A mental health virtual assistant handles the front office and back office of a therapy practice remotely. That covers patient intake, scheduling, insurance verification, superbills, and claim follow-up, all inside the practice’s EHR. The therapist keeps every clinical decision. The VA runs the admin around it.
This guide answers the questions practice owners actually ask before they hire one: What the VA can legally touch, which software they use, what happens when a client in crisis calls, and what it costs.
What Does a Mental Health Virtual Assistant Do?
A mental health virtual assistant executes the non-clinical workflows that eat a therapist’s evenings. The American Psychological Association’s 2025 Practitioner Pulse Survey found that 46% of psychologists have no openings for new patients and 40% run a waitlist when demand outstrips supply. That badly, every hour a clinician spends on admin costs a client a session.
Mental health VA tasks: front office
- New client inquiries: answering contact forms, voicemails, and Psychology Today referrals within the same business day
- Patient intake: sending intake packets, consent forms, and screening questionnaires (PHQ-9, GAD-7) through the EHR client portal
- Scheduling: booking, rescheduling, waitlist management, and appointment reminders
- Good Faith Estimates: preparing GFEs for self-pay clients, which the No Surprises Act requires
Mental health VA tasks: back office
- Insurance eligibility checks before the first session
- Superbill generation for out-of-network clients
- Claim submission and denial follow-up
- Copay and balance collection
- Credentialing paperwork, including CAQH profile updates
Example 1: A solo LPC in Texas spends Sunday nights returning inquiry voicemails. Her virtual assistant now returns every inquiry by 2 p.m. the same day, runs an eligibility check, and books the consult directly into SimplePractice. The LPC opens her calendar Monday and sees booked intakes with nothing waiting to be returned.
Theory in practice: comparative advantage
Economist David Ricardo’s principle of comparative advantage says each party should do the work where its opportunity cost is lowest. A licensed therapist billing $150 USD an hour who spends six hours a week on scheduling gives up $900 USD of clinical capacity. A VA can do the same six hours for a fraction of that. Run that calculation on your own practice, and you get a clear list of what to delegate first.
Can a Virtual Assistant Legally Handle Patient Information Under HIPAA?
Yes, as long as you set it up correctly. Under HIPAA, a mental health practice is a covered entity. Anyone outside your workforce who creates, receives, or transmits Protected Health Information (PHI) for you is a business associate. A remote VA who opens your EHR, reads intake forms, or sees insurance details meets that definition.
Mental health practice owners require a Business Associate Agreement (BAA)
The rule is simple: sign a BAA before the VA touches PHI. A BAA spells out how the business associate protects PHI, reports breaches, and returns or destroys data when the work ends.
The HHS Office for Civil Rights (OCR) enforces this against small practices too. Recent settlements include a single-facility MRI clinic ($25,000 USD) and a small surgical group ($10,000 USD). OCR has also settled directly with business associates, including BST & Co. CPAs ($175,000 USD, August 2025) and MMG Fusion (March 2026). Being a solo practice does not protect you.
Example 2: A group practice owner gave a new assistant a login to the practice’s personal Gmail account to “help with emails.” Client names and session times sat in that inbox. Free Gmail does not come with a BAA. The fix took one afternoon: move to Google Workspace, sign Google’s BAA, and give the VA their own named account with MFA.
Apply the HIPAA “minimum necessary” standard.
HHS guidance tells covered entities to “make reasonable efforts to limit” PHI use and disclosure to “the minimum necessary to accomplish the intended purpose.” In security terms, this is the principle of least privilege: each user gets only the access their job requires.
In practice:
- Give the VA a scheduler or biller role in the EHR, with clinical note access switched off
- Keep psychotherapy notes completely out of reach. HIPAA gives them extra protection beyond the general medical record
- Turn on multi-factor authentication for every system
- Ban downloads to personal devices and require a password manager
Example 3: In TherapyNotes, a practice owner set their VA’s role to scheduling and billing only. The VA can see appointment times, insurance data, and payment status. The VA cannot open progress notes or psychotherapy notes. That single settings change applies the minimum necessary standard in under five minutes.
What’s changing with HIPAA in 2026
HHS proposed a major HIPAA Security Rule update in January 2025 (it was however delayed). It would make encryption, MFA, and annual verification of business associates’ safeguards mandatory. As of October 2026, HHS has not published a final rule. Build to the proposed standard now. Encryption and MFA cost almost nothing to set up and remove most of your exposure.
