Kraft accordion file and sage-strapped metal transfer box on an oak stool in a cream plaster alcove with cool north window light
therapy ehr data export checklistehr migrationhipaapractice managementbuyer guide

Therapy EHR Data Export Checklist: Test Client, Cutover, Reconcile

Photo of Dr. Sofia Reyes
Dr. Sofia Reyes Clinical Documentation & Compliance Editor 8 min read
Outline

Dana prints the new EHR order form at 8:40 p.m. The cancellation email to the old vendor sits in Drafts. Eleven years of notes, plans, claims, and messages live in a system she has never successfully exported. The sales rep said “we can get you your data.” That is not a count.

If you are about to sign a new chart or kill the old one, a therapy EHR data export checklist is the work that happens first. You prove the records come out, in a format you can open, with counts that match the live chart. Then you freeze, export again, and only then do you cancel.

Licensed therapists and practice owners. Educational, not legal, billing, or privacy advice. HIPAA, state board, payer, and Part 2 rules vary by jurisdiction, contract, and clinic policy. Federal citations below are from official US pages checked September 2026.

Seed a synthetic client before anyone touches PHI

Do not run the first export on a live caseload. Create one fictional client in the old system. Give it a name you will never assign to a real person. Dana uses Alex Rivera, DOB 03/12/1984, member ID SYN-EXPORT-001.

Seed known objects, then write the expected counts on paper before you ask the vendor for a file.

  1. Three signed progress notes on three different dates.
  2. One psychotherapy note stored in the separate process-note or private-note area, not in the progress-note list.
  3. One active treatment plan with a review date.
  4. Four appointments: two completed, two future.
  5. One claim (CPT 90834, ICD-10 F41.1, POS 11) in a submitted or paid status you can still see.
  6. One ERA or remittance posted against that claim, if your system stores remittances.
  7. A $150 client balance.
  8. Two secure messages, one inbound and one outbound.
  9. One signed consent or authorization PDF.
  10. One other attachment (a blank homework scan is enough).
  11. Mark the client restricted or VIP if your EHR has that flag.
  12. Open the chart once as a second user if you have one, so audit history has more than a single login.

If you cannot create a restricted flag or a separate psychotherapy-note store, write “not offered” on that row. That is a finding, not a pass.

If billing and the portal already work, check which practice integrations can sit beside the chart so you are not migrating only to get a notes layer.

Pull the test export onto a machine you control. Open it. If the vendor will only screen-share a zip they never send, you do not have an export. The therapy EHR data export checklist starts when that file opens, not when the rep says it exists.

Test-client count table

These seed numbers are the answer key for Alex Rivera. Your live chart should show the same objects before you export. The export must show the same objects after. A mismatch on a 12-item fake client is cheaper than a mismatch on 800 real ones.

Scroll the table sideways to view every column

Record type Seed this Count it in the chart by Count it in the export by Fail if
Progress notes (signed) 3 signed notes Filter the note list to signed only. Unsigned drafts do not count. Count signed note files or rows. Confirm each date opens. Fewer than 3, or drafts mixed in with no sign flag.
Psychotherapy notes (held separately) 1 note in the private store Open the process-note or psychotherapy-note area, not the progress-note list. A separate folder, file, or flag. Not the same PDF as a progress note. The private note is missing, or it landed inside the progress-note dump.
Treatment plans 1 active plan Open the plan record. Confirm goal text and review date are present. Plan file or row with those fields readable, not a screenshot. Plan missing, or only a note that mentions a plan.
Appointments / calendar 2 completed, 2 future Calendar or appointment report for this client only. Four dated rows, with completed versus future still distinct. Future visits dropped, or times shifted with no timezone note.
Claims 1 claim, 90834 / F41.1 / POS 11 Claims or billing screen. Write the claim ID. Same ID, CPT, diagnosis, POS, and status in the file. Claim absent, or CPT/diagnosis stripped.
ERAs / remittances 1 posted remittance if the EHR stores it Payment or ERA screen linked to that claim. Remittance file or row still linked to the claim ID. ERA missing while the chart still shows a posted payment.
Client balances $150 Ledger or balance field on the client. A number you can tie to the same client ID. Balance zeroed, or no ledger in the export.
Secure messages 1 inbound, 1 outbound Message thread on the client. Both messages, with direction and timestamp. Thread missing, or only a "message existed" stub.
Consents / authorizations 1 signed consent PDF Documents tab. Confirm the signed file opens. The PDF itself, not a checkbox that says consent is on file. Flag without the file, or an unreadable binary.
Attachments / uploads 1 other upload Files list besides the consent. The same file, openable. Filename listed, bytes gone.
Restricted / VIP clients Restricted flag on, if the EHR has one Client header or privacy flag. Client present, and the flag or a written withhold list. Client omitted with no written withhold, or flag stripped.
Audit / access history At least two user events plus this export Audit or access log for the client, filtered to the seed window. Log rows you can read without opening a vendor ticket. No log, or the log stops before the export event.

