The Definitive Audit-Proof Psychotherapy Notes Checklist for Therapists (2026 Edition)
You've spent 50 minutes doing genuinely good clinical work. The last thing you want is a payer auditor deciding — months later — that your note doesn't prove it happened.
Insurance audits in behavioral health are not rare. They're not reserved for bad actors. UnitedHealthcare, Aetna, Cigna, and Medicaid RAC (Recovery Audit Contractor) programs routinely pull psychotherapy records and demand repayment on notes that are clinically fine but documentarily incomplete. The average behavioral health audit repayment demand runs between $8,000 and $75,000 — and that's before legal fees or the cost of a billing consultant.
This guide gives you a complete, field-tested psychotherapy notes checklist designed to hold up under the scrutiny of any commercial payer, Medicaid program, or Medicare review. Whether you're a solo LCSW, an LPC in a group practice, an LMFT seeing couples, or a psychiatrist billing the 90833 add-on, this checklist applies to you.
Let's get into it.
Why Therapists Get Audited (And Why "Good Enough" Notes Aren't)
Before we get to the checklist, you need to understand what auditors are actually looking for — because it's not what most training programs teach.
Payers audit for two primary things:
- Medical necessity — Does the note prove the patient needed this level of care on this date?
- Service as billed — Does the note prove the specific CPT code billed (e.g., 90837 vs. 90834) actually happened?
A note that says "Patient discussed anxiety. Therapist provided supportive therapy. Patient tolerated session well." fails both tests. It doesn't establish why the patient needed therapy that week, and it doesn't prove a 53-minute session (90837) rather than a 38-minute session (90834) was delivered.
Payers including Optum/UnitedHealthcare, Cigna Behavioral Health, Magellan, Beacon Health Options, and BCBS affiliates all publish clinical coverage policies that define documentation requirements. Many therapists have never read them. That's a problem.
The Audit-Proof Psychotherapy Notes Checklist
Use this checklist for every session note, every time. Think of it as your documentation standard of care.
✅ SECTION 1: Administrative & Identifying Information
These elements seem obvious, but they're a surprisingly common source of audit failure:
- [ ] Patient full legal name (matches insurance ID exactly)
- [ ] Date of service (not the date the note was written — common EMR error)
- [ ] Session start time and end time — critical for time-based CPT codes (90834 = 38–52 min; 90837 = 53+ min)
- [ ] Modality of session — in-person, telehealth (audio-video), or telephone (audio-only)
- [ ] Place of service code — POS 11 (office), POS 02 (telehealth originating at provider site), POS 10 (telehealth at home)
- [ ] Rendering provider name and credentials (especially critical in group practices)
- [ ] Supervising provider name and NPI (for supervised associates — intern notes without this are audit disasters)
- [ ] CPT code(s) being billed noted or clearly supported in the note
Pro tip: If you're billing 90847 (family psychotherapy with patient present) vs. 90846 (without patient present), your note must explicitly state who was in the room.
✅ SECTION 2: Medical Necessity — The Most Audited Element
This is where most therapists fall short. Medical necessity documentation must answer three questions:
1. Why does this patient need ongoing treatment?
- [ ] Active DSM-5 diagnosis with current symptom presentation documented
- [ ] Symptom severity — use a validated scale when possible (PHQ-9, GAD-7, PCL-5, CSSRS, AUDIT-C)
- [ ] Functional impairment noted — how are symptoms affecting work, relationships, ADLs, safety?
- [ ] Statement connecting diagnosis + symptoms + functional impairment to treatment need
2. Why does this patient need this level of care?
- [ ] Documentation that the patient does not require a higher level of care (inpatient, IOP, PHP) OR rationale for the current level if stepping down
- [ ] Progress (or lack of progress) toward treatment plan goals — stagnation itself can be medical necessity if documented correctly
- [ ] Response to treatment documented (e.g., "PHQ-9 declined from 16 to 11 over four sessions")
3. Why now — specifically this week?
- [ ] Session-specific presenting concern or reason for contact
- [ ] Any acute stressors, changes in symptoms, or events since last session
- [ ] Risk assessment update (see Section 4)
✅ SECTION 3: Clinical Content — What Actually Happened
This section proves the service was rendered as billed:
- [ ] Interventions used — not just "CBT" or "supportive therapy," but specific techniques (e.g., "cognitive restructuring around catastrophizing re: job performance"; "exposure hierarchy review for driving anxiety"; "EMDR desensitization phase targeting childhood incident")
- [ ] Patient response to interventions — Did they engage? Push back? Have a breakthrough? Dissociate?
- [ ] Themes or content of session — summarized clinically, not verbatim (progress note ≠ psychotherapy/process note)
- [ ] Homework or between-session tasks assigned or reviewed
- [ ] Coordination of care noted if applicable (contact with PCP, psychiatrist, school, etc.)
