Ongoing outpatient therapy for undocumented and asylum-seeking clients: immigration disclosures, 2026 enforcement, and the cloud AI scribe vendor archive

This post is not about forensic immigration evaluations

TherapyDraft's post on immigration psychology evaluations and asylum documentation covers a specific clinical context: structured forensic evaluation sessions conducted specifically to generate a psychological assessment report for submission as evidence in an immigration proceeding — I-589 asylum applications, VAWA self-petitions, U-visa and T-visa supporting documents, extreme hardship assessments. In that context, the entire session purpose is the evaluation, the content is shaped by the evaluation protocol, and the output is an expert report entering the immigration proceeding as evidence.

This post addresses a different and far more common situation: the ordinary ongoing outpatient therapy relationship with a client who happens to be undocumented, seeking asylum, holding DACA or TPS, or in removal proceedings. The therapy is for depression, PTSD, anxiety, trauma, acculturation stress, family separation, or whatever the client presented with. Immigration status is not the purpose of the therapy. But it is part of the client's life, often the source or context of the clinical presentation, and it comes up in session.

When a client tells their therapist that they have not left the house since an enforcement operation two blocks away, that is clinically relevant to the presenting anxiety. When a client describes their fear that their child will come home from school to an empty house, that is clinically relevant to the presenting depression. When a client recounts a border crossing experience in the context of working through trauma, that is clinically relevant to the treatment. The therapist documents what is therapeutically significant. A cloud AI scribe captures everything said — and retains it in a vendor archive that exists independently of the clinical file.

The client population in ordinary outpatient practice

Private-practice therapists in urban and suburban areas across the United States treat clients whose immigration situations are varied and often legally complex. Asylum seekers whose applications are pending — sometimes for years — attend therapy while living with the uncertainty of their status. DACA recipients whose program status is contested attend therapy for the anxiety that uncertainty produces. Clients in active removal proceedings attend therapy as one of the few stable structures in a legally chaotic period. Clients with Temporary Protected Status (TPS) attend therapy for the stress of a status that requires periodic renewal and is subject to political revocation. Entirely undocumented clients attend therapy — and in doing so, exercise a fundamental health access right that anti-discrimination provisions of federal law and many state laws protect.

These clients seek mental health care for the same range of reasons as any other client. The immigration situation is often the source or amplifier of the clinical presentation, not a separate topic. A therapist who does not know the client's immigration situation cannot accurately assess the client's safety environment, understand the client's fear responses, provide culturally appropriate treatment, or distinguish between anxiety disorders and rational responses to genuinely dangerous circumstances.

The therapeutic relationship therefore requires that immigration status, history, and current situation be discussable in session. And when those disclosures occur in a session where a cloud AI scribe is running, they enter the vendor's archive.

What verbatim session audio captures that clinical notes do not

A therapist's clinical notes document what is therapeutically significant — the client's presenting symptoms, progress, clinical assessment, treatment plan adjustments. A skilled therapist working with an undocumented client does not document the client's specific immigration status details, the names of family members, the location where a relative is living, the specific route of border entry, or the details of a safety plan in the clinical record. These details arise in session because the client mentions them while explaining their anxiety or their living situation. They do not belong in a clinical note.

The cloud AI scribe vendor's archive contains the verbatim audio of everything said: the specific address mentioned when a client explained why they cannot drive to appointments, the name of the employer mentioned when a client described a workplace raid that affected their community, the family member's city mentioned when a client described the fear of separation, the specific circumstances of entry discussed when a client worked through a traumatic border experience, and the safety plan details a client shared when discussing contingency planning for an enforcement scenario. None of this may appear in the therapist's clinical notes. All of it exists in the vendor's independently held archive.

This gap — between what the therapist documents and what the vendor retains — is the same gap that makes what cloud AI scribes actually send to their servers a clinically significant question for any therapy context. For clients with immigration vulnerabilities, the content of that gap is specifically the category of information that immigration enforcement is interested in, and that the client most needs to remain confidential.

The 2026 enforcement landscape

Immigration enforcement in 2026 operates at expanded scale and with expanded legal tools relative to prior years. Interior enforcement operations — workplace raids, neighborhood operations, courthouse proximity enforcement — have reached communities where they were rare in earlier periods. Criminal prosecution of immigration violations under 8 U.S.C. § 1325 (improper entry) and 8 U.S.C. § 1326 (illegal reentry) has expanded, with federal district courts in border and non-border districts handling increased dockets. Expedited removal authority has been broadened to apply to individuals not apprehended within a limited time of entry and geographic proximity to the border.

These enforcement dynamics are relevant to the vendor archive question because they determine what legal tools enforcement has access to and what investigative interests motivate their use. A vendor archive of session audio in which a client discussed family member locations, employer names, or border crossing details is not information that enforcement is theoretically interested in — it is directly responsive to the categories of information an immigration investigation would seek.

How immigration enforcement can reach the cloud vendor's archive

The pathway to the vendor archive that does not require any action by the therapist is administrative subpoena to the vendor as a third-party business entity.

