Built to the highest standardstechnical, legal and ethical

The security and confidentiality of information are the foundation on which the entire product is built.

Morph aims to meet the highest standards of technical and legal protection, as well as the professional ethics of psychologists, psychotherapists and psychiatrists.

Start for free

GDPR Compliance

We fully meet GDPR requirements for protecting personal and health data in the EU. That means we follow the strictest European privacy laws, and your work with clients stays fully compliant.

Data encryption

Data is encrypted in transit and at rest to industry standard. That means we cannot access the data you enter about your clients, and the information stays protected even in the event of a hack attempt.

Regular backups

Automatic backups every 24 hours keep your information safe in any circumstance. That means your records, notes, and client history cannot be lost and can be restored even after a technical issue.

EU Hosting

Data is stored only on servers in the EU, in line with European law. That means your clients' information never leaves European jurisdiction, as required by GDPR.

Multi-factor authentication

Sign-in requires extra confirmation beyond the password. That means even if a password is compromised, nobody else can access your practice and your clients' data.

AI assistant algorithm

AI acts only on a task you have initiated, and only within your permissions. Your data is never used to train the model and is processed entirely in the European Union.

Three risk levels

1

Administrative data and tasks

Low risk

Tasks

Managing schedule, bookings, client profiles and working hours.

Tasks performed by the AI assistant

AI recognises which function in the platform should be performed: for example booking an appointment, changing working hours, adding a new client. The algorithm does not access personal or clinical data: it only passes a command to the system, which already knows what you are allowed to do.

Data used and stored

Client name and contact details, booking history, the therapist's working hours, practice information (address, services, prices, cancellation policies).

2

Clinical content and structuring

Medium risk

Tasks

Recording, storing and organising session notes.

Tasks performed by the AI assistant

AI processes clinical content, but only to transcribe, organise or visualise it: not to interpret it. The algorithm structures information you have already entered or dictated: it does not add its own interpretation.

Examples

  • transcription of dictated notes
  • handwritten text recognition (OCR)
  • formatting notes in a different layout

Data used and stored

Session notes (typed and dictated), scanned/photographed handwritten notes, tags and categories set by the therapist, client progress metrics set by the therapist.

3

Interpretation of clinical content

High riskdoes not exist

Morph does not offer functionality in which AI forms hypotheses, gives recommendations for working with a client, or takes any clinical decision. The algorithm does not answer questions such as “What is the best approach for this client” or “What does this pattern of behaviour mean”. All clinical judgement remains entirely in your hands.

If this ever changes, we will update this page and require renewed informed consent before introducing any new functionality at this level.

AI assistant security

EU data residency

Data is processed entirely within the European Union (Google Gemini 2.5 Flash via Vertex AI, region europe-west1).

No training on your data

Your information is never used to train the AI algorithm.

Full audit trail

Every AI action is logged (who, when, what action, on which record).

Access only within your permissions

AI can only perform actions you already have permission to do in the platform.

No passive access

AI sees data only when it is part of an active task that you have initiated.

Ready to manage your practice with one system?

Join the therapists who already use Morph.

Start free today

No debit or credit card required