Every piece of the supervision audit, in one product.

Multi-state rules engine

The whole product is built around this. Every supervised hour is evaluated against your state's rule the moment it's logged.

• Supported today: NC LCMHCA, CA APCC, TX LPC-A, FL RMHCI, NY LP-MHC, AZ LAC, DE LACMH, OH LPC, LA PLPC, WA LMHCA — more boards on request
• Every rule is citation-linked to the state administrative code
• Versioned with effective dates — in-flight obligations grandfather under the rule they started under
• Re-verified quarterly by licensed clinical supervisors on contract
• Detects edge cases (telehealth carve-outs, supervisor-qualification mismatches, pre-registration gaps) before they cost you hours

AI-assisted session notes

Paste a supervision transcript — or auto-fetch it from Teams or Google Meet. Get a structured session note your supervisor can review and sign in minutes.

• Structured four-field note: topics discussed, competencies demonstrated, supervisor feedback, and next steps
• Prompt is versioned alongside the rule version — auditors can see exactly what the AI was instructed to produce
• Supervisor reviews and edits the note before signing — the final record is always human-approved
• Supervision notes document the supervisory relationship and counselor development, not client details

Tamper-evident e-signatures

Built to the standard a state board would accept on appeal. Not a checkbox — a real signature with intent.

• Intent confirmation required — no accidental signatures
• Captured fields: signer name + credential, role, timestamp, IP address, intent flag
• Both supervisor and supervisee sign — the rule decides who's required
• Once all required signers sign, the evidence package is sealed
• SHA-256 hash + signed JSON content — independently verifiable years later

Role-based dashboards

Four roles, four views — same underlying data. Everyone sees what they need without seeing what they shouldn't.

• Supervisee — hour progress, pending signatures, upcoming sessions, evidence package list
• Supervisor — roster table with progress %, at-risk flags 60 days before deadline, signature queue
• HR Admin — compliance heatmap by state and supervisee, exception report, bulk export
• Executive — total supervisees, % compliant, high/medium-risk count, trends

Scheduling + calendar integration

Schedule supervision sessions with Google Meet or Microsoft Teams. Calendar events, reminders, and meeting links are handled automatically.

• Individual or group supervision
• Virtual (Teams or Meet) or in-person
• Linked to the supervisee's obligation — hours roll up automatically on session completion
• Google Calendar + Google Meet and Microsoft Outlook + Teams — connect either or both
• Recurring sessions (weekly, biweekly, monthly) with persistent meeting links
• Auto-fetch meeting transcript from Teams or Meet for one-click AI note generation

Roster + invites

Supervisor creates an org. Invites supervisees by email. Supervisees join free and stay free.

• Email invitations with one-click acceptance
• Supervisee can be linked to multiple supervisors if needed (group practice scenario)
• HR Admin role can manage rosters across multiple supervisors in a practice
• Remove or transfer a supervisee — their existing evidence packages remain valid

Audit log + immutable record

Every signature, every rule version change, every evidence package — recorded immutably.

• Per-organization audit log with 7-year retention (matches most state board record requirements)
• Evidence packages cannot be modified after sealing — only re-issued (with new hash) by mutual consent
• Rule version a supervisee was operating under is preserved with each package
• Independently verifiable: hand the board the JSON + hash and they can reproduce verification

Data security

Supervision records are sensitive. Here's exactly how we protect them.

• Passwords bcrypt-hashed; sessions in HttpOnly cookies host-scoped to app.audithalo.com
• All traffic TLS 1.3 in transit; data at rest encrypted by Neon Postgres and Vercel
• Evidence packages SHA-256 hashed at sealing — independently verifiable by anyone with the JSON
• 7-year immutable per-organization audit log — meets most state board record-retention requirements