NotedTherapy is built so that a breach of the database, the disk, or a backup still yields nothing readable.
Names, transcripts, generated notes, note sections and AI refine chats are encrypted with AES-256-GCM before they reach the database. Each account has its own data key, wrapped by a master key held outside the database.
Session audio is never written to disk. It is streamed into a transient memory buffer, sent once for transcription, and released the moment the text comes back.
Passwords are stored only as salted hashes and repeated failed sign-ins lock the account. Every account can turn on two-factor authentication with an authenticator app and single-use backup codes, only one device can be signed in at a time, and inactive sessions log out automatically after an hour.
There is no field for date of birth, address, phone number, insurance ID or diagnosis code. Clients are stored as a first name plus a last initial.
Delete a single note, delete a client and cascade every session tied to them, or hard-reset the whole account in one action.