Forensic psychology evaluations and cloud AI scribes: competency, sanity, and the vendor archive in criminal proceedings

What forensic psychological evaluations involve — and what they capture

Forensic psychologists operating in the criminal justice system conduct three major categories of evaluation: competency to stand trial assessments, criminal responsibility evaluations (sanity at the time of the alleged offense), and sentencing mitigation assessments. Each evaluation type involves a direct interview with the defendant-examinee, extensive collateral record review, psychological testing, and ultimately a formal written report submitted to the court or retaining attorney.

The content of these interviews differs fundamentally from clinical therapy. The forensic evaluation interview is designed to answer a specific legal question, not to provide treatment. But the material covered is often more sensitive — and more legally consequential — than almost any clinical encounter:

Competency evaluations. An evaluation under Dusky v. United States's "rational understanding" standard requires the examiner to assess the defendant's factual and rational understanding of the proceedings and ability to assist counsel. This means covering the defendant's current mental status, medication history, intellectual functioning, understanding of the charges, their account of what happened and why they are in court, their relationship with their attorney, and any symptoms interfering with their capacity to participate in their own defense. What the defendant says about the charges — their own account of the alleged offense, their stated intentions, their version of events — is documented in the evaluator's formal competency report at the level of professional summary. The verbatim account the defendant provided during the interview is something else entirely.

Criminal responsibility evaluations. Assessing sanity at the time of the alleged offense — whether the defendant, due to a severe mental disease or defect, was unable to appreciate the wrongfulness of their act — requires reconstructing the defendant's mental state at the time of the charged conduct. The evaluation interview covers the defendant's detailed account of the events leading up to the alleged offense, their mental state during the offense, their understanding of what they were doing and why, and their recollection of the period immediately before, during, and after the alleged act. This is the most directly incriminating content any defendant can produce outside of an interrogation — and it is produced in a context the defendant may not fully understand is non-confidential.

Sentencing mitigation evaluations. Capital and non-capital sentencing mitigation requires the evaluator to develop a comprehensive life history: childhood trauma and abuse, adverse childhood experiences, family mental health history, intellectual functioning and neurodevelopmental factors, substance use history from the earliest use through the present, prior psychiatric treatment, educational and vocational history, and the defendant's account of how their history connects to the conduct for which they are being sentenced. Sentencing mitigation interviews contain, by design, the most sensitive biographical information an individual has ever disclosed about themselves — often information they have not shared with anyone else, including their own attorney.

The forensic context and HIPAA's psychotherapy notes exception

The HIPAA Privacy Rule includes a specific, heightened protection for psychotherapy notes — defined at 45 CFR § 164.501 as notes recorded by a mental health professional "in any medium documenting or analyzing the contents of conversation during a private counseling session." Psychotherapy notes receive stronger protections than other protected health information: they cannot be disclosed without specific patient authorization even for treatment, payment, or health care operations purposes, with narrow exceptions.

Forensic evaluation interviews are not private counseling sessions. They are formal assessments conducted at the request of a court or attorney, with no therapeutic purpose and no confidential therapeutic relationship. The forensic examiner's ethical obligation — codified in the Specialty Guidelines for Forensic Psychology and standard forensic evaluation practice — is to inform the examinee at the outset that the evaluation is not confidential, that a report will be prepared for the court or retaining counsel, and that the examinee is not the evaluator's patient in the clinical sense. This "forensic warning" is the inverse of the therapeutic privilege — rather than protecting disclosures, it specifically notifies the examinee that disclosures will be reported.

The formal forensic evaluation report — the document the evaluator submits to the court or retaining attorney — is a standard medical record for HIPAA purposes, not a psychotherapy note. Both parties in a criminal proceeding may receive it through normal channels of criminal discovery. The heightened psychotherapy notes protection does not apply.

