Mental health record sealing and expungement: five adversarial proceedings where the cloud AI scribe vendor archive survives the court order

A court order sealing or expunging mental health records accomplishes something specific and narrow: it binds the named parties — the court, the committing facility, the probation department, the licensing board — to restrict access to records in their custody. The order travels to the institutions the court has jurisdiction over. It does not travel to every custodian of records touching the underlying events, and it does not automatically reach private third parties who hold related records in a different legal capacity.

The cloud AI scribe vendor presents exactly this gap. When a therapist documents sessions using a cloud AI scribe, the vendor — not the therapist — holds verbatim session audio, AI-generated transcripts, and draft notes as business records in its own systems. Those records are the verbatim raw material from which the therapist's finished clinical notes were generated. They contain everything the client said in every session. A court order that seals the therapist's finished notes does not automatically bind the vendor, because the vendor is not the therapist, is not named in the order, holds its records under a HIPAA business associate classification rather than as mental health records in the state-law sense, and may be located in a different state from the court issuing the sealing order.

Five categories of adversarial proceedings produce clients who believe their mental health records have been sealed or expunged — and who discover, when a subsequent proceeding subpoenas the cloud AI scribe vendor, that the verbatim transcript archive the vendor holds is fully accessible. The structural problem is that the client's belief in the effectiveness of the sealing is correct as to the records the court specifically bound, and wrong as to the vendor archive the court never reached. Each proceeding creates this gap through a distinct legal mechanism, and in each case, the vendor's verbatim AI-generated transcripts are the records most likely to contain the client's most damaging disclosures — because the AI transcript captured everything unfiltered by clinical judgment, while the therapist's finished notes reflected professional decisions about what to document.

The structural gap: sealed records versus surviving vendor archives

Understanding why the cloud AI scribe vendor archive typically survives a sealing order requires understanding how sealing orders are served and what records they bind. A court issuing an expungement or sealing order serves it on the agencies and institutions that are parties to the underlying proceeding — the court's own clerk, the arresting law enforcement agency, the probation department, the state repository of criminal records, the licensing board that received a complaint. In civil commitment cases, the order may be served on the committing facility and the supervising mental health agency. Juvenile sealing orders typically operate automatically by statute on named categories of records held by named categories of agencies.

None of these mechanisms contemplate private health IT vendors holding HIPAA-governed business records. The cloud AI scribe vendor is not a party to any criminal, civil commitment, or juvenile proceeding. It has no notice of the sealing order unless specifically served. Even if served, its legal obligations as a HIPAA business associate to the treating therapist — a covered entity — do not automatically incorporate a state court's sealing mandate, particularly when HIPAA's own disclosure framework governs when and how the vendor may respond to third-party requests for its records.

The HIPAA preemption analysis adds another layer of complexity. HIPAA preempts contrary state law unless the state law is more stringent — but the preemption analysis applies between state law and HIPAA's disclosure rules, not between a specific court order and HIPAA. A vendor that receives a Rule 45 federal subpoena for session records is operating within HIPAA's court order and subpoena disclosure pathway at 45 C.F.R. § 164.512(e). The vendor may comply with that subpoena without violating HIPAA, regardless of whether a state court has issued a sealing order that binds the treating therapist's own records. The result is that a client who has successfully sealed their mental health records under state law may find those same sessions' verbatim transcripts produced in response to a federal subpoena to the cloud AI scribe vendor, with the vendor acting in full HIPAA compliance while the treating therapist's own records remain sealed. The description of what cloud AI scribes actually send to their servers makes concrete what the vendor archive contains and how it is classified.

Proceeding 1: criminal expungement

Criminal expungement proceedings are the most common context in which clients seek to seal mental health records connected to criminal justice involvement. A defendant who pleaded guilty to a criminal charge with a mental health component — an assault charge where the plea bargain required a psychological evaluation, a drug offense that mandated therapy as a condition of probation, a diversion program that required mental health treatment as the condition for avoiding a conviction — may qualify for expungement of the underlying criminal record after completing the conditions of the plea or diversion. In most states, expungement seals or destroys the court's file, the arrest record, and records held by agencies the expungement statute specifically covers.

