Skip to content
Book a free consult
Appearance
Interface sounds
Mental Health Transformation concept 5 min read

Case study

What Goes in the Record: Drafting Therapy Notes That Survive an Access Request

In counselling, the hard part of a note is not writing it, it is deciding what belongs in it. A client can ask to read their record, and it may contain a third party's information. This is the transformation that drafts the note and makes the boundary explicit before anything is filed.

No client engagement behind this piece: it is how this category of product would be transformed, with benchmark-sourced targets.

Who this is for

A typical Ontario group counselling practice

Signed off by Clinical director, with the practice's privacy officer signing

Industry

Mental health (psychotherapy and counselling), 9 therapists across individual, couples and family caseloads

Legacy stack

Practice management system with a single free-text note fieldPersonal working notes kept outside the system, inconsistentlyConsent forms captured once at intakeNo standing process for access requests

Engagement

Concept

A panel held inside an outer frame, with a document at its centre. Cover art for What Goes in the Record: Drafting Therapy Notes That Survive an Access Request. A panel held inside an outer frame, with a document at its centre. Cover art for What Goes in the Record: Drafting Therapy Notes That Survive an Access Request.
Contents

A therapist finishes a session and opens the note screen. It is one box. Into that box go the things the client could reasonably read tomorrow, the things that are the therapist’s own thinking rather than a clinical fact, and, because the session involved a marriage, several things about a person who is not a client and never agreed to be in anyone’s file. The software offers no way to distinguish them, so the therapist makes the distinction in their head, differently on a tired Thursday than on a fresh Monday.

This is the transformation we would run for that practice. It is presented as a concept, built on the same method we use in client engagements, so the before, the after, and the path between them are all visible.

Why is the hard part of a therapy note not the writing?

Most documentation tools for clinicians solve dictation. In counselling, dictation is the easy half. The difficult half is placement, because a counselling record has readers a physical examination note does not.

In Ontario an individual generally has a right of access to their own record of personal health information, subject to limited exceptions. That single fact changes what a note is. It is not a private aide-memoire; it is a document with a foreseeable second reader who is the person it is about. A counselling note also routinely contains information about someone else entirely: a partner, a parent, a colleague described in detail during a session, none of whom consented to being recorded anywhere.

Practices handle this today through therapist discretion, which works exactly as well as discretion under caseload pressure ever does. The frequently repeated statistics about how many hours therapists lose to documentation all trace back to companies selling documentation software, so this study does not quote them. The direction is not in doubt; the number is not sourceable, and inventing one would be the same error the rest of these pages refuse to make.

Before and after: the note

Drag the handle. The before is the single free-text box; the after is the note designed with the boundary visible.

The boundary, made visible
Proposed placement nothing filed yet
Shared record

Reports sleeping 4-5 hrs, worse since March.

Clinical observation

Third-party content

Her husband Daniel drinks most evenings and she describes him as "unpredictable" after.

Names an identifiable third party

Therapist working note

Wondering about attachment pattern here, revisit before session 6.

Stays outside the shared record by construction

Therapist confirms each placement

or moves it

Nothing is filed, and nothing is removed, without a person.

One free-text box
Session note Session 4 · 50 min

Reports sleeping 4-5 hrs, worse since March. Her husband Daniel drinks most evenings and she describes him as "unpredictable" after. Wondering about attachment pattern here, revisit before session 6.

No fields. No placement. No record of what was decided about any of it.

The client can ask to read this. Daniel never consented to being in it. The box does not care.

The therapist writes no less and thinks no less. What changes is that placement becomes an explicit, reviewable decision instead of an invisible one made at speed.

What we built

The concept above is the output of the same engagement steps we run in client work, and several are decisions a competent peer could argue with.

  • We split one field into three, and made the split a first-class part of the interface rather than a setting. Shared clinical record, therapist working note, and content naming an identifiable third party are different objects with different readers. A practice can disagree with where a given line goes; it can no longer fail to notice that the question exists.
  • We have the system propose placement and refuse to commit it. Every proposal shows what triggered it, and the therapist accepts or moves it. Nothing is filed, and crucially nothing is removed, without a person.
  • We encode the practice’s own rule rather than a general default, and where the practice has no rule the system flags instead of guessing. Discovering mid-engagement that a group practice has no written rule for couples work is a real and uncomfortable outcome, and it is better than discovering it during an access request.
  • We deliberately left the therapist working note unstructured and unsummarised. It is the one place a clinician thinks in their own words, and putting a model inside it would change how people write there. That is the decision most likely to be challenged as a missed opportunity, and we would make it again.
  • We wire evals from day one against the practice’s own historical notes, scored on whether proposed placement matched what an experienced therapist chose, and every override becomes a test case.

