Case Study Building TasiPsych: HIPAA-Compliant SaaS for Behavioral Health
TasiPsych is clinical documentation software for behavioral health providers. Quantic Systems designed, built and runs it. This page covers what the product does, the engineering problems behind it, and how we handled HIPAA from the first line of code.
At a glance
- Product
- AI clinical documentation, audit and coding platform for behavioral health, plus the TasiPsych Copilot Chrome extension for one-click EHR transfer
- Users
- Psychiatrists, psychiatric nurse practitioners, psychologists, therapists, counselors, clinical social workers and behavioral health practices
- Model
- Subscription SaaS with one all-inclusive plan priced per provider, and a 10-day free trial with no credit card
- Compliance
- HIPAA-compliant, BAA included with every account
- Hosting
- Microsoft Azure under a signed BAA
- Built and operated by
- Quantic Systems
Live at tasipsych.com
The problem
Behavioral health providers lose hours every day to charting. Notes come out incomplete, which creates audit and insurance risk. Undercoding and missed ICD-10 mappings cost revenue that nobody notices. Intake forms, consents, assessments and payments each live in a different tool. And once the note is written, someone still has to copy it into the EHR.
Most AI scribes stop at transcription. They hand back a note and leave the clinician to find what is missing.
We wanted a product that checks the note, not just writes it.
What we built
TasiPsych is built around four pillars: Documentation Intelligence, Clinical Intelligence, Revenue Intelligence and Practice Automation. Together they take a session from recording to a billing-ready note in the clinician's EHR.
- 01
Record
Clinicians record in person or alongside any browser-based telehealth platform, with or without headphones. A session transcript can also be pasted in.
- 02
Generate
The system writes a structured note from the clinician's chosen template. There are 50+ behavioral health templates, including SOAP, BIRP, DAP, psychiatric evaluations, therapy progress notes, group notes, intake assessments, discharge summaries and psychological testing reports. A visual builder supports unlimited custom templates.
- 03
Audit
Tasi's Intelligence Agent applies 42+ built-in rules to every note, across compliance, medico-legal analysis, documentation completeness, clinical risk assessment and billing defensibility. It flags issues such as a missing suicide and homicide risk statement, incomplete Mental Status Exam domains, or a note that does not support the code being billed. Practices add unlimited custom rules in a visual editor and can toggle any rule on or off.
- 04
Code
Coding Insights suggest CPT, DSM-5-TR and ICD-10-CM codes, each with a confidence score and the reasoning behind it. That includes the cases behavioral health gets wrong most often, such as E/M visits with psychotherapy add-on codes and time-based testing codes.
- 05
Transfer
The TasiPsych Copilot moves the finalized note into the clinician's EHR in one click.
-
The clinician stays in control. Every note, code and audit finding can be reviewed and edited before anything is signed.
Practice automation
Clinical assessments
PHQ-9, GAD-7, Beck Depression Inventory and unlimited custom screening forms, sent to patients by SMS or email, scored automatically and tracked over time.
Intake and consent
Digital intake forms and consent documents delivered before the first appointment.
Payments
Copays, session fees and outstanding balances collected directly through TasiPsych.
TasiPsych Copilot
A free Chrome extension included with every TasiPsych account. It runs in the browser side panel, on top of the EHR or telehealth tab.
- SimplePractice
- TherapyNotes
- AdvancedMD
- DrChrono
- Practice Fusion
- athenahealth
It works with essentially any web-based EHR that uses labeled note fields. Setup takes under five minutes.
Session capture in the browser
Start a planned encounter with the patient and template chosen up front, or a quick session that is assigned to a patient later. Notes keep processing in the background while the clinician moves to the next visit.
One-click transfer
The Copilot reads the structure of the EHR page on screen and routes each note section into the matching field. There is no per-EHR integration to build or maintain.
Patient matching
After transfer, the Copilot can identify the patient from the EHR screen, link the note to an existing TasiPsych patient, or create a new one.
Same intelligence
Every note created through the Copilot runs through the same audit rules and coding insights.
