HIPAA Statement.

Mental Health Studio builds digital infrastructure for covered entities. Our role in your compliance posture is specific and worth stating plainly.

What we do

• Configure websites, forms, booking and apps so PHI only flows through BAA-covered providers.
• Design so marketing surfaces hold as little client data as possible — ideally none.
• Keep analytics and advertising tracking free of PHI.
• Document every data-handling decision per project, so your compliance story is auditable.

What we don't do

• We are not your compliance officer or your lawyer; final HIPAA responsibility rests with the covered entity.
• We never access, store or process your clients' clinical records.
• This website itself collects no PHI — our forms explicitly instruct visitors not to send client information.

When an engagement requires us to touch systems containing PHI, we sign a Business Associate Agreement before work begins.