Before you run anything with client information, read this. It is the most important post in here. I am a BCBA. I know how it feels to be handed an AI tool and wonder if you just broke HIPAA. So I built this whole thing around one rule. Your client data stays on your computer, and the AI sees as little of it as possible. I know this post is long, but its important. HIPAA violations are no joke, and the AI companies don't sign BAAs. Your data stays local. Everything runs through Claude Code on your own machine. The systems open your files right there, do the math or the writing, and show you the result. Your files are not uploaded to me, to a server, or to anyone else. There is no cloud database of your clients sitting somewhere. Most systems never touch a client name. The money and billing systems, like projections, underpayment, auth and cancellation tracking, and scheduling, read your export on your computer and pull out totals and patterns. The report you get back has no client names in it. Just payers, codes, dates, and dollars. When a system needs a specific client or claim number so you can act on it, that goes into a worklist file that stays on your machine, and the AI does not read those rows. A plain script writes them straight to disk. The one system that reads a real document protects it first. The denial and appeal writer has to read the actual letter. Before it does anything, it swaps every name, date of birth, member ID, and claim number for a placeholder. It writes the appeal over the placeholders. Then it puts your real values back on your computer and checks the result to make sure nothing slipped through. Every system tells you its setup before you run it. You always know what a system does with your data before you hand it a file. No surprises. About Claude and your inputs. Whether Anthropic uses what you type depends on your Claude plan and your settings. It is not the same on every tier, so check your plan's data settings. And remember the design already keeps client data out of the AI's hands as much as possible. Most of what you run never puts a client record in front of the model at all.