Guide

Documenting suicide risk: structure over checkbox

Summary

Document suicide risk assessment as structured clinical reasoning, not a checkbox: which risk and protective factors you asked about, the client's own words, how those answers led to your risk judgment, and what response — continued care, a safety plan, or a higher level of care — followed from it. Keep the assessment in the general chart, not a shielded file, name any crisis resources you actually provided, and write every assessment to the same structure so the record shows a consistent, reasoned process over time.

By Gale Editorial · Updated 2026-07-26. Every figure cited to a dated source. How we write.

Why 'denies SI/HI, safety plan reviewed' is not documentation

A single line noting that a client denied suicidal or homicidal ideation and that a safety plan was reviewed tells a later reader nothing about what you actually asked, what the client said, or why you reached the conclusion you did. That shorthand is common in solo practice, but it does not show the clinical reasoning a reviewer, a licensing board, or your own future self needs to reconstruct the visit.

Structured documentation over a checkbox means writing down which risk and protective factors you asked about, what the client's own words were, and how those specific answers led to your risk formulation and plan, not a single conclusory sentence dropped into an otherwise unrelated note.

The difference matters most exactly when it is tested: months or years later, in a licensing complaint, a malpractice claim, or a subpoenaed record, a checkbox note gives a reviewer nothing to evaluate except your conclusion. A structured note gives them your reasoning, which is what actually gets defended. (If the conversation surfaces a threat toward a third party rather than risk to the client themselves, that shifts into duty-to-warn territory, with its own separate documentation rule to follow.)

Structure the assessment around a validated framework

Organize the assessment around a structured framework rather than free-associating through the conversation — a validated severity scale walks through ideation, its intensity and duration, prior attempts, and specific plan and access to means in a consistent sequence session to session 1Ref 1Posner K, Brown GK, Stanley B, et al. (2011).The Columbia-Suicide Severity Rating Scale: initial validity and internal consistency findings from three multisite studies with adolescents and adults.The structured, validated severity-scale framework that a defensible risk assessment note is organized around.. Documenting that you followed a consistent structure, and what the client's specific answers were, is what separates a defensible assessment from an impression.

You do not need to reproduce every item of the instrument verbatim in the note — the instrument itself is the assessment tool, not the note. Record which domains you covered, the client's own language where it is clinically significant ('I think about it but I would never act on it' is meaningfully different from silence), and your clinical judgment about severity given those specific answers.

Repeat the same structure at every risk-relevant contact, not only the first one. A note that shows the same framework applied consistently over time, with the client's answers changing or staying the same, is far more defensible than a single thorough assessment followed by shorthand thereafter.

Document your clinical reasoning, not just the score

A severity rating or risk level is a summary, not a substitute for the reasoning underneath it — write the specific factors that pushed your judgment toward higher or lower risk, and the protective factors you weighed against them, so a reader can see how you arrived at the conclusion rather than only the conclusion itself. Record-keeping guidance for the field treats this kind of documented clinical reasoning as core content of an adequate record, not an optional elaboration 2Ref 2American Psychological Association (2007).Record Keeping Guidelines.That documented clinical reasoning, not just a summary rating, is core content of an adequate clinical record..

Protective factors deserve equal weight in the note: a strong therapeutic alliance, engaged treatment, reasons for living the client names spontaneously, or a support system you have verified — documented, if relevant, through collateral contacts you have logged separately — rather than assumed. A note that lists only risk factors, with no protective factors weighed against them, reads as one-sided even when your actual clinical judgment weighed both.

Write the disposition decision as a sentence, not an inference: continue outpatient care at current frequency, increase frequency, involve a support person, or refer for a higher level of care, and say why that decision, and not another one, followed from what you found.

When risk is elevated: safety planning as the documented response

An elevated finding should produce a visible, proportionate response in the note — most often a collaboratively built safety plan following a structured sequence of warning signs, coping strategies, support contacts, and means restriction, documented as an intervention rather than a form filed away 3Ref 3Stanley B, Brown GK (2012).Safety Planning Intervention: A Brief Intervention to Mitigate Suicide Risk.The six-step safety planning structure that an elevated finding's documented response is built around.. The note should show the sequence: assessment, finding, and the specific response that finding produced.

Means restriction deserves its own explicit line: what was discussed about access to lethal means, what the client agreed to, and whether a support person's involvement was part of that conversation. A note that mentions 'safety plan completed' without describing the means-restriction conversation specifically leaves out the part of the intervention with the clearest evidence behind it.

If your clinical judgment is that outpatient care remains appropriate despite an elevated finding, write that reasoning explicitly, including the alternatives you considered and rejected, and why. A reviewer evaluating the decision after the fact needs to see that a higher level of care was actively considered, not simply absent from the note.

Keep the assessment in the general record, and understand what a records request reaches

Write the risk assessment into the same progress-note file the rest of the chart lives in, not a separately shielded psychotherapy-notes file — HIPAA's definition of psychotherapy notes excludes assessment, diagnosis, and treatment-plan content, and a risk assessment is exactly that kind of content 4Ref 4HHS Office for Civil Rights (2026).Does HIPAA provide extra protections for mental health information compared with other health information?.That risk-assessment content is excluded from the psychotherapy-notes definition and belongs in the general progress-note record.. If the client or someone with legal authority later requests the record, this assessment is part of what HIPAA's access right reaches, produced within 30 days absent a specific exception 5Ref 5HHS Office for Civil Rights (2026).Individuals' Right under HIPAA to Access their Health Information.That a risk assessment note is part of the record reachable under a client's HIPAA access request, produced within 30 days absent an exception..

