Built for your work
Autorec for therapists
If you record telehealth sessions for your own notes or for supervision, the recording is protected health information the moment it exists. The usual question with any tool is which vendor now touches that audio and what paperwork you need with them. Autorec records and transcribes the session on your own device, so that question doesn't come up.
What makes session recording different
A recorded therapy session is among the most sensitive files a small practice will ever hold. The content is a patient's mental health history in their own words. Send it to a cloud transcription service and you have added a company to the list of entities holding PHI, which means a Business Associate Agreement, a vendor security review, and a breach you can't see coming. A solo or small practice rarely has the legal support to vet processors properly. There is also the session itself: a notetaker bot appearing in the call can make a patient guarded at exactly the moment the work depends on candor.
Confidentiality without a BAA to negotiate
HIPAA's Business Associate rules apply when a third party handles PHI on your behalf. Autorec records and transcribes on your device, and nothing is uploaded, so no third party handles the audio or the transcript. There is no processor in the chain, which means there is no BAA to negotiate, no sub-processor list, and no vendor breach that puts your patients' sessions at risk. The recording is a file on your computer, covered by the same encryption, access controls, and disposal practices you already apply to your other clinical records. One caution: the optional AI summary sends the transcript text to whichever LLM you configure. With a cloud provider, that provider does receive the transcript, so for PHI leave it off or point it at a local model.
Important: Autorec is not "HIPAA certified" and no software can be. Keeping data on-device removes the data-processor question, but your own machine still has to be secured, your patients still have to consent to being recorded, and your overall HIPAA program is still yours to run. Autorec keeps you out of scope for a BAA. It does not make your practice compliant on its own.
The parts that matter for clinical work
Nothing leaves your machine
Recording and transcript are written to your local disk. No upload step, no vendor copy, no telemetry.
No bot joins the call
Autorec captures the meeting window from your desktop. No extra participant appears in the attendee list, so nobody on the call sees a recording assistant.
Transcribes on-device
After a call, Autorec runs whisper.cpp locally to produce a text transcript. The audio is never sent anywhere to be transcribed.
A summary you can skim
Autorec can draft a short summary by sending the transcript text to the LLM you configure: a local Ollama or LM Studio server, or a cloud provider with your own key. Off by default.
Paid once, not per month
Autorec is a one-time purchase per major version. No per-seat subscription, no bill that grows as your client list does.
Where Autorec will not fit a practice
Autorec is single-user and has no clinical features. It will not write a SOAP note, it has no EHR integration, and it has no group-practice admin layer. The optional AI summary is a plain recap of the conversation, not a structured progress note, and it is off by default because it sends the transcript to the LLM you configure. There is no mobile app. Autorec runs on Linux, Windows, and macOS. Securing the device the recordings live on is on you.
Questions therapists ask
Do I need a BAA to use Autorec for sessions?
A BAA is needed when a vendor handles PHI for you. With Autorec, recording and transcription run on your device with no upload, so there is no business associate to sign one with. That is the whole reason a local tool fits this use case. The exception is the optional AI summary: if you turn it on with a cloud LLM provider, that provider receives the transcript, so keep it off or use a local model for sessions.
Is Autorec HIPAA compliant?
No software is HIPAA compliant by itself, and we don't claim it. Compliance is a property of your whole practice. What Autorec does is keep session audio off any vendor's servers, which removes the data-processor part of the problem. Securing your device, obtaining consent, and the rest of your HIPAA obligations stay with you.
Will a recording assistant show up in the session?
No. Autorec captures the meeting window from your desktop and does not join the call as a participant. Your patient sees the normal session, not a third attendee labelled as a notetaker.
Where do session recordings end up?
In a folder on your computer, as a standard .mp4 video plus .txt and .srt text files. They stay there until you delete them. Apply the same storage, encryption, and disposal practices you use for your other clinical records, because that is exactly what they are.
Record your next session on-device
Free for three recordings a day, up to 40 minutes each. No account, nothing uploaded.
Download Autorec free