Print the same twelve rows with chart, test-export, cutover, delta, and pass/fail columns in the Vendor Due Diligence Pack and fill numbers in the room. The pack is the workbook. The table above is the answer key for the fake client.

Free PDF: Vendor Due Diligence Pack

A printable buyer pack: AI-vendor questionnaire with pass/fail, EHR export count reconciliation, and a synthetic-claim demo scorecard.

  • Fillable AI-vendor questionnaire with a pass/fail column for BAA, retention, training, and sign-off
  • EHR export and count-reconciliation workbook with a vendor email to send before cutover
  • Synthetic-claim demo scorecard for eligibility through note-to-claim

Free. We'll email the PDF link right away. We may also send the occasional therapist toolkit. Unsubscribe any time.

Email to send before any export

Send this before the test pull. Keep the reply with the workbook. A verbal “CSV is fine” is not a format.

Subject: Test-client and cutover export request for [practice legal name]

Please run a test-client export for synthetic client [Alex Rivera / SYN-EXPORT-001] and, on a date we will name, a cutover export of our full book of business in [format: native database, C-CDA, FHIR, CSV, PDF] covering [date range]. Return a count for each record type: signed progress notes, psychotherapy notes held separately, treatment plans, appointments, claims, ERAs or remittances, client balances, secure messages, consents, attachments, restricted or VIP clients, and audit or access history. Confirm in writing whether restricted clients are included or withheld. Confirm deletion or return of PHI at contract end, with a day count, including backups. Do not send real client files to this address.

A usable reply names the format, the twelve counts, the restricted-client rule, and a deletion or return timeline. Walk if the reply is “we can discuss migration after you sign,” “PDFs of notes only,” or “audit logs are available on request for a professional-services fee.”

Cutover day: second export, then hold or proceed

The test client proved the pipe works. Cutover is the same therapy EHR data export checklist against the live book of business.

  1. Freeze new charting on the old EHR at a written time (example: Friday 6:00 p.m. local).
  2. Run the same export job on the full caseload, same format as the test.
  3. Count each record type in the live chart with the queries in the table below.
  4. Count the same types in the cutover file.
  5. Write the delta. Zero is a pass. A delta with a written reason (duplicate merge, known voided claim) can pass. An unexplained delta is a hold.
  6. Keep the old EHR paid and reachable until every hold row is closed.

Scroll the table sideways to view every column

Record type Chart query on freeze day What you count in the file What a delta means Hold if
Progress notes (signed) Signed-note report, all clinicians, full date range you still have a duty to keep. Signed note objects that open. Do not count directory names. Missing notes, or extras from another clinic you do not own. Any missing signed note without a written void or merge.
Psychotherapy notes (held separately) Count in the separate store only. If you never kept them separately, write "not used." Objects still flagged or filed apart from progress notes. Private notes folded into the medical record dump. Separate store empty while the chart still shows private notes.
Treatment plans Active plus historical plans you still produce for payers or boards. Plan records with goals and dates, not a note that says "see plan." Plans flattened into the last progress note. Active plans missing for open cases.
Appointments / calendar Completed and future visits in the freeze window plus history you keep. Dated rows with status. Recurring series should still expand or carry a series id. Future book dropped, which is how Monday morning vanishes. Next-week calendar empty in the file while the old grid is full.
Claims All claims in the date range, including denied and unbilled. Claim id, CPT, diagnosis, payer, status. Denied claims omitted "because they did not pay." Open or denied claims missing. You still have to appeal them.
ERAs / remittances Posted remittances linked to those claims. ERA files or rows still tied to claim ids. Payments posted in the ledger with no remittance artifact. You cannot rebuild a denial from the file.
Client balances Balance report, including credit balances. Per-client amounts that sum to the report total. Rounding, or credits wiped. Practice-wide AR in the file does not match the freeze report.
Secure messages Message count by client, or a vendor report if that is the only query. Threads that open, not a single "N messages" integer with no bodies. Bodies stripped, leaving timestamps. Portal advice you still rely on is gone.
Consents / authorizations Documents report: consents, ROI, telehealth, AI, media. The signed files. A yes/no column with no PDF. You cannot produce a signed ROI from the export.
Attachments / uploads Files report excluding consents already counted. Openable files. Check a sample of ten, not only the count. Count matches, bytes do not (zero-length files). Sample of ten has any unreadable file.
Restricted / VIP clients List every restricted chart. If the EHR cannot list them, that is a finding. Each restricted client present, or named on a withhold list the vendor signed. Silent omission. This is how a high-risk chart disappears. Any restricted client unaccounted for.
Audit / access history Export or report for the freeze window, plus a sample of older access if you keep it. Rows that name a user, a time, and an action, including the export itself. Logs truncated to 90 days when your board or payer expects longer. No export of logs, or logs only via a paid ticket after cancel.