When the defendant's attorney or the court reviews the expungement order's scope, the focus is on the records defined by the expungement statute: typically court records, law enforcement records, probation records, and state repository records. Mental health evaluation records obtained during the criminal proceeding — a court-ordered psychological evaluation, a competency evaluation, a presentence mental health assessment — may be specifically covered if ordered sealed as part of the expungement. The treating therapist who provided probation-mandated therapy may receive a copy of the sealing order and comply with it by restricting access to the client's records.

The cloud AI scribe vendor that the therapist used to document those probation-mandated sessions holds verbatim session audio and AI-generated transcripts of the same sessions. The expungement order does not name the vendor. The vendor has no notice of the expungement. The records the vendor holds are not criminal records under the expungement statute — they are HIPAA protected health information generated by a private outpatient therapist using a cloud documentation tool. A plaintiff's attorney in a subsequent civil lawsuit, a licensing board investigator in a later complaint proceeding, or a prosecutor examining a new charge who learns through discovery that the defendant received therapy during a prior probation period can issue a subpoena to the cloud AI scribe vendor for those records. The expungement order does not bar that subpoena. The vendor produces the verbatim transcripts of the sessions the client believed had been erased — sessions in which the client may have disclosed information relevant to the new proceeding with the candor they reserved for the therapeutic relationship, not the guarded disclosure they would have offered knowing the records would be available to future proceedings.

The gap between what the expungement sealed and what the vendor retained is not a legal technicality — it is an architectural consequence of the cloud AI scribe model, in which the treating therapist's records and the vendor's records are legally distinct holdings even though they document the same sessions. A state expungement statute drafted in 1995 or 2005 did not contemplate that a private software vendor would hold a verbatim transcript of every therapy session the defendant attended during probation. The analysis of whether AI therapy notes can be subpoenaed addresses the discovery mechanics that reach the vendor archive in these contexts.

Proceeding 2: firearm rights restoration under 18 U.S.C. § 922(g)(4)

Federal law at 18 U.S.C. § 922(g)(4) prohibits possession of firearms by any person who has been adjudicated as a mental defective or who has been committed to a mental institution. The federal disability is triggered by the underlying adjudication or commitment, and it is a lifetime prohibition unless the person obtains relief. Federal firearms relief can be obtained through state relief-from-disabilities programs that meet the requirements of 18 U.S.C. § 925(c) or through state-law restoration of rights mechanisms that remove the underlying disability trigger.

A person seeking to restore firearm rights after a prior involuntary commitment must typically file a petition in state court or before a state administrative body demonstrating that the underlying commitment no longer reflects their current mental health status, that they pose no danger to themselves or others, and that restoration is in the interest of justice. Many states require the petitioner to submit to a current mental health evaluation as part of the petition. If that evaluation — and the therapy sessions leading up to it — is documented by a cloud AI scribe, the vendor holds verbatim transcripts of the sessions in which the petitioner discussed their mental health history, their prior commitment, their current functioning, and their motivations for seeking restoration.

If the state court grants the petition and the restoration order seals the underlying commitment records, that sealing binds the committing facility and the court records of the commitment proceeding. The cloud AI scribe vendor that holds verbatim session transcripts from the petitioner's current treatment and evaluation sessions is not part of the commitment proceeding — it holds records from outpatient therapy that occurred during the restoration petition process. Those records are HIPAA protected health information held by a private vendor, not records of the original commitment that the restoration order sealed.