Built for each discipline
Psychiatry, PMHNPs and PAs
Diagnostic evaluations (90791, 90792), medication management E/M visits (99212 to 99215) with psychotherapy add-on time documented separately
Therapy and counseling
Individual, family, couples and group therapy, plus substance use counseling (H0004, H0005)
Clinical social work
Biopsychosocial assessments, service plans and case management (T1016)
Testing and assessment
Psychological, neuropsychological and psychoeducational reports, with time-based testing units (96130 to 96139) supported in the record
Crisis care
Crisis intervention (90839, 90840) and Stanley-Brown safety plan templates
Specialty therapy
Art, music, play and sex therapy, eating disorder care including Family-Based Treatment, and health psychology
The engineering problems
Keeping PHI out of the AI pipeline
Sending raw session content to a third-party model is the obvious risk. TasiPsych redacts personally identifiable information from clinical content before any transmission to an AI provider. The control is mandatory. It cannot be disabled by a user or an admin. Client clinical data is not used to train AI models.
Not keeping what we do not need
Session audio is the most sensitive artifact in the system. Original audio is permanently deleted as soon as the transcript is complete. It is never retained. Finalized notes are kept for at least seven years, in line with healthcare records requirements, and clinicians can delete any note at any time. Deletion is immediate and permanent.
Access, encryption and audit trails
Data is encrypted in transit with TLS and encrypted at rest. Access to PHI is restricted with role-based controls. Audit logs are maintained in line with HIPAA requirements. Regular security assessments and penetration testing are part of the routine.
BAA-backed infrastructure
The platform runs on Microsoft Azure under a signed Business Associate Agreement. Every TasiPsych customer account comes with its own BAA.
An audit engine clinicians can extend
Fixed rules go stale. Each practice has its own payer requirements, state Medicaid rules and internal standards. We built the rule set so practices can add, toggle and tune their own checks without code.
Getting notes into any EHR without an integration per EHR
EHR integrations are slow to build and expensive to maintain, and behavioral health practices use dozens of systems. Instead of one integration per vendor, the Copilot works from what is on screen: it finds the labeled note fields on the EHR page and fills them. Clinicians pair the extension once with a secure pairing code. Each device gets its own token, which can be revoked at any time. Finalized notes travel directly between the TasiPsych account, the browser and the EHR over encrypted connections, with no third-party processors in between, and only when the clinician clicks Transfer. Every extension action, from sign-in and recording to transfer and patient matching, is audit-logged.
Building something in healthcare?
We have already solved the problems you are about to hit.
Stack
TasiPsych runs on Microsoft Azure. Quantic's working stack for products like this:
What this means for your project
The hard parts of HIPAA software are not the screens. They are PHI flow, retention, access control, auditability, vendor agreements and fitting into the systems clinicians already use.
We worked through each of them on a product we own and operate. When we build for you, we start from that, not from a checklist.
SaaS product development →Frequently asked questions
Who built TasiPsych?
Quantic Systems designed, built and operates TasiPsych. It is one of our own products.
Is TasiPsych HIPAA-compliant?
Yes. TasiPsych states it is HIPAA compliant, includes a Business Associate Agreement with every account, encrypts data in transit and at rest, restricts PHI access with role-based controls, and keeps audit logs.
How does TasiPsych keep PHI away from AI providers?
Personally identifiable information is redacted from clinical content before it is sent to any AI provider. The control is mandatory and cannot be turned off. Session audio is permanently deleted once transcription is complete, and client clinical data is not used to train AI models.
Does TasiPsych work with existing EHRs?
Yes. The free TasiPsych Copilot Chrome extension transfers a finalized note into a web-based EHR in one click, routing each section to the matching field. It has been tested on SimplePractice, TherapyNotes, AdvancedMD, DrChrono, Practice Fusion and athenahealth, and works with essentially any web EHR that uses labeled note fields, with no per-EHR setup.
Can Quantic build HIPAA-compliant software for my organization?
Yes. The patterns in TasiPsych, such as PHI redaction, encryption, role-based access, audit logging and BAA-backed hosting, are the same ones we apply to client healthcare builds.
Talk to the team that built it
If you are planning healthcare software, start with the people who have shipped it.