Hold, any one: unexplained note or claim delta; psychotherapy notes missing from the segregated store; restricted clients silently dropped; audit history not in the file; vendor will not put format, counts, and deletion timeline in writing. Keep paying the old system until those close.

An export test is cheaper than a full cutover you did not need.

Do not write a single retention number on the workbook and call it done. HIPAA tells you how to safeguard PHI and when a patient can see it. It does not set one national clock for how long a psychotherapy practice must keep a chart.

What actually sets the clock, in layers:

  • State licensing boards for counselors, psychologists, social workers, and MFTs. They differ, and they differ again for minors.
  • Medicaid, Medicare, and commercial contracts if you bill them. A payer can demand records after you have left the old EHR.
  • Malpractice carriers. Their application and policy often state a retention period that is longer than your comfort.
  • 42 CFR Part 2 if you hold substance-use records as a Part 2 program or lawful holder. Those records have extra consent and redisclosure rules. OCR pages on Part 2 were checked September 2026.
  • Your own closing-practice statute if you ever wind the clinic down. Switching EHRs is not closure, but the files still have to be producible.

If you need a starting map of state rules, use the therapy record retention by state table, then confirm with counsel and the board you actually sit under. Do not copy a number from a blog into a cancellation email.

Two HIPAA distinctions that show up on cutover day:

Patient access is not a migration. 45 CFR 164.524 (eCFR current as of the September 2026 check) gives an individual a right to inspect and copy PHI in a designated record set, with stated exceptions, in the form and format requested if it is readily producible. HHS OCR’s right of access guidance and the electronic copy FAQ (both still posted as of September 2026) describe that patient-facing duty. Producing one client’s file in PDF does not prove you can move 800 charts, claims, and audit logs into a new system.

Psychotherapy notes stay apart unless you have a reason to mix them. 45 CFR 164.501 defines psychotherapy notes as notes that document or analyze a counseling session and that are separated from the rest of the medical record. 45 CFR 164.524(a)(1)(i) excludes those notes from the individual right of access. If your old EHR kept process notes in a private store, demand a separate export. Merging them into the progress-note zip “for convenience” can put them in the designated record set you will later have to produce.

At contract end, a business associate agreement has to address return or destruction of PHI if feasible. That is 45 CFR 164.504(e), summarized in HHS OCR’s business associate guidance (checked September 2026). Ask for a day count in writing. “We retain backups per our policy” with no end date is a hold.

None of this is a ranking of EHRs. Run the same seed, the same email, and the same twelve counts on whatever system you are leaving and whatever system you might enter.

If you still need a stack after the records come out, read the 2026 behavioral health software comparison for practice-management versus documentation layers. If you are leaving a platform, compare switcher notes on the therapy software alternatives list. Do that after the export test, not instead of it.

What Emosapien is, and is not, if you are switching EHRs

Emosapien is a clinical AI layer for licensed therapists. Product facts below are from Emosapien’s public features, pricing, integrations, and security pages checked September 2026. SOAP, DAP, BIRP, and GIRP are the published progress-note formats. In-session support is on Professional and Enterprise, not Free or Starter. Structured note write-back is live for SimplePractice; TherapyNotes and Jane App are in beta. You review and sign. Session content is not used to train public models. A BAA is available on Professional and Enterprise, not on Free.

Emosapien is not your chart of record. It is not a migration vendor. It does not export another company’s designated record set, claims, ERAs, balances, or audit history. It does not file a claim. It does not set your retention schedule. It does not replace the old EHR’s legal duty to return or destroy PHI under your BAA with that vendor.

If the twelve-row test fails on the old system, do not treat a notes layer as the fix. Keep the old chart reachable, get the file, then decide whether you still want a documentation layer beside the new chart.

Start on the free plan and run this test yourself on a fictional client: draft one note in the format you already chart, then export or copy it so you still hold a file you can open. Direct EHR write-back is documented for paid plans where an integration is available, not on Free. Keep real PHI out until a signed BAA covers the plan you will use.

Keep the old chart until counts match, then test drafts on the free plan

Emosapien drafts notes for clinician review. It is not the EHR you are leaving or the migration pipe between charts. Start on the free plan and run this test yourself on a fictional session before any PHI moves.

Start on the free plan and run this test yourself

Ready to transform your practice?

Join 10,000+ therapists using Emosapien.