Ethics, Privacy, and Compliance

Yes, Quill is HIPAA compliant. We take your privacy and data security seriously and offer signed Business Associate Agreements (BAAs) to all users.

Our infrastructure, processes, and policies meet HIPAA requirements for protecting protected health information (PHI). Get your signed BAA or start using Quill.

You can also read about how we go above and beyond HIPAA by reading our commitment to therapy session privacy page.

We think you mean HIPAA (Health Insurance Portability and Accountability Act). Yes, Quill is HIPAA compliant.

Yes, absolutely. Visit our BAA page to get a signed Business Associate Agreement. This is included for all Quill users at no additional cost and is required for HIPAA compliance when using third-party services to handle PHI.

No, never. Quill works from a brief summary you provide after the session ends. No session recordings are ever made or stored. This protects client privacy and eliminates the risks associated with handling and storing recorded sessions and transcripts.

We are committed to maintaining the privacy of therapy sessions!

No, Quill does not store your notes or session summaries.

Your EHR is the appropriate and only place to store clinical documentation. This is a core privacy and security feature that significantly reduces risk when using Quill. Your summary and notes (and other documentation) literally never get saved at Quill.

No, absolutely not.

We never use your clinical content to train AI models. Your session summaries and generated notes are not stored or used for any training purposes. When you use Quill, your data is processed to generate your note and then immediately discarded.

Also, we have contractual agreements with our AI provider to prohibit the retention and use of your data for model training.

When you submit a summary, it's encrypted in transit and sent to our data center based in the US. For AI processing, it is then sent to our US-based AI provider, with whom we have a zero data retention agreement in place. (Meaning they do not store the data, nor do they use it for any sort of AI model training.)

As mentioned elsewhere, we don't store your clinical notes or summaries -- they're discarded immediately after your note is generated. Account information (email, subscription details, customization and preference options, custom template configurations) is stored in the US.

Quill protects privacy through multiple safeguards:

• We never record sessions: You provide a summary after the session ends.
• We never store notes or summaries after generation. Our staff never has access to your clinical content.
• We're HIPAA compliant with signed BAAs available.
• We don't use your data to train AI models.

You can read our full commitment to privacy or get started with Quill today.

No, Quill does not make clinical decisions or recommendations.

Quill formats the information you provide. You decide what's clinically relevant, what interventions to document, what client progress to note, and all clinical interpretations. Quill does not suggest diagnoses, treatment approaches, or clinical judgments.

Think of Quill as a formatting tool that reorganizes your clinical thinking into professional documentation. You (the human) remain the professional therapist -- not the AI!

When used responsibly, yes. Quill supports your clinical judgment by formatting information you provide -- it doesn't replace your expertise. You remain fully responsible for reviewing and approving all notes before adding them to client records.

The ethical key is maintaining your professional responsibility: Quill is a tool that saves time, not a replacement for clinical thinking. And it does this without compromising the privacy of clients and the client-therapist relationship.

Recording therapy sessions (which many other AI note platforms encourage) creates significant risks that Quill simply doesn't have.

For tools that record sessions, they end up with an audio recording of the session and a transcript of the therapy session conversation. This captures everything that was said in the session, including non-clinical content that you wouldn't traditionally include in a therapy note), while failing to capture other context (like body language, sarcasm, etc.) The existence of the audio files and the transcripts, running it through AI and other third-party servers, etc., introduces a privacy risk that is simply unnecessary.

Quill's approach eliminates these risks: you provide only clinically relevant information after the session, no recordings of the session exist, no transcripts of the session exist, notes aren't stored after generation, and you and the client can stay fully present during sessions.

Learn more about our privacy-first approach.

Only you have access to your account and the notes you generate. Quill staff do not have access to view your session summaries or generated notes. We process your information solely to provide the AI note generation service, and we don't store it afterward.

No worries. We're HIPAA compliant and don't store your data. Once your note is generated, both your input summary and the generated note are immediately discarded from our systems. Even if you accidentally include a client's full name or other identifying information, that data isn't retained. Learn more about our privacy practices.

We would immediately investigate and contain threats, notify affected users per HIPAA requirements, and implement remediation measures.

However, because we don't store clinical notes or session summaries, the sensitive data at risk is significantly reduced. The most sensitive information -- your clinical content -- doesn't exist in our systems to be exposed.

No. Quill is completely separate from your EHR platform.

How it works:

• You manually provide a summary of each session.
• Quill generates a note based only on what you provide.
• You copy and paste the note into your EHR.
• Quill never accesses your existing client records.

This separation ensures your client records remain completely private and secure within your EHR.

No. Quill does not infer diagnoses, make clinical interpretations, or draw conclusions beyond what you explicitly provide. If you include a diagnosis in your summary, Quill will include it in the note. If you don't mention it, Quill won't add it.

The AI is designed to reorganize and format your clinical observations -- not to analyze, interpret, or expand upon them, unless you've provided explicit custom instructions telling it to do so. Your clinical expertise and judgment remain the sole source of all clinical content.