Blueprint

The AI Assistant is the engine of Blueprint's core module and the part it charges for: notes, treatment plans, summaries, session prep, suggested interventions and the clinical chat all run on its models. The platform also carries value that stands without them. Blueprint's EHR, with scheduling, intake forms, telehealth, a client portal, insurance billing and payments, has free core tools a practice can run on without the AI. Remove the models and a working practice record system remains.

The oversight structure is described. Notes, summaries, treatment plans and AI-assisted suggestions start as drafts; the clinician reviews, edits or discards them; nothing enters the client record without approval; and finalized records are locked and versioned. Recording is optional, and a note can be drafted from a dictated or typed summary. Suggested interventions and worksheets are offered for the therapist to choose.

Blueprint states it does not monitor client submissions for clinical risk or provide crisis response, leaving that with the clinician. What is missing is what happens after a draft is wrong: no edit rate or acceptance figure is published, and nothing describes how errors are reported or corrected.

Only what the AI does is described, not what it is. It listens, transcribes and drafts notes, treatment plans and summaries, suggests interventions and worksheets from Blueprint's own clinical library, and answers clinical questions using the client's history, notes, assessments and treatment plans. No model, provider, version or description of training data is published, and nothing describes how a model change is tested or announced. Accuracy is presented through clinician testimonials rather than measurement.

The chain is described in categories, with no party named. Blueprint's privacy policy lists service providers for infrastructure hosting, data storage, artificial intelligence processing, analytics, payment processing, customer support and auditing, says they may process personal information only as needed to serve Blueprint under confidentiality and data protection terms, and says Blueprint signs business associate agreements with those handling protected health information where the law requires.

Its privacy and security page places infrastructure and service providers in the United States. No host, model provider or sub-processor list is named. The terms that follow the data are partly stated: client information is not used to train AI models, audio is deleted after processing, and the business associate agreement binds subcontractors, while the privacy policy permits de-identified data to be used to improve the models.

By the company's count, more than 70,000 mental health professionals are on the platform, and clinician testimonials speak to accuracy and time saved. That is scale of use, not evidence of benefit. No study, controlled evaluation or accuracy assessment is cited on Blueprint's product, pricing or privacy pages. The product scores the assessments clients complete between sessions and tracks their trends, so outcome data exists inside it, and no outcome results are published.

The published commitments are categorical. Blueprint's privacy and security page states that client information is never sold, shared or used to train AI models, and that when a session is recorded the audio is deleted immediately after processing, with no recordings, copies or backups kept. Recording is optional.

The clinician sets retention for transcripts, summaries and notes and can delete them at any time, and Blueprint's use of deleted data stops except where law or security requires. Two other statements temper them. The privacy policy (January 2026) lets Blueprint use deidentified data to improve features, functionality and the models used in the service, which sits uneasily beside the no training commitment, and finalized records are kept in line with professional and legal expectations with no period stated.

De-identification is to the HIPAA standard, and Blueprint says it does not attempt re-identification. Nothing is published on safety engineering: no guardrails, hallucination checks, or handling of a note containing something never said.

A full Business Associate Agreement is published (last updated 22 July 2026), entered into by HelloJoy, Inc., which trades as Blueprint and states that it acts as a business associate to the clinics and clinicians it serves. The agreement takes effect when an account is created, so it applies to every account including the free tier, and a signable copy is available for a practice's records.

It binds subcontractors that create, receive, maintain or transmit protected health information to the same restrictions and conditions. Two clauses reserve rights for Blueprint: it may use deidentified information for internal analytics, product development and improving its services, and at termination it may keep the protected health information it needs for its own administration and legal duties and destroys the rest. Blueprint also states compliance with Canada's PHIPA.

SOC 2 Type 2 is displayed on the home page, and Blueprint states that its security and privacy practices have been audited externally every year for six years, describing the results as perfect scores. The attestation is presented as its own, but the report, its period, the auditor and the services in scope are not published, and no trust portal is linked.

