Skip to content

HIPAA-compliant ABA documentation

Session notes hold protected health information. Praxis Notes encrypts it, limits who can see it and logs every access, and a Business Associate Agreement is in place before you store PHI.

No credit card required

Security Example

All safeguards active

Encryption
AES-256
Access
Role-based
Sign-in
Multi-factor
Audit log
Every PHI access
BAA
Signed before PHI

Protected health information security

Client information is stored, transmitted and accessed in line with HIPAA and industry practice.

  • End-to-end encryption

    Data is encrypted in transit and at rest with AES-256.

  • Access controls and audit trails

    Role-based permissions and a detailed log of user activity and data access.

  • Secure cloud infrastructure

    Hosted on SOC 2 Type II certified cloud infrastructure with redundancy.

Technical safeguards

Technology that protects PHI and controls who can reach it.

  • Access controls

    Role-based permissions limit PHI to authorized users.

  • Encryption

    AES-256 encryption for data in transit and at rest, with key management and rotation.

  • Multi-factor authentication

    Sign-in checks something you know and something you have.

  • Audit controls

    Every activity involving PHI is logged.

  • Intrusion detection

    Monitoring and alerts for suspicious access attempts.

  • Backups and recovery

    Redundant infrastructure and disaster recovery planning.

Comprehensive HIPAA safeguards

The physical and administrative safeguards HIPAA requires, plus the documentation to prove them.

  • Physical safeguards

    • Secure data centers
    • Device and media controls
    • Workstation security
    • Disaster recovery
    • Environmental safeguards
  • Administrative safeguards

    • Security management process
    • Security personnel
    • Information access management
    • Workforce training
    • Contingency planning
  • Compliance documentation

    • Business Associate Agreement covering your clients’ PHI
    • User activity reports and audit trails
    • Documented security incident procedures

More from the app

See all features
  • Create notes

    Turn session data into a complete, insurance-ready ABA session note in seconds.

  • Review notes

    Upload an existing note and get specific fixes for gaps, language and billing requirements.

  • Track progress

    Graph behavior and goal data across sessions and build reports for every audience.

Protect client data without extra work

HIPAA-compliant storage is included in the Individual and Pro plans.