regulation and compliance
What do I actually have to write in a SOAP note if my state board audits me?
Documentation rules vary by state board, but the structure auditors look for does not. What belongs in each SOAP section, how long to retain records, and where solo practitioners get caught short.
If your state board asks for records, what it wants to see is a note per session that identifies the client, the date, what she reported, what you found, what you did, and what you recommended next, signed by you. There is no single national form. What auditors look for is consistency: a legible, dated, contemporaneous record for every session on your books, retained for as long as your state requires.
The trouble solo practitioners run into is almost never the content. It is the gaps. Three sessions with notes, one without. A signature missing. A record altered months later with no indication of when or by whom. Those are the findings that turn a routine records request into a problem.
Below is what belongs in each section of a SOAP note, written for someone practicing within a massage therapy scope of practice, plus the retention and correction habits that keep a file defensible.
Who sets the documentation standard in your state
Three sources can bind you at once, and they do not all say the same thing.
- Your state licensing board or health department. This is the primary authority. Some states specify record contents and a retention period in rule. Others say only that records must be kept, and leave content to professional standards.
- Your city or county establishment ordinance. Local massage establishment rules sometimes require a client register or intake records kept on the premises, separate from anything the board requires.
- Payers and referral sources. If you bill auto insurance, work with a personal injury attorney, or accept physician referrals, their documentation demands are usually stricter than the board's and often include a prescription or referral on file.
Look up your own board's rules directly on its website rather than relying on what a colleague in another state does. Requirements genuinely differ, and a school in one state may have taught a standard that does not match where you now practice.
Keep reading: Why do my new clients disappear after the first session even when they loved it?
Subjective: capturing intake and client report without diagnosing
Subjective is what the client tells you, in her words where possible. Quote her. "Right shoulder aches by mid afternoon, worse after a long day at the sewing machine" is stronger documentation than "shoulder pain."
Include the things that shape the session: onset, duration, what makes it better or worse, sleep, activity, and any current medical care. Note relevant health history and medications from intake, and note when you rechecked them. An intake form completed once in 2023 and never revisited is a weak record for a client you have seen thirty times.
Also document contraindications you screened for and what she reported. If she mentions a recent diagnosis, record what she said and, where appropriate, that you recommended she consult her physician. You are recording a report, not making a finding.
Where therapists slip into diagnosis language
Avoid writing conclusions you are not licensed to make. "Client reports numbness into the fourth and fifth fingers" is a report. "Ulnar nerve entrapment" is a diagnosis. "Client states she was diagnosed with plantar fasciitis by her podiatrist" is fine, because you are recording who diagnosed it. Attribute anything clinical to the person who is licensed to say it.
Objective: findings, techniques, and regions treated
Objective is what you observed and what you did. It should be specific enough that another therapist could pick up the file and continue the work.
- Findings. Palpable tension, tissue texture, temperature, guarding, adhesion, postural observation, and range of motion observed, with side noted.
- Regions treated. Name them. Left upper trapezius, right suboccipitals, bilateral erector spinae, lumbar to thoracic.
- Techniques and duration. Effleurage, petrissage, myofascial, trigger point, passive stretching, hot pack, and roughly how long you spent where.
- Client response during the session. Tolerated deep pressure well, requested lighter work over the right hip, tenderness decreased by the end.
- Draping and consent notes. Particularly for any work in sensitive areas or any position change, note that consent was obtained.
A body diagram with marked regions is efficient and is widely accepted, but it should not be the whole objective section. Symbols without words are hard to defend if someone else has to read them.
Keep reading: How much should I charge for a ninety minute massage in a mid size US city?
Assessment inside a massage therapist scope of practice
Assessment is where documentation gets nervous, because in a medical chart it means diagnosis. In a massage record it does not. It means your professional impression of the change produced by the session.
Write it as comparison. Range of motion in cervical rotation to the right improved from limited to near full. Tenderness in the left glute medius decreased from reported 7 to 3. Tissue in the right upper trap remained restricted despite sustained work. Those are observations about response to treatment, which is squarely within your scope.
What does not belong: naming a pathology, attributing symptoms to a structure, or stating that a condition has been resolved. If you find yourself writing a medical term as the cause of something, rewrite it as what you felt and what changed.
Plan: frequency, homecare, and the next session
Plan is the shortest section and the one most often left blank. It is also the section that shows an auditor you are working from a considered course of care rather than session by session.
Include three things. The recommended interval and how many sessions before you reassess. Any self care given, described specifically enough to identify. And the focus for the next visit, so the following note has somewhere to start.
An example, complete in one line: "Recommend follow up in 10 days, three sessions then reassess. Doorway pec stretch, 30 seconds each side, twice daily. Next session: address right QL and re check cervical rotation."
Write the plan before the client leaves the room. It is the same sentence you will say out loud when you ask for the next appointment, which is why the note and the rebooking naturally belong together.
See how TableCadence handles this for massage therapy
Retention periods and secure storage of client records
Retention periods are set by your state, and they vary. Multi year requirements are common, and records for a minor are often required to be held longer, frequently past the age of majority plus a period of years. Some states also address what happens to records if you close your practice, and may require you to notify clients or arrange custody of the files.
Find your board's exact number and write it down. Then set your practice to the longer of that number and any requirement from a payer, an attorney matter, or your liability carrier. When the periods conflict, keep the record longer.
Security is the other half. Whether you are covered by HIPAA depends on whether you conduct covered electronic transactions, and many cash practice massage therapists are not covered entities. That does not release you. State privacy law, your board's confidentiality rules, and basic professional duty apply regardless.
- Paper. Locked cabinet, in a room clients do not access unaccompanied. Not a tote bag in your car.
- Digital. Password protected, encrypted where possible, backed up somewhere other than the laptop itself, and not stored in a shared personal photo library.
- Disposal. Shred paper at the end of the retention period. Deleting a file from a laptop desktop is not disposal.
- Access log. If anyone else works in your space, know who can open the cabinet or the software.
Common audit findings and how to correct a record properly
The findings that come up repeatedly for solo practitioners are mundane.
| Finding | What it looks like | Fix going forward |
|---|---|---|
| Missing sessions | Payment records show more visits than notes | Write the note before the next client, every time |
| No signature or date | Note exists, nobody signed it | Sign and date at the point of writing, with your license number |
| Stale intake | Health history never updated across years | Recheck health history annually and note the date |
| Empty Plan section | S, O, and A completed, P blank | One line: interval, homecare, next focus |
| Illegible or coded notes | Personal shorthand nobody else can read | Keep a written key, or write in plain language |
| Improper corrections | White out, erasure, overwritten entries | Use the correction method below |
To correct a paper record: draw a single line through the error so it remains readable, write the correction beside it, then add your initials and the date of the correction. Never obliterate the original. To add something you forgot, write a late entry clearly labeled as such, with today's date and the date of the session it refers to.
In a digital record, the same principle applies through version history. What matters is that an auditor can see the original entry, the change, and when the change was made. A system that silently overwrites a note is worse for you than a legal pad, because it removes your ability to show you did not backdate anything.
Making this the path of least resistance
Good documentation is not a matter of discipline. It is a matter of whether the note is easier to write than to skip. Notes written at the end of the week are thinner, less accurate, and harder to defend than notes written in the four minutes after the client leaves.
That is the workflow TableCadence is built around. Intake and SOAP notes live with the client's file, the plan you write becomes the rebooking interval on her record, and the drift alert tells you when someone has passed the window you documented. The note and the next appointment come out of the same two minutes, which is the only way either one gets done reliably.