Other stated controls are AES-256 encryption in transit and at rest, fine grained access control and audit logging, versioned and locked finalized records, backups with redundancy, and US-based infrastructure and service providers.

Blueprint makes no medical device claim and states its position in its platform services agreement (January 2026): the service is a technical platform only and "does not provide medical care, clinical advice, or make clinical decisions", with clinicians solely responsible for the clinical appropriateness of records and actions. Its marketing offers clinical support to that clinician.

The pricing page offers to "Ask Blueprint clinical questions" and generate session plans from a client's history, notes, assessments and treatment plans, alongside suggested interventions and session activities from Blueprint's clinical library for the therapist to choose. Blueprint scopes risk clearly: its privacy policy states that it does not monitor client submissions for clinical risk or provide crisis response.

It scores the assessments clients complete between sessions and shows their trends. The rules that also govern the product are payer documentation requirements, HIPAA, state licensure, consent law and 42 CFR Part 2; Blueprint helps clinicians obtain client consent to recording.

Blueprint addresses governance in values language: AI should empower the therapists who provide care, and final clinical judgment stays with the clinician. No evaluation, method or subgroup result is published. The product shapes clinical content, not only transcription: it suggests interventions and worksheets from its own clinical library and answers clinical questions from a client's history.

The groups where performance is plausibly at risk follow from its inputs: accent, dialect and language in transcription; couples, family and group sessions where several speakers must be told apart; and, for suggestions, clients whose presentation differs from what the clinical library reflects.

Review before commit is the mechanism, with an audit trail behind it. Notes, summaries, treatment plans and AI-assisted suggestions begin as drafts, nothing enters the client record without the clinician's review and approval, and finalized records are time-stamped, versioned and locked. Nothing stands behind the output. No accuracy or error figure and no limitations are published; accuracy is presented through clinician testimonials.

The platform services agreement makes clinicians solely responsible for the accuracy of records, disclaims warranties beyond its express ones, and caps Blueprint's aggregate liability at the fees paid in the six months before a claim; its indemnity covers infringement and legal compliance claims, not wrong output.

For a practice that adopts it, Blueprint is itself a full record system. Its exchange with other systems is narrower. Blueprint's help center says there is no direct integration into another EHR: its Chrome extension overlays any site so a clinician can record and draft without leaving the chart, and notes are then copied and pasted in. With SimplePractice, the extension reads which client profiles were recently opened in order to suggest the right client.

Blueprint's own EHR imports clients, notes and billing history from SimplePractice, TherapyNotes and TheraNest when a practice switches. Enterprise plans offer custom EHR integrations and API access, with no deployments named. Blueprint names no electronic prescribing, laboratory, health information exchange or FHIR connection.

The service is hosted and reached through a web platform, a Chrome extension that overlays any site including another EHR, and a mobile app for recording sessions from a phone, for in person and telehealth sessions. Its privacy and security page states that it uses US-based infrastructure and service providers, and its privacy policy states that the service is hosted in the United States. Data is encrypted in transit and at rest with AES-256, with backups and redundancy. The host, region and tenant isolation are not named.

Blueprint publishes prices and a route to start without a sales conversation or a credit card. Its EHR's core tools are free. The AI Assistant is priced by session: $0.99 per session when used alongside another record system, with five free sessions, or $69 per seat with unlimited sessions, and $1.49 per session in the all-in-one EHR, after a 30 day free trial. The per-session plans carry no subscription or monthly fee, and a 60 day money back guarantee is stated.

Card payments cost 3.15 percent plus $0.30, and insurance billing $0.30 per claim and $0.15 per eligibility check, shown as free until September 2026. Enterprise plans are priced on request, with annual contracts, volume discounts, custom templates and custom integrations. A therapist can size the cost from their session count before contacting anyone.

Coverage is stated clearly: outpatient mental health practice, with note types for individual, couples, family and group therapy and for psychiatry, for solo therapists, group practices, and larger organizations on Enterprise plans. Blueprint reports more than 70,000 mental health professionals on the platform. Nothing published validates the coverage by setting: no study, named deployment or outcome is tied to any session type or practice size.