In subsequent proceedings where the petitioner's mental health history becomes relevant — a professional license application that requires disclosure of mental health history, a security clearance investigation, a custody dispute — the vendor archive of sessions discussing the prior commitment and the restoration process is subpoenaable independently of whether the underlying commitment record was sealed. The petitioner who believed that successful restoration had sealed the chapter of their mental health history associated with the prior commitment may find that the cloud AI scribe vendor's verbatim transcripts of the sessions in which they described that history are fully accessible to the subsequent proceeding. The intersection of security clearance investigations and therapy records describes the disclosure framework in one of the most common contexts where restored firearm rights intersect with ongoing mental health record scrutiny.

Proceeding 3: civil commitment records and state confidentiality schemes

Every state with civil commitment laws — involuntary psychiatric hospitalization under standards like California's 5150 hold, Florida's Baker Act, or New York's Kendra's Law — has associated confidentiality provisions that restrict access to civil commitment records. California Welfare and Institutions Code § 5328 creates a strict confidentiality framework for records obtained in the course of providing services under the Lanterman-Petris-Short Act, with specific exceptions and disclosure requirements. Florida's Baker Act at § 394.4615 similarly restricts access to mental health records from Baker Act proceedings. New York Mental Hygiene Law § 33.13 creates confidentiality protections for clinical records of mental health patients, including those receiving involuntary treatment.

These state confidentiality frameworks create heightened protections for records generated during civil commitment — protections that go beyond HIPAA in their scope and in the criminal penalties they attach to unauthorized disclosure. When a person who was involuntarily committed petitions under state law to seal or expunge the civil commitment record, the sealing covers records held by the committing facility, the supervising state agency, and the providers directly involved in the civil commitment evaluation and treatment.

The structural gap that cloud AI scribes create in this framework is temporal and institutional. The civil commitment confidentiality scheme protects records of the commitment itself — the inpatient evaluation, the inpatient treatment, the commitment order and documentation. When the person is discharged and receives outpatient follow-up therapy, that therapy is not part of the civil commitment proceeding — it is voluntary outpatient treatment with a private therapist. If that outpatient therapist uses a cloud AI scribe, the vendor holds verbatim session transcripts of the follow-up therapy that the client sought after discharge. The civil commitment confidentiality scheme applies to the inpatient records; it does not extend to the outpatient therapist's cloud AI scribe vendor's archive of the voluntary follow-up sessions.

When a client who was involuntarily committed petitions to seal the civil commitment records, the sealing accomplishes exactly what it is designed to accomplish: it restricts access to the records of the commitment process. But the cloud AI scribe vendor's archive of the outpatient follow-up sessions — in which the client discussed their experience of the commitment, their current mental health status, their medications, and their recovery — remains accessible as HIPAA protected health information held by a private vendor. In a subsequent family court proceeding, immigration matter, or employment dispute, the party seeking the client's mental health records can reach the outpatient follow-up session transcripts through a subpoena to the vendor, even if the civil commitment records are sealed. The analysis of California, New York, and Illinois state mental health privacy laws describes the civil commitment confidentiality frameworks in the states with the most active civil commitment caseloads.

Proceeding 4: juvenile records automatic sealing at majority

Most states provide for the automatic sealing or destruction of juvenile adjudication records when the juvenile reaches a specified age — eighteen in many states, with some states providing for earlier sealing for minor offenses. Automatic juvenile sealing statutes operate by category: the juvenile court's records, the probation department's records, law enforcement's records, and the state central repository's records are sealed or destroyed without the juvenile filing a petition. The purpose is to give young people who were adjudicated delinquent as minors a clean slate as adults — to prevent juvenile records from following them into adult employment, education, and housing decisions.

When a juvenile adjudication included a mental health component — a dispositional order requiring therapy as a condition of probation, a diversion program conditioning the juvenile's record on completion of mental health treatment, a competency evaluation ordered during the delinquency proceeding — the treating therapist's records from that mandated therapy may be considered mental health records that the automatic sealing statute covers as part of the records of the juvenile proceeding. The therapist who received a copy of the dispositional order may treat the client's file as sealed when the client turns eighteen.

