Empaithy
Empaithy is an AI clinical workspace for behavioural health teams. Five linked workflows turn intake, sessions, follow-ups and risk signals into one clinician-reviewed record. Also sold as a REST API, with a free consumer journaling app.
What is Empaithy?
Empaithy presents itself as the clinical workspace for behavioural health teams, a reasoning layer that turns intake, sessions, follow-ups and risk signals into a single clinician-reviewed patient record. It is published by VeriScript Private Limited, registered in New Delhi, India, and reaches users through three doors: the clinical workspace, a Clinical Intelligence API, and a free consumer journaling app. The workspace rests on five AI-assisted workflows that hand off to one another. Origin runs adaptive pre-visit assessments, around nine items that branch on previous answers, capturing history, symptoms and risk before the clinician sits down. Trace turns the session transcript into a structured note, with sections carrying their own confidence scores, 0.96 on presenting concern and 0.94 on risk assessment in the published example, and review states the clinician controls. Bridge schedules between-visit touchpoints, sends brief check-ins and micro-assessments such as the PHQ-2, and routes concerning answers onwards. Lens reads the trajectory across months of standard instruments including the PHQ-9 and GAD-7. Signal raises worrying patterns as a scored review item, 0.71 in the site's example, alongside the indicators behind it such as declining sleep, social withdrawal or a missed check-in. The clinical instruments cited across the product are the PHQ-9, GAD-7, PHQ-2 and C-SSRS. Day to day, the clinician sees today's patients, a risk review queue, notes awaiting approval, scheduled follow-ups and a progress curve. The governance rule is stated plainly: AI outputs are draft decision support, and the clinician reviews, edits, approves or rejects before anything enters the record. The publisher claims roughly 40% less documentation time, measured against baseline workflows in early pilots, 100% of AI drafts requiring clinician approval, and nine languages handled natively. Advertised security controls include encryption in transit and at rest, role-based access, audit logs, HIPAA readiness, a SOC 2 Type II report, and BAA and DPA availability. The terms state the platform runs on a proprietary, privately trained large language model. Empaithy repeats on every page that it supports clinicians and is not a substitute for professional judgement.
What it does
- Collect history, symptoms and risk before the session through adaptive assessments that branch on previous answers (Origin)
- Turn the session conversation into a structured note, section by section, with a confidence score on each field (Trace)
- Schedule and run between-visit touchpoints, then route the answers back to the clinician (Bridge)
- Read a patient's trajectory across months of assessments and sessions (Lens)
- Surface concerning changes as scored items in a prioritised review queue (Signal)
- Call any of these modules from a third-party product through the REST API
- Keep a personal journal by text or voice and receive a reading of mood, sleep and stress trends (consumer app)
When to use Empaithy / When not to
A quick filter to help you decide if Empaithy is the right fit.
When to use Empaithy
- Solo and group behavioural health practices in psychiatry, psychology and counselling that want intake, notes and follow-ups held in one record
- Multi-site clinics that need a continuous patient record shared across practitioners
- Hospital and integrated-care teams tracking risk across a caseload
- Digital health vendors and platforms looking to embed clinical reasoning through a REST API
- Individuals who want a private journal with mood, sleep and stress trends, through the free consumer app
When not to use Empaithy
- Clinicians hoping for hands-off automation: no AI output reaches the record without human review and approval
- Buyers who require a documented, named EHR integration before purchase, since none is published
- Teams that buy self-service: there is no sign-up and no published platform pricing, access runs through a demo request
- Anyone under 18, as the platform is restricted to adults
- People looking for a diagnosis, a medical assessment or crisis care: the terms state the analysis is neither, and the tool positions itself as a support to clinicians, not a substitute for professional judgement
How to use Empaithy
A typical end-to-end flow, from setup to results.