- [ ] Medication discussion if applicable (especially important when billing 90833 — the psychotherapy add-on to E&M for psychiatrists)
Note on 90833: If you're a psychiatrist billing 90833 alongside 99213/99214, the note must contain a separately identifiable psychotherapy component. Bundling the medication management and the therapy into one narrative paragraph is the #1 audit failure for psychiatric practices.
✅ SECTION 4: Risk Assessment Documentation
This is simultaneously the most clinically critical and the most legally dangerous area of your notes. Every note should include:
- [ ] Suicidal ideation — presence/absence documented explicitly (not "denies SI" buried at the bottom; this needs to be clear and current)
- [ ] Homicidal ideation — presence/absence, especially if patient has expressed anger toward identifiable third parties
- [ ] Self-harm behaviors — current or recent urges, behaviors, or incidents
- [ ] Substance use — changes in use, relapse, or ongoing concern
- [ ] Columbia Suicide Severity Rating Scale (C-SSRS) or equivalent structured tool, especially for high-risk patients
- [ ] Safety plan status — reviewed, updated, or newly created?
- [ ] Protective factors — reasons for living, social support, future orientation
- [ ] Clinical judgment statement — "Based on the above, patient is not assessed to be at imminent risk of harm to self or others at this time" (or the appropriate high-risk equivalent with escalation steps)
✅ SECTION 5: Treatment Plan Alignment
One of the most overlooked audit triggers is the disconnect between the treatment plan and the progress notes. Auditors compare them:
- [ ] At least one session goal from the active treatment plan is referenced or addressed
- [ ] Progress toward goals is described (not just "working on anxiety goals")
- [ ] If treatment plan goals have been met or are no longer relevant, that change is documented with rationale
- [ ] Treatment plan has been updated within the required interval (most payers require updates every 90 days for ongoing outpatient therapy; Medicaid may require every 30–60 days)
- [ ] Patient has signed/acknowledged the treatment plan (required by most payers and by HIPAA-adjacent state regulations)
✅ SECTION 6: Plan / Next Steps
- [ ] Next appointment scheduled or rationale for discharge/gap in care
- [ ] Any referrals made (to psychiatry, primary care, higher LOC, etc.)
- [ ] Changes to treatment frequency or modality documented with clinical rationale
- [ ] Any collateral contacts planned or completed
The Psychotherapy Note vs. Progress Note Distinction (Many Therapists Get This Wrong)
Under HIPAA's Privacy Rule (45 CFR §164.524(b)(1)), "psychotherapy notes" have a specific legal definition: they are the therapist's personal process notes kept separately from the medical record — notes about your countertransference, your hypotheses, your personal impressions.
These are not the same as progress notes, and they are NOT what you bill from.
| Feature | Psychotherapy (Process) Notes | Progress Notes | |---|---|---| | HIPAA classification | Separately protected | Part of the medical record | | Used for billing | ❌ Never | ✅ Yes | | Disclosable to payer | ❌ No (with limited exceptions) | ✅ Yes, required for audits | | Required content | None defined by payers | Extensive (see checklist above) | | Storage | Separate from chart | In the main clinical record | | Audit risk if missing | Low | High — missing progress notes = claim reversal |
Many therapists mistakenly believe their detailed process notes satisfy audit requirements. They don't. You need both — and they must be kept separately.
CPT Code Quick Reference: Are You Documenting the Right Things for Each Code?
| CPT Code | Service | Key Documentation Requirement | |---|---|---| | 90837 | Individual therapy, 53+ min | Start/end time; must meet 53-min threshold | | 90834 | Individual therapy, 38–52 min | Start/end time; cannot bill if session was 53+ min | | 90832 | Individual therapy, 16–37 min | Rarely audited alone; often scrutinized in patterns | | 90847 | Family therapy WITH patient | Who was present; patient must be there | | 90846 | Family therapy WITHOUT patient | Who was present; clinical rationale for patient absence | | 90853 | Group therapy | Group roster; each member's participation documented | | 90791 | Psychiatric diagnostic evaluation | Full biopsychosocial; diagnostic impressions; DSM-5 codes | | 90833 | Psychotherapy add-on to E&M | Separate psychotherapy narrative from E&M component | | 99213/99214 | E&M (psychiatry) | MDM or time-based documentation per 2023 AMA guidelines |
Red Flags That Trigger Payer Audits
Know what puts a practice on the radar:
- Billing 90837 for >80% of sessions — statistically improbable; UHC and Optum flag this
- Identical or near-identical notes across sessions (copy-paste documentation)
- Missing or outdated treatment plans at time of audit
- High-volume billing for 90791 (initial evaluations) without corresponding ongoing treatment
- Telehealth billing anomalies — wrong POS codes, no documentation of platform used or patient location
- Supervised associate billing errors — billing under the supervisor's NPI without proper documentation of oversight
- Pattern of billing high-complexity codes without clinical acuity to match
What Happens During an Audit — And How Good Notes Save You
Here's the typical audit sequence you need to be prepared for:
- Pre-payment review — payer withholds payment pending record review (common with Medicaid)
- Post-payment audit — payer requests records for already-paid claims (common with UHC, Cigna, Aetna)
- RAC audit — Medicare/Medicaid Recovery Audit Contractors identify overpayments
- SIU investigation — Special Investigations Unit; triggered by complaint or statistical anomaly
In a post-payment audit, you typically have 30–45 days to submit records. If your notes are incomplete, you can't retroactively fix them (that's fraud). The only defense is having done it right the first time.
