bravery.academy vs Upheal
Both platforms are built by people who take therapist privacy seriously. The core difference: Upheal is an AI documentation overlay for your existing EHR. bravery.academy is an integrated platform with Zero-Knowledge encryption and AI supervision built in.
| Feature | bravery.academy | Upheal |
|---|---|---|
| Product type | ✅ Full integrated platform | ⚠️ AI overlay (needs separate EHR) |
| Zero-Knowledge architecture | ✅ Client-side encryption | ⚠️ Pseudonymized storage (not ZK) |
| Sessions train AI model | ❌ Never | ❌ Never (stated policy) |
| AI supervision workflow (CBT) | ✅ Supervisory process | ❌ Note-taking only |
| HIPAA compliance | ✅ HIPAA-ready | ✅ HIPAA + BAA |
| GDPR compliance | ✅ Privacy-by-design | ✅ GDPR + UK DPA |
| SOC 2 certification | ⚠️ In progress | ✅ Certified |
| EU / UA market focus | ✅ Primary | ⚠️ Secondary (US/CA primary) |
| Requires separate EHR | ❌ All-in-one | ✅ Yes — Upheal is an overlay |
| Pricing entry | ✅ Free beta | Free tier available |
| Dedicated infrastructure | ✅ For clinics | ❌ Shared cloud |
The key architectural difference
Upheal is a powerful AI scribe that sits on top of your existing EHR. It transcribes sessions, generates progress notes, and produces treatment plans. It integrates with SimplePractice, TherapyNotes, and others via copy-paste or light integration. You still need and pay for an EHR separately.
bravery.academy is an integrated platform: secure video sessions, clinical notes, tools, AI supervision, and analytics in one place — with Zero-Knowledge encryption at the core. You don't need a separate EHR.
Upheal's privacy model uses pseudonymization and SOC 2 certification — strong, but not Zero-Knowledge. Upheal engineers can technically access session data under certain support conditions (they disclose this in their privacy documentation). bravery.academy's client-side encryption prevents this entirely.
When Upheal is the better fit
- →You already have an EHR you love and just want AI note generation added to it.
- →You need SOC 2 certification now (bravery.academy is pursuing this during beta).
- →You want battle-tested AI transcription with a large user base.
- →You practice in US or Canada and want HIPAA/PHIPA compliance already verified.
When bravery.academy is the better fit
- →You want one integrated platform — not an EHR + a separate AI overlay.
- →You need the strongest possible technical privacy guarantee (Zero-Knowledge, not pseudonymization).
- →You want AI supervision (reflective clinical process) — Upheal does not offer this.
- →You practice in Europe or Ukraine and need privacy-by-design architecture from the ground up.
- →You are starting fresh and don't want to pay for two separate tools.
- →Your clinic needs dedicated isolated infrastructure.
Privacy comparison: Zero-Knowledge vs. Pseudonymization
Zero-Knowledge (bravery.academy)
Notes encrypted in your browser with your key. Server receives ciphertext. No employee — technical or otherwise — can read your session content. Not a policy. A mathematical guarantee.
Pseudonymization (Upheal)
Personal identifiers replaced with pseudonyms. Data is not directly identifiable. HIPAA-trained engineers may access PHI when required to resolve support issues. Strong security, but not mathematically unreadable by the platform.
Join bravery.academy beta
One platform. Zero-Knowledge encryption. AI supervision. Free for first 30 private practitioners (3 years).
Join the waitlistUpheal feature and compliance information sourced from upheal.io/privacy-and-compliance (February 2026). Accuracy subject to change.