Practices treating substance use disorder have a second rulebook. The updated 42 CFR Part 2 rule brought SUD records closer to HIPAA, with a compliance date of February 16, 2026. If your practice holds Part 2 records, check your VA’s access against both rules.
Which EHR and Practice Software Can a Mental Health VA Use?
A therapy practice VA manages your EHR the same way an in-office admin would. The tool matters less than two checks: does the vendor sign a BAA, and does it support role-based permissions?
| Tool | What the VA does in it | BAA available |
|---|---|---|
| SimplePractice | Scheduling, intake packets, client portal, superbills, claims | Yes |
| TherapyNotes | Scheduling, billing, ERA posting, eligibility checks | Yes |
| Jane App | Online booking, reminders, payments (popular in Canada, UK, AU) | Yes |
| Tebra (formerly Kareo) | Billing, claims, denial management | Yes |
| Valant / TheraNest | Group practice scheduling and billing | Yes |
| Google Workspace | Email, calendar, shared drives | Yes, on paid plans |
| Zoom for Healthcare / Doxy.me | Telehealth link management | Yes |
| Spruce Health / Paubox | HIPAA-compliant texting and email | Yes |
Always confirm current BAA terms with each vendor directly before you rely on this table.
Example 4: A psychiatric nurse practitioner in Arizona uses SimplePractice for scheduling and Spruce for client texting. The VA works only inside those two tools. No PHI goes through WhatsApp, personal phones, or regular SMS.
How Should a Mental Health VA Handle a Client in Crisis?
This is the question most VA articles skip, and it matters most. Clients reach out through admin channels, and some of them reach out in crisis. Your VA needs a written escalation protocol before their first day.
The VA never assesses risk and never offers counseling. Their job is to recognize warning signs, connect the person to emergency help, and alert the clinician immediately.
A simple crisis escalation protocol
- Recognize: The VA flags any mention of suicide, self-harm, harm to others, or a medical emergency.
- Direct to emergency help: The VA gives the regional crisis line from a script. In the US, that’s 988 Suicide & Crisis Lifeline or 911. In the UK, it’s Samaritans (116 123) or 999. In Australia, it’s Lifeline (13 11 14) or 000.
- Escalate: The VA calls the on-call clinician by phone. Email and portal messages are too slow here.
- Document: The VA logs the time, the channel, and the action taken in the EHR.
- Never sit on it: If the VA can’t reach the clinician within a set window (for example, 10 minutes), they call the backup contact the owner has named.
Example 5: A client replies to an appointment reminder with “I don’t think I’ll be around next week.” The VA follows the script, sends the 988 information, calls the therapist’s mobile, and logs the exchange. The therapist reaches the client within the hour. The VA made no clinical judgment. They followed the protocol.
Theory in practice: checklists reduce errors under pressure
Atul Gawande’s The Checklist Manifesto showed how simple checklists cut errors in high-stakes settings like surgery. Crisis moments are exactly when people forget steps. Print the protocol, pin it in the VA’s workspace, and role-play it during onboarding.
Can a Virtual Assistant Handle Insurance Billing for a Therapy Practice?
Yes. A virtual assistant handles insurance verification, superbill generation, claims, and denials once you give them the payer rules and your fee schedule. This is often where a mental health VA earns back their cost fastest.
The APA’s 2025 survey found that 62% of psychologists accept some form of insurance, and 75% named insufficient reimbursement as their top insurance barrier. When payers already underpay, letting denials sit for 60 days makes the loss worse.
Mental health billing tasks a VA can own
- Eligibility and benefits checks: deductible, copay, session limits, prior authorization requirements
- CPT code entry from the clinician’s session record. Common codes include 90791 (diagnostic evaluation), 90834 (45-minute psychotherapy), 90837 (60-minute psychotherapy), and 90847 (family therapy with the patient present)
- Superbills for out-of-network clients to submit to their own insurers
- Denial follow-up: reading the remittance (ERA), fixing the error, and resubmitting
- Accounts receivable reports for the owner every week
The clinician always chooses the diagnosis and the service code. The VA enters, submits, and chases.