How it works

The note boundary loop: a session draft is proposed into three destinations, shared record, therapist working note, and third-party content, each proposal shows what triggered it, and a therapist confirms placement before anything is filed.The note boundary loop: a session draft is proposed into three destinations, shared record, therapist working note, and third-party content, each proposal shows what triggered it, and a therapist confirms placement before anything is filed.

The practice management system stays the source of truth for the clinical record. After a session, the draft is produced and each passage is proposed into one of three destinations with the reason attached: this names an identifiable third party, this reads as clinical formulation rather than fact, this is a clinical observation. The therapist confirms or moves each one. Only then is anything filed, and the working note remains outside the shared record by construction rather than by convention.

Because session content stays in Canadian infrastructure and processing runs with zero data retention, the design lines up with what PHIPA expects: a privacy impact assessment before deployment, an agreement naming the processor as an agent under section 17, and an audit log on every access. Retention is set short.

Why this pays back

The operational return is the hour a therapist stops spending re-reading their own notes to work out what they can safely release, and the clinical return is that the boundary is consistent on a Thursday. Break-even for the first slice is about twelve clinical hours returned a month at the practice’s own billable rate, which the practice supplies.

The limit worth saying before anyone signs, and it is capable of losing the sale: this makes access requests survivable, not comfortable. A practice whose real concern is that its historical records are a mess will not be helped much, because nothing here retroactively fixes six years of single-box notes. That is a records project, it is expensive, and it is honest to say so before rather than after.

The outcomes

Note fields that carry a disclosure consequence

One free-text box Record, working note, third-party

1 to 3, made explicit1

Design target

Therapists reporting documentation as a top burnout contributor

Widely reported, not reliably quantified2

Industry benchmark

Median wait for community counselling, adults

34 days3

Industry benchmark

Break-even, in clinical hours returned per month

About 124

Design target

Time to the first shippable slice

4-6 wk5

Design target

1 Design target measured against the recreated single-field note screen shown in the before/after above. The three-way split reflects the distinctions a Canadian access request already makes; the software simply stops hiding them.

2 Stated as a qualitative finding on purpose. The frequently circulated figures for therapist documentation hours (25% to 50% of working time) trace to vendors selling documentation software rather than to peer-reviewed measurement, so no percentage is quoted here. The peer-reviewed literature on clinical documentation burden establishes the direction, not a number for this profession.

3 Canadian Institute for Health Information, community mental health counselling wait times, 2024-2025, across roughly 94,000 referrals. Quoted here for context on caseload pressure, not as a measure of documentation time.

4 Design-target arithmetic, not a measured result. The first slice is a fixed fee; break-even is stated as the number of clinical hours returned per month that would cover it at the practice's own billable rate, which the practice supplies.

5 Standard first-slice scope: one caseload type, one note structure, evals and a clinician review gate included.

Frequently asked questions

Is this legal advice about access requests?

No. It is design practice, and a practice should get its own advice on how the statute applies to its records. What the design does is stop the software from being the reason a boundary was never drawn. In Ontario, an individual generally has a right of access to their own record of personal health information, with limited exceptions, and a counselling record can contain information about people who never consented to anything. A single free-text box makes that distinction invisible until somebody asks to read it.

Does the AI decide what is confidential?

No. It proposes a placement and shows why, and the therapist accepts or moves it. The system flags content that mentions an identifiable third party, or that a therapist has historically kept out of the shared record, and asks. It never files anything into a category on its own, and it never removes anything. The clinical and ethical judgment about what belongs where is the therapist's, and moving it into a model would be the single worst decision available in this workflow.

What happens in couples and family therapy, where everyone is a client?

That is the hardest case and it is why the first slice is one caseload type. In a couples caseload, information about one partner in the other's record is not third-party information in the simple sense, and the practice's own consent structure governs it. The system carries the practice's rule rather than a general default, and where the rule is ambiguous it flags rather than guesses. A practice without a written rule will discover that during the engagement, which is uncomfortable and useful.

Does client information leave the practice?

