Every piece of the supervision audit, in one product.

Multi-state rules engine

The whole product is built around this. Every supervised hour is evaluated against your state's rule the moment it's logged.

• ▸Five states at launch: NC LCMHCA, CA APCC, TX LPC-A, FL RMHCI, NY limited permit
• ▸Every rule is citation-linked to the state administrative code
• ▸Versioned with effective dates — in-flight obligations grandfather under the rule they started under
• ▸Re-verified quarterly by licensed clinical supervisors on contract
• ▸Detects edge cases (telehealth carve-outs, supervisor-qualification mismatches, pre-registration gaps) before they cost you hours

AI-assisted session notes

Paste a supervision transcript. Get a structured session note your supervisor can review and sign in minutes.

• ▸7-section structured note: overview, topics covered, competencies addressed, goals, supervisor feedback, and next steps
• ▸Prompt is versioned alongside the rule version — auditors can see exactly what the AI was instructed to produce
• ▸Supervisor reviews and edits the note before signing — the final record is always human-approved
• ▸Supervision notes document the supervisory relationship and counselor development, not client details

Tamper-evident e-signatures

Built to the standard a state board would accept on appeal. Not a checkbox — a real signature with intent.

• ▸Intent confirmation required — no accidental signatures
• ▸Captured fields: signer name + credential, role, timestamp, IP address, intent flag
• ▸Both supervisor and supervisee sign — the rule decides who's required
• ▸Once all required signers sign, the evidence package is sealed
• ▸SHA-256 hash + signed JSON content — independently verifiable years later

Role-based dashboards

Four roles, four views — same underlying data. Everyone sees what they need without seeing what they shouldn't.

• ▸Supervisee — hour progress, pending signatures, upcoming sessions, evidence package list
• ▸Supervisor — roster table with progress %, at-risk flags 60 days before deadline, signature queue
• ▸HR Admin — compliance heatmap by state and supervisee, exception report, bulk export
• ▸Executive — total supervisees, % compliant, high/medium-risk count, trends

Session scheduling + Teams integration

Schedule supervision sessions and link them to Microsoft Teams meetings. (Calendar sync ships in v1.1.)

• ▸Individual or group supervision
• ▸Virtual (Teams) or in-person
• ▸Linked to the supervisee's obligation — hours roll up automatically on session completion
• ▸Microsoft Calendar sync (with reminders) ships in v1.1

Roster + invites

Supervisor creates an org. Invites supervisees by email. Supervisees join free and stay free.

• ▸Email invitations with one-click acceptance
• ▸Supervisee can be linked to multiple supervisors if needed (group practice scenario)
• ▸HR Admin role can manage rosters across multiple supervisors in a practice
• ▸Remove or transfer a supervisee — their existing evidence packages remain valid

Audit log + immutable record

Every signature, every rule version change, every evidence package — recorded immutably.

• ▸Per-organization audit log with 7-year retention (matches most state board record requirements)
• ▸Evidence packages cannot be modified after sealing — only re-issued (with new hash) by mutual consent
• ▸Rule version a supervisee was operating under is preserved with each package
• ▸Independently verifiable: hand the board the JSON + hash and they can reproduce verification

Data security

Supervision records are sensitive. Here's exactly how we protect them.

• ▸Passwords bcrypt-hashed; sessions in HttpOnly cookies host-scoped to app.audithalo.com
• ▸All traffic TLS 1.3 in transit; data at rest encrypted by Neon Postgres and Vercel
• ▸Evidence packages SHA-256 hashed at sealing — independently verifiable by anyone with the JSON
• ▸7-year immutable per-organization audit log — meets most state board record-retention requirements