The cloud AI scribe vendor that documented those mandated therapy sessions holds verbatim session audio and AI-generated transcripts as HIPAA protected health information. Those records are not juvenile adjudication records — they are not records of the court, the probation department, or law enforcement. They are health records generated by a private therapist using a private vendor's documentation platform. The automatic sealing statute's categories do not extend to private health IT vendors who are HIPAA business associates of private treating therapists.

When the now-adult client encounters a proceeding where their juvenile-period mental health history becomes relevant — a federal employment background investigation, an adult criminal proceeding in which the prosecution seeks to establish a pattern, a custody dispute in which the opposing party discovers that the client received mandated therapy as a juvenile — a subpoena to the cloud AI scribe vendor for the records of those sessions is not barred by the automatic juvenile record seal. The vendor's records are adult-era HIPAA records in the sense that they are governed by federal HIPAA without age-based restriction; the automatic seal operates on records defined by the juvenile justice system, not on records defined by the federal health privacy framework. A client who believed that turning eighteen had sealed every record from their juvenile mental health treatment may encounter the verbatim transcripts of those sessions in an adult federal proceeding, produced by the vendor in response to a federal subpoena the juvenile record seal does not reach.

Proceeding 5: domestic violence victim record protection

Domestic violence victims who receive mental health treatment as part of DV services — through a DV shelter's counseling program, through a therapist connected to a victim advocacy organization, through voluntary treatment the victim sought after leaving an abusive relationship — encounter a distinct category of record protection mechanisms. The federal Violence Against Women Act and its state counterparts create address confidentiality programs that protect DV victims' location information. Some states extend confidentiality protections to DV service records more broadly, restricting access to records held by DV service providers and advocates. California Evidence Code § 1037.5 creates an evidentiary privilege for domestic violence counselor-victim communications similar to the therapist-patient privilege.

When a DV victim's mental health records are the subject of a court order sealing them — either because the victim obtained such an order directly or because the court sealed the records as part of a protective order or criminal case resolution — the sealing typically binds the providers who are named as parties or who received service of the order. A DV shelter's counseling records may be sealed. A therapist who provided services through a DV advocacy organization may receive a sealing order. The victim may believe that these sealing mechanisms have effectively prevented their abuser, their abuser's attorney, or other parties from accessing the mental health records from their treatment during and after the abusive relationship.

If the therapist who provided that treatment used a cloud AI scribe, the vendor holds verbatim session transcripts of sessions in which the victim discussed the abuse, their safety planning, their children, their plans to leave, their current location, and their ongoing trauma responses. That vendor archive is outside the DV confidentiality scheme: it is not records of a DV service provider in the sense that state DV confidentiality laws contemplate, and it is not bound by a sealing order that named the therapist but not the vendor. In subsequent proceedings — a custody dispute, a civil protective order, a criminal prosecution of the abuser — a party seeking the victim's mental health records can reach the vendor archive through a subpoena that the victim's DV record protection mechanisms do not bar. The verbatim session transcripts may contain the victim's most candid disclosures about the abuse, their children's safety, and their plans — disclosures made with the expectation that the therapeutic relationship would protect them, not with awareness that a cloud AI scribe vendor would hold verbatim transcripts available to any party with a Rule 45 subpoena. The HIPAA BAA framework defines the vendor's obligations to the therapist but does not create a privilege that overrides Rule 45 in subsequent proceedings.

The architecture of the gap

Each of the five proceedings examined above creates the same structural gap through a different mechanism. Criminal expungement seals the records the statute covers — court records, law enforcement records, agency records — and does not reach the private vendor's archive. Firearm rights restoration seals the underlying commitment records but not the outpatient treatment vendor archive that documents the restoration process. Civil commitment confidentiality schemes protect inpatient records but not the outpatient follow-up vendor archive. Automatic juvenile sealing covers records defined by the juvenile justice system but not records defined by the federal health privacy framework. Domestic violence record protections bind named providers but not unnamed vendors holding HIPAA business records.