HSI administrative subpoena authority allows Homeland Security Investigations — the investigative arm of DHS — to compel production of records from business entities in the course of immigration investigations. The vendor is a business entity. It holds session audio as business records. A subpoena directed at the vendor implicates the vendor's legal obligations to respond, not the therapist's. HIPAA permits disclosure in response to law enforcement purposes at 45 CFR 164.512(f), including in response to administrative process that satisfies the rule's conditions. Whether the specific administrative subpoena satisfies HIPAA's conditions is a determination the vendor's legal team makes based on the process served — the therapist is not the decision-maker in that analysis.

Grand jury subpoena is available when immigration violations have been referred for federal criminal prosecution. In criminal immigration proceedings under 8 U.S.C. § 1325 or 1326, a grand jury subpoena to a cloud AI vendor for session audio is within the scope of the investigative tools available to federal prosecutors. Grand jury subpoenas to third-party record holders are broadly enforceable; privilege claims must be specifically asserted and adjudicated, and the vendor's status as a third party — not the treating therapist — complicates how privilege is asserted in response to a subpoena directed at the vendor's own business records. The analysis of whether AI therapy notes can be subpoenaed covers the general framework; the criminal immigration context adds the specific prosecutorial tools available in federal proceedings.

Mutual Legal Assistance Treaties (MLAT) allow foreign governments to request US government assistance in obtaining records for foreign criminal investigations. A client's country of origin — particularly a country from which the client fled — may allege that the client committed crimes before departure as a mechanism to undermine an asylum claim or obtain repatriation leverage. MLAT processes can reach cloud-stored business records through US government cooperation with the foreign government's request. This is addressed in the forensic evaluation post as well, but it applies equally to verbatim session audio from ongoing therapy in which a client discussed their persecution experience, their activities in the country of origin, and the circumstances of their departure.

Why the therapist's privilege does not govern what the vendor produces

Therapist-patient privilege under state law protects the therapist's clinical records from compelled disclosure in court and administrative proceedings — when properly asserted. The therapist can challenge a subpoena for the therapist's own records. But the cloud AI scribe vendor is a legally separate entity. A subpoena directed to the vendor for the vendor's own business records is a separate legal event from a subpoena directed to the therapist for the therapist's clinical files.

The vendor's decision about how to respond to a subpoena is governed by the vendor's own legal obligations — HIPAA (what HIPAA permits or requires), any contractual representations in the BAA, and the specific legal analysis of the process served. A business associate agreement establishes the vendor's HIPAA obligations but does not transform the vendor into the therapist's agent for privilege purposes. The vendor does not hold session audio as the therapist's records — it holds session audio as the vendor's own independently retained business records.

A therapist who believes their clinical records are protected from a particular subpoena can assert privilege through their own legal counsel in the specific proceeding. That assertion covers the therapist's own clinical file. It does not extend to the vendor's separately held copy of verbatim session audio, reached by process directed at the vendor as a third party, adjudicated under the vendor's response framework.

What therapists do not have to do — and why it does not fully answer the question

Therapists have no affirmative duty to report immigration status to immigration enforcement. State mandated reporting laws identify specific categories of information that must be reported — child abuse, imminent danger to identifiable third parties, certain elder abuse — and immigration status is not among them. A therapist who learns a client is undocumented has no legal obligation to inform ICE. A therapist who treats a client in removal proceedings has no legal obligation to report that fact to the immigration court or to DHS.

This is sometimes treated as the end of the analysis: if the therapist is not required to report, the client's information is safe. But this conflates two different legal structures. The absence of an affirmative reporting duty governs what the therapist must proactively do. It says nothing about what the cloud AI scribe vendor can be compelled to produce from the vendor's independently retained archive in response to legal process directed at the vendor as a separate legal entity.

The therapist who does not report is not protected from a subpoena to the vendor. The vendor archive exists because the therapist used a cloud AI scribe. It is reachable by legal process that does not touch the therapist at all.

On-device processing and the single-custodian structure

When session audio, transcript, and note draft are processed entirely on the therapist's local device without any transmission to a cloud vendor's servers, the vendor archive does not exist. There is no separately held copy of verbatim session audio for immigration enforcement to reach by administrative subpoena to a third-party vendor. The session content — everything said — exists only in the therapist's clinical record, subject to professional documentation judgment about what is clinically relevant to document, and under the therapist's custody where applicable privilege and HIPAA protections can be asserted.

For clients with immigration vulnerabilities, this architectural difference is not abstract. The client whose undocumented family member's location was mentioned in session, the client who described their border crossing experience while working through trauma, the client who outlined a safety plan for an enforcement scenario — all of them have a material interest in whether a vendor archive of those disclosures exists as a separate subpoenable body of records. The same structural principle that protects disclosures about gender identity from government targeting applies here: a single custody location is inherently more protective than two custody locations, because there is no independently subpoenable third party.

The therapist's clinical records — under the therapist's custody, documented with professional judgment about clinical relevance — are where session content should live. Not also in a vendor archive that the therapist did not author, cannot control, and whose legal obligations in response to immigration enforcement process are determined by the vendor's own legal team.

Frequently asked questions