Help Center

Getting Started with Your Console

Watch the walkthrough, review best practices, and find answers to common questions.

See It in Action

What You'll See

  • Accept invitations and join your practice
  • Navigate the clinician dashboard
  • Review client session summaries
  • Invite clients and select their approach
  • Assign and track homework
  • Set AI guidance and topics to avoid
  • Monitor and respond to safety alerts
  • Understand crisis support behavior

Common Questions

Getting Started

How do I set up my practice?

After logging in, go to your Dashboard and click "Set Up Your Practice." You can create a new practice or join an existing one. Practice creation requires a name and primary contact email.

Do I need a practice to start inviting clients?

Yes. A practice is required because it manages team members and client assignments. You must create or join a practice before sending invitations.

What's the difference between Practice Admin and Therapist roles?

A Practice Admin has full access to practice settings, billing, and team management. A Therapist can manage their assigned clients but cannot access billing or invite other therapists.

Managing Clients

What information do I need to invite a client?

You need the client's email address (required). Optionally, you can add their name and a case summary (up to 1,000 characters) to help the AI understand treatment context.

How do I view session summaries?

Go to a client's detail page and click the Summaries tab. You'll see AI-generated summaries from all sessions organized chronologically.

How do I assign homework?

Go to the client's detail page, click the Homework tab, then "Create Assignment." Enter the title, instructions, due date, and frequency. You can track completion through adherence metrics.

What should I include in AI guidance?

Include: therapeutic approach, topics to explore, topics to avoid, and safety considerations. This directs the AI to provide personalized, clinically aligned support during sessions.

Safety & Alerts

When are safety alerts generated?

Alerts are generated when the AI detects potential concerns during client sessions, such as mentions of self-harm or crisis indicators. They appear on your dashboard and Safety Alerts page.

What do the severity levels mean?

HIGH indicates immediate risk requiring direct clinical intervention. MEDIUM suggests caution and follow-up. LOW is informational. Always respond immediately to HIGH alerts.

How do I acknowledge a safety alert?

Go to Safety Alerts, find the alert, and click Acknowledge. Add notes describing actions taken. This is recorded for documentation and compliance.

What happens during a crisis situation?

The AI may pause the conversation and provide crisis resources (e.g., 988 in the U.S.). Do not rely on the AI alone — follow your organization's escalation procedures and contact the client directly.

Account & Billing

How do I update my profile?

Go to My Profile in the navigation. Currently profile details are read-only. Contact support@therapyally.ai to request changes to your name, credentials, or bio.

How does billing work?

Billing is managed at the practice level. Go to Billing & Plans in your practice settings to set up payment or manage your subscription.

Security & Privacy

Is PHI encrypted at rest?

Yes. PHI is encrypted at rest using AES-256. Database storage is encrypted by our managed Postgres provider, and our most sensitive clinical fields carry an additional application-layer envelope encryption using AES-256-GCM with master keys stored in Azure Key Vault.

Is PHI encrypted in transit?

Yes. All client-to-server, server-to-database, and server-to-third-party traffic is enforced over TLS 1.2 or higher.

Are client conversations configured for zero data retention with the LLM provider?

Yes. Client conversations are handled under our Business Associate Agreement with OpenAI, with retention configured per the terms of that agreement.

Are client conversations excluded from model training?

Yes. OpenAI's API terms exclude all API traffic from model training. We do not opt in to training.

Do you have BAAs with subprocessors that touch PHI?

Yes. Subprocessors handling PHI operate under executed Business Associate Agreements, including OpenAI, our managed database provider, and Microsoft Azure for key management and hosting.

Is role-based access control implemented?

Yes. Access is enforced at the database layer via Postgres Row-Level Security, with distinct roles for clients, clinicians, practice administrators, and platform administrators.

Tips & Reminders

Tips for Efficiency

  • Review session summaries before each appointment to reduce prep time.
  • Use concise, specific homework instructions so clients know exactly what to do.
  • Keep guidance entries clear: what to discuss, what to avoid, and any safety notes.
  • Check the client list and safety alerts regularly to stay ahead of issues.
  • Standardize invitation and homework workflows across the team for consistency.

Important Reminders

  • Do not enter client information unless you have a valid email address and accurate details.
  • Match the Ally's therapeutic approach to yours if it is available.
  • Treat safety alerts seriously and follow your organization's escalation procedures immediately.
  • If a high-risk alert occurs, do not rely on the AI alone — ensure a clinician reviews and responds.
  • Client records may be identified by initials. Maintain confidentiality and follow privacy policies.
Need help? Contact us at support@therapyally.ai