The common thread is that every one of these sealing and protection mechanisms was designed before cloud AI scribes existed as a category of third-party record custodian. The record landscape those mechanisms contemplated had a simple structure: the treating provider held the clinical records, and the court or administrative agency held the proceeding records. Sealing the court's records and serving the treating provider with a sealing order covered the relevant custodians. The cloud AI scribe vendor creates a new third category — a private infrastructure provider that holds verbatim transcripts of every session ever documented through its platform, accessible as HIPAA business records, with no independent obligation to honor sealing orders it never received.

The verbatim nature of the AI-generated transcript is what makes the vendor archive the most consequential gap in each of these five sealing mechanisms. The treating therapist's finished notes reflect clinical judgment — the therapist's professional decisions about what to document, how to document it, and what clinical context to provide. The vendor's verbatim transcript is the raw session without filter. A client who spoke with their therapist about their prior criminal involvement during probation-mandated sessions disclosed that information in the safety of the therapeutic relationship, trusting that the therapist's professional judgment would govern what entered the clinical record. The vendor's transcript captured every word. When the expungement order seals the therapist's finished notes and fails to reach the vendor archive, the verbatim transcript is the record that survives — not the curated clinical account the therapist created, but the unfiltered disclosure the client made believing it was protected by the therapeutic relationship.

The analysis of disability insurance proceedings describes how the same verbatim archive problem operates in a different adversarial context — one where the client never sought to seal their records but where the vendor archive is subpoenaable independently of the treating therapist's cooperation. In sealing and expungement contexts, the client has taken affirmative steps to limit access to their mental health records, and the cloud AI scribe vendor archive is the record that frustrates that limitation.

What on-device processing changes

On-device processing eliminates the vendor archive before the record-sealing gap can arise. When a therapist uses TherapyDraft, session audio is captured on the clinician's Mac, transcribed by a locally running Whisper model, and drafted into a clinical note locally — without audio, AI-generated transcript, or draft note leaving the device or reaching a cloud AI scribe vendor. There is no third-party custodian holding verbatim session archives as HIPAA business records in a remote data center.

When a client obtains a court order sealing their mental health records — through criminal expungement, firearm rights restoration, civil commitment record protection, automatic juvenile sealing, or domestic violence victim protection — the only records subject to that order are the treating therapist's own records. The therapist's finished clinical notes, held in the therapist's practice management system on their own infrastructure, are the complete clinical record. A sealing order served on the treating therapist reaches the complete clinical record because there is no parallel vendor archive that the order fails to name.

In subsequent proceedings where the opposing party attempts to reach the mental health records through a subpoena to the vendor, there is nothing for the vendor to produce — because there is no vendor. A party in a criminal prosecution, a custody dispute, a licensing board proceeding, or a civil lawsuit cannot obtain a verbatim transcript of the client's therapy sessions from a cloud AI scribe vendor when the therapist used on-device processing and no vendor archive was ever created. The client's ability to seal their mental health records through any of the five mechanisms described above extends to the complete clinical record, not just to the finished notes while a verbatim transcript archive remains accessible in the gaps between the sealing order and the vendor's record-keeping framework.

For therapists whose practices serve clients in or adjacent to the criminal justice system — clients in diversion programs, clients completing probation requirements, clients who experienced involuntary commitment, clients involved in custody proceedings, clients recovering from domestic violence — the architecture of the documentation tool is a records management decision with direct consequences for those clients' ability to control access to their mental health history. A cloud AI scribe vendor creates a verbatim archive that client-directed sealing mechanisms may fail to reach. On-device processing ensures that the clinical record is the record the therapist created — and that the record-sealing mechanisms the client pursues reach the complete clinical record, not a curated subset of it.