Where does the cloud AI scribe vendor fit? The vendor receives and independently retains session audio from the evaluation interview. The vendor holds the verbatim record: everything the defendant said, not just what the evaluator chose to include in the professional report. That audio is retained as the vendor's own business records under the vendor's terms of service and data retention policies — a data category outside the court-supervised discovery framework that governs the formal evaluation report's distribution.

Criminal discovery tools and the third-party vendor archive

Criminal proceedings operate under discovery rules that differ significantly from civil litigation — and in ways that are particularly relevant to third-party record holders. Understanding the pathways helps clarify why the vendor archive presents a distinctive exposure in the forensic context.

Grand jury subpoenas. Federal grand jury investigations proceed under 18 U.S.C. § 3321 and Federal Rule of Criminal Procedure 6. Grand jury subpoenas are not subject to the Federal Rules of Evidence, and privilege objections must be specifically raised and litigated before the grand jury itself. A federal grand jury investigating a criminal matter can subpoena any person or entity holding documents or records relevant to the investigation — including a cloud AI scribe vendor that retained audio from a forensic evaluation. The compulsory power of a grand jury subpoena is broader than civil Rule 45, and the vendor has no basis to resist production absent a specific applicable privilege recognized in federal courts.

Federal Rule of Criminal Procedure 16. Rule 16 governs discovery in federal criminal trials. The government's discovery rights under Rule 16 extend to documents and objects in its "possession, custody, or control" — but through grand jury process, the government can acquire documents held by third parties. For court-appointed evaluations, the formal report is already in the court's record and available to both parties. For defense-retained evaluations, undisclosed reports may be protected — but the vendor's independently retained audio falls outside the formal evaluation's privilege framework.

State criminal subpoena authority. State courts in criminal proceedings have subpoena authority over third-party document holders through mechanisms that vary by state but typically allow courts to compel production of records from any person holding relevant materials. A cloud AI scribe vendor serving evaluators across multiple jurisdictions would face subpoena authority from state criminal courts in each jurisdiction where it has customers.

The practical implication: in any criminal matter where a forensic evaluator used a cloud AI scribe, there exists a separately subpoenable third-party vendor holding verbatim audio of the forensic interview. The formal evaluation report — produced by the evaluator, governed by professional and ethical standards, shaped by the evaluator's judgment about what is documented — is one record. The vendor's independently retained audio is another, held by an entity with no role in the proceeding, no relationship with the examinee, and no established privilege protecting the audio from legal process in most forensic contexts.

Defense-retained evaluations and the limits of work product protection

Defense-retained forensic evaluators occupy a specific position in criminal discovery doctrine. When a defense attorney retains a mental health expert to evaluate the defendant — a competency evaluation to assess whether to raise a competency issue, a sanity evaluation to consider a mental-state defense, or a mitigation evaluation to prepare for a capital penalty phase — the expert is retained in anticipation of litigation. The attorney-expert relationship may generate work product protection under the attorney-client privilege's extension to retained experts in many jurisdictions.

Specifically: preliminary impressions, draft reports, and an undisclosed final report from a defense-retained expert may qualify as attorney work product if the defense decides not to call the expert as a witness and does not disclose the evaluation. The prosecution's ability to discover an undisclosed defense-retained expert's report is severely limited in most federal and state criminal practice. This is a meaningful protection — it allows the defense to conduct pre-trial investigation without necessarily handing the prosecution a roadmap to the defendant's vulnerabilities.

The protection, however, applies to the retained expert's own work product: the report, the notes, the communications with retaining counsel. It does not follow the evaluation into a third-party vendor's infrastructure. A cloud AI scribe vendor that received evaluation interview audio from a defense-retained forensic evaluation holds that audio as the vendor's own business records. The defense attorney did not retain the vendor. The vendor is not working at the direction of the defense. The vendor's data retention is governed by the vendor's own terms of service, not by any privilege relationship with the defense.