No. Session content and notes stay in Canadian infrastructure, processing runs with zero data retention, and nothing trains anyone's model. A privacy impact assessment is completed before deployment and the agreement names the processor as an agent under section 17 of PHIPA. Retention is set short by default because mental health information carries a higher practical sensitivity than the statute's flat treatment implies.

What would this cost to try?

A fixed-fee first slice on one caseload type, usually individual adult therapy, because the boundary rules there are the clearest. It ships in four to six weeks with its own metric. Break-even is stated in clinical hours returned per month rather than in licences.

Go deeper on the method

A circuit ring with a marker returning around it, and a person at the centre. Cover art for Human-in-the-Loop, by Design, Building AI People Actually Trust. A circuit ring with a marker returning around it, and a person at the centre. Cover art for Human-in-the-Loop, by Design, Building AI People Actually Trust.
Human+AIWorkflow

Human-in-the-Loop, by Design, Building AI People Actually Trust

Autonomy is easy to demo and hard to put in front of a patient. We design Human+AI workflows where the handoffs, guardrails, and overrides are first-class, so clinical teams actually adopt them.

Read article
A vertical bar stopping one of several lines, with a signed contract with a seal held at the boundary. Cover art for What Should We Refuse to Sign? Five AI Contract Terms Decided Once, at Signature. A vertical bar stopping one of several lines, with a signed contract with a seal held at the boundary. Cover art for What Should We Refuse to Sign? Five AI Contract Terms Decided Once, at Signature.

What Should We Refuse to Sign? Five AI Contract Terms Decided Once, at Signature

Data ownership, training rights, exit, price, and liability are settled the day you sign and renegotiated almost never. In a clinic one of them is not just commercial, it is a privacy obligation you already hold. Here is what each clause decides, what the standard wording quietly grants, and the version worth asking for instead.

Read article
A database drum inside two concentric protective shells, each with an opening. Cover art for Your Patients' Data Stays Yours: Adding AI Without Handing Over the Chart. A database drum inside two concentric protective shells, each with an opening. Cover art for Your Patients' Data Stays Yours: Adding AI Without Handing Over the Chart.
StrategyTrust

Your Patients' Data Stays Yours: Adding AI Without Handing Over the Chart

The top reason a practice stalls on AI is not cost, it is not knowing where the chart goes. Here is how to add intelligence while personal health information stays in your environment and in Canada, plus the seven questions to ask any vendor before you sign.

Read article

More transformations

A person at the centre of concentric orbit rings, with markers travelling them. Cover art for Down the Hall, Never Booked: The Internal Referral Nobody in the Clinic Owns. A person at the centre of concentric orbit rings, with markers travelling them. Cover art for Down the Hall, Never Booked: The Internal Referral Nobody in the Clinic Owns.
Multidisciplinary Clinics Concept

Down the Hall, Never Booked: The Internal Referral Nobody in the Clinic Owns

A multidisciplinary clinic's cheapest appointment is the one a practitioner refers to a colleague thirty feet away, and it is the one most likely to evaporate. This is the transformation that catches the referral where it is made, carries only what the patient agreed to let travel, and escalates the ones that go quiet.

Untracked to 5 days

A vertical bar stopping one of several lines, with an inbox tray held at the boundary. Cover art for The Refill Line: Turning the Pharmacy's Loudest Conversation Into Something You Can Work in Batches. A vertical bar stopping one of several lines, with an inbox tray held at the boundary. Cover art for The Refill Line: Turning the Pharmacy's Loudest Conversation Into Something You Can Work in Batches.
Pharmacy Concept

The Refill Line: Turning the Pharmacy's Loudest Conversation Into Something You Can Work in Batches

A community pharmacy answers the same question forty times a day, one interruption at a time, in the middle of dispensing. This is the transformation that lets the request arrive as structured intake instead of a phone call, keeps a pharmacist signing every fill, and measures the change at the counter rather than in a dashboard.

21.7%

Ontario pharmacy professionals naming workload as their top driver of burnout

Get the next transformation in your inbox.

When there is something worth your time, you will be first to know. No spam, unsubscribe anytime.

Your version of this

Run a practice with a waitlist you cannot triage and notes you write on Sunday? A free consult maps both, and which one frees a clinician first.

The founder is on every engagement. Specialists join for the stage that needs them, never an account manager.

Free, no obligation Your data stays yours Reply within 1 business day