Is there an end-to-end encrypted EHR for therapists?

Yes. ShrinkNotes is practice-management software for therapists whose Private Process Notes are end-to-end encrypted in the browser, so the notes reach our servers only as ciphertext and cannot be read by ShrinkNotes.

What does "end-to-end encrypted session notes" actually mean?

It means your notes are encrypted on your own device with a key derived from your password, before they’re sent anywhere. The key never leaves your device, so the software company holds only unreadable ciphertext — not your words.

Can my current EHR read my therapy notes?

Almost certainly. Most cloud EHRs store notes in a form the vendor can read (and could be compelled to hand over). End-to-end encryption removes that exposure by ensuring the vendor never holds the key.

How does ShrinkNotes encrypt session notes?

In your browser, using the Web Crypto API: notes are encrypted with AES-256-GCM using a key derived from your password via PBKDF2 with 600,000 iterations. The key stays on your device and is never sent to ShrinkNotes.

Encrypted session notes for therapists

ShrinkNotes is the practice-management software whose private session notes are end-to-end encrypted — encrypted in your browser before they ever reach our servers, so not even ShrinkNotes can read them.

What “end-to-end encrypted” means for your notes

Most cloud software encrypts data “in transit” and “at rest,” but the vendor still holds the keys — meaning they can read your notes, and can be compelled to produce them. End-to-end encryption is different: your Private Process Notes are encrypted on your own device with a key only you hold. What reaches our servers is unreadable ciphertext.

How ShrinkNotes encrypts your notes

Encryption happens in your browser via the Web Crypto API.
Notes are encrypted with AES-256-GCM.
The key is derived from your password with PBKDF2, 600,000 iterations, and never leaves your device.
ShrinkNotes stores only ciphertext — we can’t read your notes and can’t hand them to a subpoena served on us.

Read the full mechanics in Encryption & recovery keys.

Encrypted where it matters — practical everywhere else

ShrinkNotes keeps two kinds of notes: end-to-end encrypted Private Process Notes for your clinical thinking, and minimal Official Chart Notes for the legal record. You get real privacy where it counts without losing the billing, scheduling, and superbills a practice needs.

Why it’s rare: to our knowledge, ShrinkNotes is the only therapy practice-management platform with true end-to-end encryption of clinical notes. It’s a different starting premise — privacy by architecture, not by policy.

What are process notes? — the private notes E2EE is built to protect.
Can therapy notes be subpoenaed? — what encryption does and doesn’t shield.

Start your free trial

Encrypted session notes for therapists

What “end-to-end encrypted” means for your notes

How ShrinkNotes encrypts your notes

Encrypted where it matters — practical everywhere else

Related