, Pro, Max and Team plans can’t enable HIPAA.

2. Minimum Necessary Standard: Only share the minimum PHI needed for the task. Even with a BAA, do not paste entire session transcripts unnecessarily.

3. Clinician Accountability: You are responsible for the final clinical note. AI generates a draft; you review, edit, and sign.

What This Means in Practice

Safe to use Claude for (any plan):

• Brainstorming treatment approaches (without PHI)
• Researching clinical guidelines
• Drafting generic patient education materials
• Learning about new therapeutic techniques
• Writing marketing copy for your practice

Requires Claude Enterprise with BAA:

• Any task involving patient names, dates, or identifying information
• Clinical documentation with PHI
• Prior authorization requests
• Claims appeals with patient data
• Care coordination involving patient records

Not safe on any Claude plan:

• Pasting full session transcripts into Claude Free
• Using Claude Pro for clinical notes with PHI (no BAA)
• Sharing patient recordings with any non-compliant tool

Ethical Framework for Using AI in Therapy Documentation

Whether you use Claude, ChatGPT, or ClinikEHR, these ethical principles are non-negotiable:

1. Confidentiality First

Your primary duty is protecting client privacy. Use only HIPAA-compliant tools with BAAs for any task involving PHI. There is no gray area.

2. Informed Consent

Inform clients in your intake paperwork that you use secure, HIPAA-compliant software systems to manage their records, which may include AI-powered tools for administrative tasks.

3. Clinician Accountability

AI generates drafts. You provide expert review, clinical nuance, and the final signature. Never submit an AI-generated note without thorough review.

4. Tool Verification

Before using any AI tool with PHI, ask: "Will you sign a Business Associate Agreement?" If the answer is no, the tool is not compliant.

Frequently Asked Questions

1. Does Anthropic offer a BAA for Claude? Yes, but only for Claude Enterprise organizations. Since July 2026, the Primary Owner of an eligible Enterprise organization can accept the standard BAA and turn on HIPAA configuration in organization settings, without a sales cycle. Claude Free, Pro, Max and Team plans can’t enable HIPAA. If you need a BAA as a solo practitioner, you would need an Enterprise plan or a purpose-built clinical tool like ClinikEHR that provides BAAs to all users. Source: Anthropic Healthcare announcement

2. Is Claude better than ChatGPT for therapy notes? Both now offer healthcare-specific products. Claude for Enterprise provides HIPAA-ready infrastructure with healthcare connectors (CMS, ICD-10, NPI, PubMed). ChatGPT for Clinicians is free for verified US clinicians with optional BAA. For most solo therapists, purpose-built tools like ClinikEHR that integrate AI notes with EHR workflows are more practical than either.

3. Can I use Claude Pro for clinical documentation? Claude Pro includes personal health data integrations (Apple Health, HealthEx) and does not use health data for training. However, Claude Pro does not offer a BAA for individual users. Using it with PHI (patient names, session details, identifying information) would not be HIPAA-compliant. Use it for non-PHI tasks only.

4. What healthcare connectors does Claude offer? Claude for Enterprise connects to CMS Coverage Database, ICD-10, NPI Registry, and PubMed. These enable coverage verification, medical coding, provider credentialing, and evidence-based research. These connectors are available to Enterprise and Teams subscribers.

5. Is Claude HIPAA compliant? Claude for Enterprise is built on HIPAA-ready infrastructure and offers BAAs, but not every feature is covered: the implementation guide lists which are, and Cowork isn’t covered yet. The consumer versions (Free, Pro, Max) are not HIPAA-compliant for PHI handling. Always verify the current compliance status directly with Anthropic before using Claude with patient data.

6. How does Claude compare to ClinikEHR for therapy documentation? Claude is a general-purpose AI assistant that can help with many tasks. ClinikEHR is a purpose-built clinical platform that combines AI note generation with scheduling, billing, patient records, telehealth, and practice management in one integrated system. For day-to-day therapy practice management, ClinikEHR is more practical. For research, literature reviews, and non-PHI clinical questions, Claude is excellent.

