Clinical ecomap. AI without compromising PHI.

A clinical ecomap is an ecomap used within a formal clinical or care-management context — social work, behavioral health, case management, community nursing, or hospital social work departments. In these settings, the diagram is part of the clinical record, which brings two additional requirements that a generic diagram tool does not address: the output must follow Hartman’s published conventions (so that every clinician on the care team reads it the same way), and the process of creating it must not expose protected health information (PHI) to third-party AI providers.

HIPAA’s Privacy and Security Rules do not prohibit using AI to assist with clinical documentation — but they do require that covered entities and their business associates implement appropriate safeguards. When a clinician describes a client’s situation in plain language to an AI, that description typically contains PHI: the client’s name, diagnoses, family structure, provider relationships. Sending that verbatim to a third-party model API without a Business Associate Agreement (BAA) and appropriate technical safeguards creates compliance exposure.

GenogramAI’s Clinical Mode addresses this directly: a client-side de-identification function replaces real names with role-based aliases before any data leaves the browser. The AI receives the ecological structure of the case without the identifying details. The re-identification mapping stays in the browser only — it never reaches the server or the model provider. All saved canvases are AES-256-GCM encrypted at rest, and Institutional plans include a BAA for organizations that require one.