When prosecution counsel investigates whether to pursue the vendor's audio through grand jury process, the analysis is: is this audio subject to a privilege that applies to the vendor as an independent record holder? Defense work product protection applies to materials prepared by or at the direction of the attorney. The vendor's independently retained audio is not attorney work product — it is a business record retained by a commercial entity that processed the evaluator's audio under a service subscription. The privilege analysis that protects the formal evaluation report does not extend to the vendor archive.

Sentencing mitigation and the biographical record problem

Sentencing mitigation evaluations present the sharpest version of this problem. A comprehensive mitigation evaluation for a capital case — or a substantial non-capital federal case — requires developing the defendant's complete life narrative: the earliest childhood experiences, abuse histories that may never have been formally disclosed, intellectual and neurodevelopmental history, psychiatric treatment records, substance use from first use through the offense, family system dynamics, and the defendant's own understanding of the connection between their history and the conduct for which they are being sentenced.

Defense mitigation specialists and forensic psychologists conducting these evaluations spend hours — sometimes dozens of hours across multiple sessions — building the biographical record that forms the basis of the mitigation case. The formal mitigation report synthesizes this record into a professional narrative for submission to the court. What the defendant disclosed verbatim during those sessions — the specific accounts of childhood abuse, the names of relatives involved in the family history, the first-person description of addiction, the accounts of prior psychiatric crises the defendant had never disclosed to anyone — appears in the formal report at the evaluator's chosen level of detail.

A cloud AI scribe vendor retains all of it verbatim. For capital defendants, the stakes of that independently retained archive are particularly acute: mitigating evidence in a capital case is simultaneously the most powerful mitigation available and the most devastating potential impeachment material if the defense's narrative is challenged. The vendor's audio archive of the verbatim mitigation interview exists as a record that prosecution could attempt to reach through grand jury process if the defense introduces the mitigation evidence at the penalty phase.

On-device processing for forensic evaluators

For forensic psychologists who process evaluation interviews locally — transcribing audio and drafting evaluation notes on their own Mac without transmitting session content to any external vendor — the separately subpoenable vendor archive does not exist. There is no vendor to subpoena. The grand jury subpoena pathway to a third-party record holder is unavailable because no third party holds a record.

What exists is the evaluator's own documentation: the formal report, the evaluator's working notes, the raw transcription stored locally. These materials are governed by the same privilege and discovery rules that apply to the evaluator's own records — the attorney work product analysis, the court-ordered evaluation framework, and the evaluator's professional and ethical obligations under the Specialty Guidelines for Forensic Psychology. The evaluator's documentation judgment governs the complete record.

The subpoena exposure that cloud AI scribes create for clinical therapists is well-documented — the vendor archive as a separately reachable record that the BAA doesn't protect from legal process. For forensic evaluators, the exposure is structurally the same but the legal context is more adversarial: criminal proceedings, grand jury powers, prosecutors with investigative resources and interest in the defendant's prior disclosures. The formal forensic evaluation report is a known document in a supervised proceeding. The vendor's independently retained verbatim audio is an unknown quantity in the vendor's infrastructure, reachable on pathways that operate entirely outside the court-supervised framework governing the formal evaluation.

What cloud AI scribes actually retain — audio, interim transcripts, processing metadata, vendor-retained copies — is the same regardless of whether the session is clinical therapy or a forensic evaluation. The difference is in who has the strongest interest in reaching that vendor archive: in civil litigation, it may be an opposing attorney; in criminal proceedings, it may be a federal prosecutor with grand jury authority.

Neuropsychological evaluations present a related set of concerns for evaluators working in both civil and criminal forensic contexts — assessments of cognitive functioning, disability, and decision-making capacity that involve similarly sensitive biographical and clinical content, similarly formal report structures, and similarly independent vendor audio archives when cloud AI scribes are used. The on-device approach — processing everything locally, generating no vendor archive — resolves the exposure for both evaluation types.

Frequently asked questions