- Note first that there is no self-service sign-up for the professional product: entry runs through the Book a demo form, or Request access for the API
- Fill in the demo form with your name, work email, organisation, role (psychiatrist or psychologist, practice manager, hospital or network, developer or platform, other) and your interest (workspace, API, both, or undecided)
- Expect a reply within two business days, as stated on the contact page
- Once inside the workspace, let Origin collect the intake assessment before the first visit
- Open the patient before each session to see recent changes, then let Trace draft the documentation from the conversation and approve, edit or reject it field by field
- Set up Bridge check-ins between visits and handle the answers that Signal routes into the review queue, using Lens for the longer view
- For an API integration, request access to obtain an environment-scoped project key with a sandbox
- Post the clinical input, a transcript, a note, an assessment answer or a signal window, to the relevant module endpoint on https://api.empaithy.co/v1/, authenticating with a Bearer token
- Read back the scored JSON with per-field confidence and review flags, using the Node SDK (npm i @empaithy/sdk) or the Python SDK (pip install empaithy) if preferred
- For personal use, download the journaling app on iOS or Android, write or dictate an entry, read the EmPulse reading and trends, and optionally share with a clinician through an encrypted link
Pros & Cons
Pros
- Covers the whole arc of care in one record, where most tools stop at transcription
- Clinician review is mandatory and claimed at 100%, with confidence scores on each field of the draft note
- Uses standard clinical instruments (PHQ-9, GAD-7, PHQ-2, C-SSRS) rather than reinventing its own scales
- The same engine is available as a modular API, so a team can adopt a single module instead of the whole workspace
- Compliance commitments are stated upfront: HIPAA readiness, SOC 2 Type II, BAA and DPA available
- Concrete API documentation with endpoints, a cURL example, a JSON response, and Node and Python SDKs
- A free consumer journaling app feeds continuity between sessions, and recent activity is visible through blog posts dated June and July 2026
Cons
- No published pricing for the clinical workspace or the API: everything goes through a demo request, which rules out self-service buying
- No pricing page at all; the only known figures (USD 9.99 per month, USD 99.99 per year) are buried in the terms of service and concern the consumer offer
- No about page, no team presented and no social account of any kind
- No named subprocessor and no announced hosting country or region for what is health data
- SOC 2 Type II and HIPAA are claimed but no report or attestation is viewable online: available means available on request
- No named EHR integration is published, even though writing into an EHR is a selling point of the API page
- One address in India and no EU or US presence for a product that puts HIPAA and GDPR forward, with a single email address serving support, legal and data protection, and an API domain (api.empaithy.co) different from the site domain
Pricing & Plans
Empaithy publishes no price for its clinical workspace or for its Clinical Intelligence API: both are quoted after a demo or access request. The only figures available on the site appear in the terms of service and describe the consumer journaling application, which offers three options: a free tier with limited access to features and no analytics, a monthly subscription at USD 9.99 giving unrestricted access to all features, and an annual payment at USD 99.99 for the same full access. The journaling app is otherwise presented as free on its product page. No time-limited free trial is mentioned, and no discount, student or non-profit rate is documented.
- limited access to features
- no access to analytics (described in the terms of service)
- USD 9.99 per month
- unrestricted access to all features
- USD 99.99 per year
- same full access
- price not published
- quoted after a demo request
- price not published
- sandbox key issued on access request
- only the three options in the terms of service and the two quote-on-request offers are documented
Data, GDPR & hosting
A consolidated view of how Empaithy handles your data.
GDPR overview
Empaithy advertises GDPR alignment and offers a DPA, but the privacy policy itself is written under Indian law: it cites Section 43A of the IT Act 2000, Regulation 4 of the SPI Rules 2011 and Section 6 of the DPDP Act 2023. No article of the European GDPR appears anywhere in it. No EU representative under Article 27 is appointed and no data protection officer is named, though a Grievance Officer is designated under the DPDP Act, based in New Delhi and reachable at support@empaithy.com. The rights offered, access, correction and erasure, grievance redressal, nomination, account deletion, tracking opt-out and withdrawal of consent, derive from Indian law rather than the GDPR. Governing law is Indian with exclusive jurisdiction in the courts of New Delhi, the company lists no European address or entity, and no hosting country or region is disclosed.
Who owns the data?
Empaithy's terms leave users in control of what they enter: they may use it for themselves or share it with mental health professionals, employers and other parties. The consumer app promises exclusive access, export and permanent deletion on request, and states the publisher cannot read entries. Users are represented in the database by a unique code, with identities encrypted, and patient data is stated never to be sold. VeriScript nevertheless retains intellectual property over the platform and over the responses its AI generates. Under India's DPDP Act, users may request access, correction, erasure, nomination, account deletion and withdrawal of consent.
Reuse rights
Users may reuse their own entries without asking permission: the terms frame this as personal autonomy and explicitly allow sharing analyses with mental health professionals, employers or other relevant parties. On the publisher's side, profile data, conversation history and journal entries are analysed by the AI to produce emotional support and analytics. Emergency contacts are collected only with explicit permission and mobilised when the AI identifies a crisis, subscription and card details serve payment, location data is collected where the law requires it, and device information serves analytics and troubleshooting. Voice input is converted to text with consent and raw audio is never stored, while session tokens replace web cookies on this mobile-first platform. Data is shared with categories of providers covering secure storage and hosting, payment, authentication and AI processing, may transfer in a merger, acquisition or asset sale, and may be shared in aggregated, anonymised form for analytics. On training, the site says two different things: the terms state that anonymised collected data supports the ongoing development of the AI model, while the consumer app's FAQ states that entries are never used to train anything.