Example 6: A two-clinician practice had $14,000 USD in claims older than 90 days. A billing-trained VA worked the aging report for four weeks, fixed missing modifiers and outdated insurance IDs, and resubmitted. The owner now gets a Friday AR snapshot showing every claim older than 30 days.
Theory in practice: Theory of Constraints
Eliyahu Goldratt’s Theory of Constraints says a system’s output depends on its tightest bottleneck. As Goldratt put it, “an hour lost at the bottleneck is an hour lost for the entire system.” In a therapy practice, the bottleneck is clinician hours. Any admin task that pulls the clinician off sessions shrinks the whole practice’s capacity. Billing usually sits right at that bottleneck.
Do Virtual Assistants Reduce No-Shows and Speed Up Intake?
Yes, and the research is detailed. Behavioral health practices report intake no-show rates of roughly 25% to 40%, well above primary care. A systematic review of 31 randomized controlled trials found reminder systems consistently improved attendance. Phone calls produced the largest reduction, and multiple reminders beat a single one.
A 2025 quality improvement project at an outpatient mental health clinic cut no-shows by 14.81% with text reminders alone. A VA can layer a personal confirmation call on top of automated texts for new clients, which is the combination the research favors.
Example 7: A practice switched from one automated text to a three-touch sequence: an automated email at 72 hours, an automated text at 24 hours, and a personal call from the VA for every first appointment. The owner tracks the no-show rate monthly in SimplePractice’s reports.
Speed-to-lead: answer inquiries the same day
A widely cited Harvard Business Review study (Oldroyd, McElheran, and Elkington, 2011) found firms that responded to leads within an hour were nearly seven times more likely to qualify them than firms that waited longer. The study is old and covers sales leads in general, but the principle applies directly to therapy inquiries. A person who finally works up the courage to ask for help will often book with whoever answers first.
Example 8: A Philippines-based VA covers inquiries during US evening hours, when many clients reach out after work. Inquiries that used to wait until morning now get a reply the same evening, with consult slots attached.
How Much Does a Mental Health Virtual Assistant Cost?
Cost depends on three things: skill level, hours, and region.
- General admin VA: scheduling, inbox, reminders
- Healthcare-trained VA: adds EHR experience, intake workflows, and HIPAA awareness.
- Medical billing VA: adds CPT coding support, claims, and denial management
See Aristo Sourcing rate range for each tier in our calculator.
Compare that to a US-based in-office medical receptionist, where you pay wages plus payroll taxes, benefits, desk space, and equipment. Then add the revenue side. Two extra billable sessions a week at $150 USD is $15,600 USD a year in recovered clinician capacity.
Theory in practice: Parkinson’s Law
Parkinson’s Law says work expands to fill the time available for it. Therapists who “do admin when they have a gap” find the admin fills every gap. Fixed VA hours with a clear task list put limits back on that work.
How Does Aristo Sourcing Vet and Place Mental Health Virtual Assistants?
Aristo Sourcing vets and places virtual assistants from the Philippines and South Africa for businesses worldwide. Since January 2014, Aristo has helped more than 1,000 businesses build remote teams, using the delegation approach of founder and management coach Mads Singers.
Why the Philippines and South Africa suit therapy practices
- The Philippines has a large healthcare BPO workforce. Many candidates come with US medical billing, insurance verification, and EHR experience. Time zones suit US evening coverage and Australian business hours.
- South Africa offers strong native-English communication and overlaps with UK and European business hours. That makes it a good fit for UK and EU practices working under GDPR.
Both countries have their own data protection laws: the Philippines’ Data Privacy Act of 2012 and South Africa’s POPIA. Candidates working in these markets already know consent-based data handling.
What Aristo’s vetting checks for a healthcare role
- Prior experience with named EHRs (SimplePractice, TherapyNotes, Tebra)
- Written communication tested on realistic client messages
- Confidentiality judgment, tested with scenario questions
- Reliable internet, a private workspace, and a backup power plan
- Reference checks from previous healthcare employers
Who signs the BAA with an offshore VA?
Any party that accesses your PHI needs a signed BAA before day one. Depending on how you structure the engagement, that means the VA, the staffing company, or both. Before you sign, ask any provider, Aristo included, four questions:
- Which party contracts with the VA, and which party signs the BAA?
