Does TheraNest sign a HIPAA BAA?

Yes. TheraNest executes a Business Associate Agreement with covered entity practices. The BAA governs TheraNest's handling of PHI in the EHR platform. It does not satisfy the practice's obligation to provide patients with a Notice of Privacy Practices.

What is the relationship between TheraNest and Therapy Brands?

TheraNest was acquired by Therapy Brands, a private-equity-backed portfolio of behavioral health software including TheraNest, Valant, and several other platforms. For HIPAA compliance purposes, the covered entity's NPP obligation is the same regardless of which Therapy Brands platform they use.

Do mental health practices using TheraNest need special NPP language?

Yes. Mental health practices must include disclosure that psychotherapy notes require separate written authorization for most uses. If the practice also treats substance use disorder clients under a Part 2 program, combined HIPAA + 42 CFR Part 2 language is required. NPP Generator handles both in a single intake flow.

EHR & Vendor

Does TheraNest Provide a Notice of Privacy Practices?

Q: Does TheraNest provide a Notice of Privacy Practices?

No. TheraNest does not provide a HIPAA Notice of Privacy Practices for your practice. TheraNest signs a BAA and offers a HIPAA-compliant mental health EHR, but the NPP — required by 45 CFR § 164.520 — must be produced by your practice.

By NPP Generator Research Team · Published Apr 24, 2026 · Last reviewed Apr 24, 2026 · 5 min read

Key Takeaways

✓ TheraNest does not produce a HIPAA Notice of Privacy Practices for your practice
✓ TheraNest does sign a BAA — covering vendor handling of PHI, not patient-facing HIPAA notices
✓ TheraNest is part of Therapy Brands, a portfolio of behavioral health software platforms
✓ Mental health practices must include psychotherapy-notes language in their NPP — and Part 2 SUD language if applicable
✓ The NPP obligation is the covered entity's regardless of EHR platform

Quick answer: No — TheraNest does not provide a HIPAA Notice of Privacy Practices. It signs a BAA and provides HIPAA-compliant mental health EHR infrastructure, but the NPP — the patient-facing document required by 45 CFR § 164.520 — is your practice's responsibility to produce, post, and update.

TheraNest is a mental health EHR built for therapists, counselors, psychologists, and behavioral health organizations. It is part of the Therapy Brands family of products (which also includes Valant, ICANotes, and others). Like all EHR platforms, TheraNest handles the infrastructure side of HIPAA compliance but does not produce the patient-facing Notice of Privacy Practices your practice must maintain.

What TheraNest Provides

Business Associate Agreement. TheraNest executes a BAA with covered entity practices.
HIPAA-compliant mental health EHR. Progress notes, treatment plans, diagnoses, and session documentation in a HIPAA-compliant environment.
Client portal and intake forms. Electronic intake packet delivery — but practices must supply the NPP content.
Telehealth. HIPAA-compliant video sessions integrated with the EHR.
Billing and insurance. Claims management and ERA/EOB processing.

Mental Health–Specific NPP Requirements

Mental health practices have additional NPP obligations beyond the standard HIPAA requirements. A compliant NPP for a therapist or counselor must explicitly address:

Psychotherapy notes. Notes documenting therapist impressions and session content receive heightened HIPAA protection. The NPP must disclose that most uses of psychotherapy notes require separate written authorization.
Part 2 SUD language. If your practice treats substance use disorder clients under a federally-assisted program, the HHS February 2026 model integrates 42 CFR Part 2 protections into the NPP. This is new as of February 16, 2026.
State mental-health privacy laws. California, New York, and Massachusetts impose stricter requirements for mental health record disclosures. If you practice in those states, your NPP may need supplemental language beyond the HHS model.

TheraNest does not handle any of these NPP-specific requirements on your behalf. See NPP for therapists and Part 2 SUD language in your NPP for detailed guidance.

What You Still Need if You Use TheraNest

A compliant NPP with psychotherapy-notes language, aligned to the HHS February 2026 model
Part 2 SUD language if your practice treats SUD clients under a federally-assisted program
Public website posting of the NPP
Physical office posting
An acknowledgment process for new clients (TheraNest's intake system can collect this once you upload your NPP)

Frequently Asked Questions

Does TheraNest provide an NPP?▼

No. TheraNest provides a BAA and HIPAA-compliant mental health EHR but does not produce a Notice of Privacy Practices. The NPP is a covered-entity obligation under 45 CFR § 164.520.

Does TheraNest sign a BAA?▼

Yes. TheraNest executes a Business Associate Agreement with covered entity practices. The BAA governs TheraNest's handling of PHI — it does not satisfy the NPP requirement.

Do I need special NPP language if I use TheraNest for psychotherapy notes?▼

Yes. If your practice maintains psychotherapy notes (separate from the general medical record), your NPP must disclose that most uses require a separate written authorization. See NPP for therapists for the specific language requirements.

What is Therapy Brands?▼

Therapy Brands is a private-equity-backed portfolio company that owns TheraNest, Valant, ICANotes, and several other behavioral health software platforms. Each platform maintains separate BAA relationships with its customers.

Generate your mental health NPP in under 5 minutes.

Psychotherapy-notes language, Part 2 SUD disclosures when applicable, HHS February 2026 model. Upload to TheraNest, post on your website, and you're covered. $49 one-time — no subscription.

Start your NPP — $49

Free watermarked preview available. See sample →