7. Can I turn on HIPAA for Claude myself? Only on an Enterprise plan. Since July 2026, the Primary Owner of an eligible Claude Enterprise organization can accept the standard BAA and enable HIPAA configuration in organization settings, with no sales or legal cycle. It’s a one-way change, Team and individual plans can’t enable it, and PHI should only go through features the BAA covers. Source: Claude Help Center, HIPAA-ready Enterprise plans

8. Does Claude integrate with Epic like ChatGPT does? Not as of October 1, 2026. ChatGPT gained a read-only Epic integration for organization workspaces in September 2026, while Claude’s healthcare announcements don’t include a comparable clinician-facing Epic integration. Claude’s healthcare tools include connectors for CMS coverage, ICD-10, the NPI Registry and PubMed, plus a skill for FHIR development.

9. Can I use Claude to research treatment approaches? Yes. Using Claude to research clinical guidelines, treatment modalities, and therapeutic techniques (without entering PHI) is safe on any plan. Claude's access to PubMed and biomedical literature makes it a strong research tool.

10. What should I do if I have already used Claude with PHI? Stop immediately. Document what information was shared, when, and on which plan. If you were using Claude Free or Pro (no BAA), this may constitute a HIPAA breach. Consult your compliance officer or a healthcare attorney for guidance on breach notification requirements.

Conclusion: Claude Is a Powerful Tool -- But Not a Complete Solution for Therapists

Anthropic has made genuine progress in making Claude healthcare-ready. Claude for Enterprise with BAA support, healthcare connectors, and no-training-on-data policies represents a real step forward for healthcare organizations.

However, for most therapists and solo practitioners, the practical reality is:

1. Claude’s BAA is Enterprise-only -- since July 2026 an eligible Enterprise organization can accept it in settings, but Team and individual plans can’t, and not every feature is covered
2. Claude Free/Pro do not offer BAAs -- not safe for PHI
3. Claude is not an EHR -- it generates text but does not manage your patient records, scheduling, billing, or clinical workflow
4. Mental health-specific features are limited -- no built-in SOAP, DAP, BIRP, or GIRP templates
5. For integrated practice management, purpose-built solutions like ClinikEHR that combine AI notes with the full clinical workflow remain the most practical choice

Use Claude for what it does best: research, literature reviews, non-PHI clinical questions, and general knowledge work. Use a purpose-built clinical platform for your actual documentation workflow.

Disclaimer: This article is for informational purposes only and does not constitute legal, medical, or compliance advice. HIPAA regulations, AI tool capabilities, and vendor compliance status change frequently. Always verify the current compliance status of any AI tool directly with the vendor before using it with Protected Health Information (PHI). Consult with a healthcare compliance attorney or your organization's compliance officer for guidance specific to your practice. Information about Claude for Healthcare is based on Anthropic's announcements the Claude Healthcare solutions page and the Claude Help Center article on HIPAA-ready Enterprise plans, and may have changed since this article was last updated. ClinikEHR and its authors shall not be held liable for any decisions made based on the information provided herein.

Related Reading on ClinikEHR

State of 2026 reports:

• State of Agentic AI EHR 2026: What Works and What's Risky
• State of Behavioral Health Practice 2026: Demand, Pay and Rules

AI & Clinical Documentation:

• Can You Use ChatGPT for Therapy Notes?
• AI Revolution in Clinical Notes
• AI Clinical Notes for Therapists
• Top 5 AI Clinical Notes Software 2026
• Free AI Clinical Notes Generator
• Best AI Note Taking for Psychiatry 2026
• Best AI Tools for Human-Sounding Notes 2026
• 15 Best Clinical Notes Software 2026

Compliance & Ethics:

• HIPAA Compliance in Shared Office Spaces 2026
• Can You Use Google Workspace as an EHR?
• HIPAA Compliance for Developers

Practice Management:

• Best EHR for Therapists and Counselors 2027
• Reduce Documentation Time Without Cutting Corners 2026