Surfacing turns your logs into a fully encrypted clinical report — one file, opened locally, readable by any clinician in any browser. Optionally, export raw JSON to explore your patterns with AI tools on your own terms.
30-second entries captured the moment they happen, stored encrypted on your device.
Generate a self-contained encrypted HTML file. You set the password — Surfacing never knows it.
The encrypted file is opened locally — zero network activity, zero upload. Options include transfer through a HIPAA-secure messaging terminal directly into a clinical inbox, encrypted email within an EHR system, or secure file transfer — every step maintains confidentiality and safety within the clinician's HIPAA-compliant ecosystem. Disclosure: Surfacing does not control the transfer channel. Patients and clinicians should use a secure, HIPAA-compliant method appropriate to their organization's policies.
An interactive dashboard — not a static PDF. Clinicians can filter by date, drill into individual entries, and interact with charts. All from a single local file.
At-a-glance summary of the reporting period
Every field logged, exactly as entered
What the patient tried and how well it worked
Every log, in chronological order
Any charts you build in the app's Chart Builder are included in the report. Clinicians can hover data points, zoom into date ranges, and read exact values — all offline, inside the file.
For informational use only. Surfacing reports are clinical reference tools intended to support — not replace — professional assessment. Data in the report reflects patient self-report and should be interpreted within the context of a therapeutic relationship. Surfacing is not a medical device and does not provide diagnosis or treatment recommendations.
Numbers tell you what happened. AI can tell you what it looks like — in plain language. Surfacing lets you export a raw JSON file of your data to use however you choose.
Upload your JSON export to any AI assistant — ChatGPT, Claude, Gemini — and ask it to make sense of your logs in plain language. For example:
Your logged data — intensity ratings, triggers, timestamps, skill scores — can become a readable story. "You've logged 9 high-intensity episodes over six weeks, 7 of them on Sunday evenings, almost always tied to work. Your best results came from paced breathing, used 11 times with an average effectiveness of 8.1." That kind of plain-language insight is hard to see from a table of numbers alone.
This is NOT a HIPAA-compliant data transfer. When you upload your JSON to a third-party AI service (ChatGPT, Claude, Gemini, etc.), your data is transmitted to and processed by that company's servers under their own privacy policies — not Surfacing's, and not your clinician's HIPAA agreement. This is entirely your choice to make.
This is a personal tool, not a clinical one. AI-generated summaries are not clinical assessments. They are not reviewed by a licensed professional and should not be used to make clinical decisions. Use them to understand your own data and prepare for sessions — not as a substitute for clinical judgment.
Surfacing does not send your data to any AI service. The JSON export is a file on your device — what you do with it is up to you. If you're not comfortable sharing mental health data with a third-party AI, don't. The clinical HTML report is the privacy-safe path.
The clinical report was designed to work within existing HIPAA-compliant ecosystems without creating new compliance obligations. No new infrastructure. No new risk surface.
The report payload is encrypted before the file is written. Without the password, the file is unreadable ciphertext.
The report file makes no network requests when opened. All libraries are inlined. Works fully on air-gapped clinical systems.
Attach it to an EHR, send via secure message, or hand it over in person. Works universally within their HIPAA-compliant ecosystem.
Surfacing is not a covered entity and the app itself does not transmit PHI. The clinical HTML report is designed for use within your existing HIPAA-compliant communication channels. The optional AI JSON export is outside this framework — see the disclaimer above. For detailed technical compliance information, see our HIPAA overview. This page does not constitute legal or compliance advice; consult your privacy officer or legal counsel for jurisdiction-specific requirements.
Surfacing is coming to iOS and Android. Drop your email and we'll reach out when it's live.