Zero-Knowledge Architecture
for Therapy Notes

bravery.academy is built so the platform itself cannot read your clinical notes or session content. Data is encrypted in your browser before it ever reaches our servers.

What is Zero-Knowledge encryption for therapists?

In a standard EHR or practice management platform — including SimplePractice, TherapyNotes, and TheraNest — your clinical notes are stored on the provider's servers in a form the company can technically access. Their "HIPAA compliance" is a policy promise, not a technical barrier.

Zero-Knowledge is different. Your notes are encrypted before they leave your device, using a key only you hold. The server stores only encrypted ciphertext. Even the developers of bravery.academy cannot read your notes.

This is the same cryptographic principle used by end-to-end encrypted messaging apps — applied to your therapy practice.

bravery.academy

  • ✅ Notes encrypted client-side before storage
  • ✅ Server stores only ciphertext
  • ✅ Zero access to note content by platform
  • ✅ AI features use anonymized/structured context only
  • ✅ Dedicated infrastructure option for clinics

Standard EHR Platforms

  • ❌ Notes stored in readable form on provider servers
  • ❌ Company staff can technically access data
  • ❌ Privacy is a policy, not a technical guarantee
  • ❌ AI trained on session content (some providers)
  • ❌ Shared infrastructure by default

Why does this matter for psychologists?

Client trust and therapeutic alliance

When clients know their most sensitive disclosures are mathematically protected — not just policy-protected — it changes the therapeutic relationship. Clients can be more open.

GDPR and data minimization

European data protection law requires collecting only what's necessary. Zero-Knowledge architecture is the most direct implementation of data minimization: the platform collects nothing it cannot even read.

Protection from breaches

If our servers were ever compromised, attackers would find only encrypted data. Without your key, the data is useless. No other major therapy platform offers this guarantee.

Ethical responsibility

As a psychologist, you hold the most sensitive information about another person. Zero-Knowledge is how you honor that responsibility at a technical level, not just an ethical one.

How it works in practice

  1. 1

    You write a session note in the bravery.academy interface on your device.

  2. 2

    Your browser encrypts the note using your personal key before sending anything to the server.

  3. 3

    The server stores ciphertext — a string of characters that is meaningless without your key.

  4. 4

    Decryption happens on your device when you open the note. No one else can read it.

Join the beta program

bravery.academy is currently in beta. The first 30 private-practice users get 3 years of free platform access.

Request beta access