- Which country’s law governs the agreement, and how would you enforce it if the VA caused a breach?
- Does the BAA require breach notification within a set window? (The proposed 2026 Security Rule points to 24 hours for contingency plan activation.)
- What happens to PHI and system access on the VA’s last day?
You stay responsible for HIPAA workforce training and system access settings, because you are the covered entity. Aristo walks every healthcare client through the agreement structure during placement.
How Do You Onboard a Mental Health VA Safely?
Delegation fails when owners hand over tasks without process. Mads Singers’ approach to delegation starts with documenting the task before you hand it over, then building trust with the person step by step.
A 30-day onboarding plan for a therapy practice VA
Week 1: Compliance first
- Sign the BAA
- Complete HIPAA training and keep the certificate on file
- Create named accounts with MFA. Never share logins
- Review and sign the crisis protocol
Week 2: Low-risk tasks
- Appointment reminders and rescheduling
- Inbox triage with templated replies
Week 3: Intake
- New inquiry responses, eligibility checks, intake packets
Week 4: Billing
- Superbills, then claims, then denial follow-up
Example 9: An owner recorded a five-minute Loom video of herself processing one superbill in SimplePractice. The VA turned the video into a written SOP, ran ten superbills under supervision, and took the task over fully by day 20.
Theory in practice: the Eisenhower Matrix
The Eisenhower Matrix sorts tasks by urgency and importance. “What is important is seldom urgent, and what is urgent is seldom important,” Dwight Eisenhower said. Inquiry calls and reminders feel urgent but rarely need a license. Clinical work and practice strategy carry the real importance. Hand the urgent but unimportant quadrant to your VA first.
Theory in practice: Maslach’s burnout model
Christina Maslach defines burnout through three dimensions: exhaustion, cynicism, and reduced professional efficacy. A National Council for Mental Wellbeing survey found 93% of behavioral health workers reported burnout, with 62% rating it severe. Admin overload feeds all three dimensions. It drains energy, it takes time away from the work clinicians care about, and it buries their sense of impact under paperwork. Taking that load away goes straight at the causes.
Does a Mental Health VA Work for UK, Australian, and Canadian Practices?
Yes, but the rules change by country.
- United Kingdom: UK GDPR and the Data Protection Act 2018 apply. You need a data processing agreement with the VA and a lawful basis for any transfer outside the UK. Health data counts as “special category” data.
- European Union: GDPR applies, with the same special category rules. Standard Contractual Clauses usually cover transfers to the Philippines or South Africa.
- Australia: The Privacy Act 1988 and the Australian Privacy Principles apply. APP 8 governs cross-border disclosure.
- Canada: PIPEDA applies federally, plus provincial health privacy laws such as Ontario’s PHIPA.
Example 10: A UK counseling practice hired a South Africa-based VA who works UK hours. The practice signed a data processing agreement, ran a transfer risk assessment, and configured Jane App so the VA can manage bookings without accessing clinical notes.
Speak to a privacy lawyer in your own jurisdiction before cross-border hiring. This guide gives you the questions to ask. It does not replace legal advice.
Mental Health Virtual Assistant FAQ
Can a VA see therapy notes?
They shouldn’t. Set the VA’s EHR role to scheduling and billing, and keep psychotherapy notes locked.
Can an offshore VA sign a HIPAA BAA?
Yes. HIPAA doesn’t bar foreign contractors or companies from signing a BAA. The harder question is enforcement, so confirm which country’s law governs the agreement and who carries liability.
Does the VA need to be HIPAA certified?
HIPAA has no official certification. It requires workforce training and documented safeguards. Keep a training record for your VA.
Can a VA answer the practice phone?
Yes, through a HIPAA-compliant VoIP system that signs a BAA, with the crisis protocol on hand.
Who decides CPT codes and diagnoses?
The licensed clinician. The VA enters and submits what the clinician records.
How many hours does a solo practice need?
Most solo practices start with 10 to 20 hours a week. Group practices often need a full-time VA per three to five clinicians.
Next Step: Talk to Aristo Sourcing
If you run a therapy practice and want a VA who knows SimplePractice, insurance verification, and HIPAA-safe workflows, book a free consultation. We’ll map which tasks to delegate first and match you with a vetted candidate from the Philippines or South Africa.