That has a practical consequence for how you write: assume a risk assessment note may eventually be read by the client themselves, or by another treating provider they authorize, and write it in language that is clinically accurate without being needlessly alarming in its phrasing. The content should not soften a genuine finding, but it should be written the way you would want a worried client, or a colleague picking up the case, to encounter it.

A subpoena or a licensing board request reaches this note the same way an access request does. The best preparation for either is the same habit: write the assessment as though it will be read by someone besides you, every time, not only when you suspect it might be.

What the client should already understand about these conversations

Informed consent at the start of care should already have covered the limits of confidentiality around safety, so a risk-assessment conversation later in treatment is not the client's first exposure to the idea that you may need to act to keep them safe. Ethics codes for the field frame this disclosure as a standing obligation established at intake, not an improvised explanation delivered in the moment a risk conversation begins 6Ref 6American Psychological Association (2017).Ethical Principles of Psychologists and Code of Conduct.That the limits of confidentiality around safety are an informed-consent obligation established at intake, not an improvised in-the-moment disclosure..

Document that this conversation happened at intake, and reference it briefly if you need to act on a risk finding later — a note that shows the client already understood the limits of confidentiality reads very differently from one where that understanding is assumed but never recorded anywhere.

If you ever need to disclose beyond the treatment relationship because of a safety concern, document the specific basis for that decision at the time you make it, the same discipline that applies to any other safety-based disclosure outside of routine care.

Name the crisis resources you actually provided

When a risk conversation happens, document the specific resources you gave the client — 988, a crisis line, an emergency department, or a specific follow-up plan — rather than a general reference to 'resources reviewed.' The 988 Suicide and Crisis Lifeline is the current national line providers can point clients toward by call, text, or chat, and naming it specifically in the note shows what was actually offered, not just that something was 7Ref 7Substance Abuse and Mental Health Services Administration (2026).988 Suicide & Crisis Lifeline.That 988 is the current national crisis line to name specifically when documenting the crisis resources offered during a risk conversation..

This is documentation, not clinical advice to a patient — the point is the record showing you offered a specific, named resource rather than a vague gesture toward safety, and that the client understood what was offered. If the client already has a safety plan naming specific contacts, reference that plan rather than repeating a generic list.

A note that names 988 or another specific resource, and states whether the client engaged with it in session, gives a later reader concrete evidence of what happened, the same standard the rest of a defensible risk-assessment note should meet.

Common questions

No. A structured scale organizes what you ask about consistently, but the note still needs your clinical reasoning — the specific factors that shaped your judgment and the disposition decision that followed. Record the framework you used and your reasoning together; the scale supports the assessment, it does not substitute for documenting why you reached the conclusion you did.

No. Risk assessment, diagnosis, and treatment-plan content are exactly what HIPAA's psychotherapy-notes definition excludes, so this content belongs in the general chart rather than a separately shielded file. Keeping it in the shared record ensures it travels with the rest of the chart if the client transfers care or another provider needs it.

Document that denial the same structured way you would document an elevated finding: what you asked, the client's specific answers, and your clinical judgment given those answers and any protective factors present. A one-line 'denies SI/HI' still leaves out the reasoning a reviewer needs to see; write the structure even when the answer is reassuring.

Name what you actually offered — 988, a specific follow-up plan, or an existing safety plan's contacts — rather than writing 'resources reviewed.' Specificity is what shows a later reader that something concrete happened in the room, not just that the topic came up in passing.

Thorough, structured documentation is the strongest evidence of reasonable clinical judgment a reviewer will find, but no note format itself guarantees an outcome. What it does is give you, or anyone reviewing the case later, a clear record of what you assessed, what you found, and why you responded the way you did.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

1.Posner K, Brown GK, Stanley B, et al. (2011). The Columbia-Suicide Severity Rating Scale: initial validity and internal consistency findings from three multisite studies with adolescents and adults. American Journal of Psychiatry. link ✓The structured, validated severity-scale framework that a defensible risk assessment note is organized around.
2.American Psychological Association (2007). Record Keeping Guidelines. American Psychological Association. link ✓That documented clinical reasoning, not just a summary rating, is core content of an adequate clinical record.
3.Stanley B, Brown GK (2012). Safety Planning Intervention: A Brief Intervention to Mitigate Suicide Risk. Cognitive and Behavioral Practice. linkThe six-step safety planning structure that an elevated finding's documented response is built around.
4.HHS Office for Civil Rights (2026). Does HIPAA provide extra protections for mental health information compared with other health information?. U.S. Department of Health and Human Services. linkThat risk-assessment content is excluded from the psychotherapy-notes definition and belongs in the general progress-note record.
5.HHS Office for Civil Rights (2026). Individuals' Right under HIPAA to Access their Health Information. U.S. Department of Health and Human Services. linkThat a risk assessment note is part of the record reachable under a client's HIPAA access request, produced within 30 days absent an exception.
6.American Psychological Association (2017). Ethical Principles of Psychologists and Code of Conduct. American Psychological Association. link ✓That the limits of confidentiality around safety are an informed-consent obligation established at intake, not an improvised in-the-moment disclosure.
7.Substance Abuse and Mental Health Services Administration (2026). 988 Suicide & Crisis Lifeline. SAMHSA. link ✓That 988 is the current national crisis line to name specifically when documenting the crisis resources offered during a risk conversation.

https://www.gale.care/for-providers/bhd-suicide-risk-documentation · 7 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

← Back to for providers