Practices with thorough, consistent, checklist-driven documentation routinely see audit reversal rates above 85%. Practices with copy-paste notes or missing treatment plan alignment often pay back 100% of audited claims plus interest.
FAQ: Audit-Proof Psychotherapy Notes
1. Do I need to document session length in every note?
Yes — especially if you're billing time-based codes like 90837 or 90834. The distinction between these two codes is 15 minutes and roughly $35–$55 per session. Document your start and stop times on every note, without exception.
2. Can I use templates or AI to write my notes?
Yes, and increasingly it's the best practice for consistency — as long as you review, edit, and authenticate each note. AI-generated notes that aren't individualized to the patient's session content are a documentation liability. The note must reflect what actually happened in the room.
3. How long do I need to keep psychotherapy records for audit purposes?
For Medicare: 7 years from the date of service. For Medicaid: varies by state, but typically 5–10 years. For minors: until the patient turns 18 plus the applicable adult retention period. When in doubt, keep records for 10 years.
4. What's the difference between a SOAP note and a DAP note — and does it matter for audits?
Format (SOAP, DAP, BIRP) doesn't matter to payers. What matters is content. Any format works as long as it captures all required elements from this checklist. That said, structured formats reduce the risk of accidentally omitting key elements, which is why many compliance officers recommend them.
5. My payer denied a claim saying "medical necessity not established." What now?
First, pull the note and audit it against this checklist. In your appeal letter, quote the payer's own clinical coverage policy criteria and map your note language directly to each criterion. Include the treatment plan, the intake/90791, and any standardized assessment scores. Well-documented appeals with structured clinical arguments have strong success rates — Cigna and Aetna, for example, overturn 40–60% of appealed behavioral health denials when proper documentation is submitted.
6. Are group therapy notes held to the same standard?
Yes, with one addition: for 90853 (group psychotherapy), you need a group attendance roster AND individualized documentation for each member showing their participation and clinical status. A single generic group note does not satisfy audit requirements.
7. What's the biggest documentation mistake therapists make?
Copy-paste. Cloning a previous session note and changing the date is not just bad documentation — it's fraudulent billing when you bill for the cloned note. Payers use metadata and natural language analysis to detect it. Beyond the legal risk, it fails to demonstrate session-specific medical necessity.
Make Audit-Proof Documentation Your Default, Not Your Exception
The clinicians who survive audits without paying back a dollar aren't luckier than everyone else. They've built documentation habits that make compliant notes the natural output of every session — not a stressful after-thought.
That means having the right systems. It means starting every note with medical necessity in mind. It means linking interventions to treatment plan goals every single time. And increasingly, it means using technology that keeps you in compliance automatically.
Take the Work Out of Audit-Proof Documentation with Mozu Health
Building and maintaining these documentation habits manually is exhausting — especially across a full caseload. That's where Mozu Health comes in.
Mozu Health is an AI-powered clinical documentation platform built specifically for behavioral health practitioners — therapists, psychiatrists, LPCs, LCSWs, LMFTs, and group practices of all sizes.
Here's what Mozu Health does for you:
- AI-generated progress notes that capture session-specific content, interventions, and patient response — no copy-paste, no blank-page dread
- Built-in audit compliance checks that flag missing elements before you finalize a note
- Treatment plan alignment tools that automatically link your session notes to active treatment goals
- Risk assessment documentation that ensures every note includes a defensible, structured safety evaluation
- HIPAA-compliant storage with audit-ready record retrieval built in
- Billing accuracy support that matches documentation to the correct CPT code — so you're not under-billing or over-billing
Practices using Mozu Health report spending 60% less time on documentation while significantly reducing their audit exposure.
👉 Try Mozu Health free at mozuhealth.com — and write your first audit-proof note today.
This article is intended for educational purposes and reflects general documentation best practices. It does not constitute legal or billing compliance advice. Consult your payer contracts and a qualified healthcare compliance attorney for guidance specific to your practice.