Data retention & training
Hosting summary
Empaithy announces no hosting country and no hosting region anywhere on its site, which is a notable gap for mental health data. The privacy policy describes the technical arrangement only in general terms: managed storage solutions on the frontend, encrypted databases with Transport Layer Security and storage encryption on the backend, and Virtual Private Cloud configurations. Encryption in transit and at rest is claimed on both sides, alongside HTTPS and SSL/TLS, continuous monitoring and logging, and backup and disaster recovery. Third parties are described by category only, secure storage and hosting, payment, authentication and AI processing, without a single provider being named. The legal framing is Indian: the policy is published under the IT Act, the SPI Rules and the DPDP Act, governing law is India and exclusive jurisdiction sits with the courts of New Delhi. One technical observation from outside the site: the domain resolves to an anycast AWS node, which says nothing about where data is actually stored.
Things to keep in mind
Risks and trade-offs to weigh before adopting Empaithy.
- The site contradicts itself on training: the terms state that anonymised data collected through the platform feeds the development of the AI model, while the consumer app FAQ says entries are never sold or used to train anything and the home page says data is not used to train third-party models by default
- The site also contradicts itself on languages: the home page claims nine languages supported natively, while the developers page lists EN, ES, FR, DE, PT and more than thirty others
- HIPAA readiness and SOC 2 Type II are claimed without any viewable document: available here means available on request, so a buyer must ask for the report, the BAA and the DPA before committing
- The privacy policy is written under Indian law (IT Act, SPI Rules, DPDP Act) although the site claims GDPR alignment, no GDPR article appears in it, no EU representative is appointed under Article 27, and there is no EU or US entity behind a product aimed at HIPAA and GDPR regulated workflows
- No hosting country or region is announced for mental health data, the most sensitive category, no subprocessor is named (only categories of providers), and a single email address serves support, legal and data protection
- The privacy policy largely describes the consumer journaling app (emergency contacts, card details, microphone) rather than the clinical workspace, so a reader must keep the two products apart; the publishing company, VeriScript Private Limited, has also been registered since 2018 with an unrelated initial purpose (contract management), Empaithy being a later product
- The headline figures, roughly 40% less documentation time and 100% clinician approval, are publisher claims measured in early pilots with no published study, and the product screenshots carry the mention Demo patient, synthetic data; on the human side, the value of the product rests entirely on clinicians actually reading the drafts they approve rather than rubber-stamping them
Setup & Integrations
Technical difficulty
Easy on the clinical side, moderate for an integrator. Clinics install nothing: access follows a demo, then the workspace is used as is, with no record migration or EHR connector described. For the API, four steps are documented: obtain an environment-scoped project key with a sandbox, post the clinical input to the module endpoint, read back scored JSON, and expose the review controls in your own product. All endpoints share the same request shape, which limits integration cost, and Node and Python SDKs are available with Bearer authentication. No named EHR integration exists, so writing into a record remains the integrator work.
Deployment
Apps stores
Supported languages
Behind Empaithy
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
What is Empaithy?
Does the AI make clinical decisions on its own?
Is Empaithy's analysis a diagnosis?
Is there an API?
How much does Empaithy cost?
What compliance guarantees does Empaithy offer?
Who can use Empaithy?
Is there a mobile app?
Which clinical instruments does Empaithy support?
Is my data used to train the AI, and where is it hosted?
Should you pick Empaithy?
Empaithy is a niche product that takes clinical governance seriously. Mandatory human review, confidence scores on every field and standard instruments such as the PHQ-9, GAD-7, PHQ-2 and C-SSRS place it closer to a documented clinical workflow than to a generic transcription assistant, and the five workflows cover the whole arc of care rather than one moment in it. Three doors lead in: the clinical workspace, the Clinical Intelligence API for teams that want to embed a single module in their own product, and a free consumer journaling app that keeps something running between sessions. The commercial opacity is real. There is no pricing page for the workspace or the API, no about page, no team presented and no social presence. The only figures on the site, USD 9.99 a month and USD 99.99 a year, sit in the terms of service and describe the consumer app, not the clinical offer. Compliance follows the same pattern: HIPAA readiness, a SOC 2 Type II report, a BAA and a DPA are all advertised as available, which means available on request, with nothing verifiable online. The legal framing deserves attention from any European or American buyer. The privacy policy is written under Indian law, citing the IT Act, the SPI Rules and the DPDP Act, with exclusive jurisdiction in New Delhi, no EU representative and no European or US entity, while HIPAA and GDPR are put forward in the marketing. No hosting country is announced for what is the most sensitive category of personal data. The project is visibly active, with blog posts dated June and July 2026 and the EmPulse launch on 10 July 2026. Worth a demo if you run a behavioural health practice, provided you obtain the pricing, the hosting location and the compliance documents in writing first.
- Choosing a selection results in a full page refresh.
- Opens in a new window.