Student loan total and permanent disability discharge, therapy documentation, and cloud AI scribes: five proceedings where the vendor archive becomes the arbiter of the certification

The federal total and permanent disability (TPD) discharge program allows borrowers with qualifying federal student loans to have their balance discharged if they establish that they are totally and permanently disabled — unable to engage in any substantial gainful activity due to a physical or mental impairment that has lasted or is expected to last at least sixty continuous months or result in death. The program operates under 34 C.F.R. § 685.213 for Direct Loans and 34 C.F.R. § 682.402(c) for FFEL loans. A borrower can establish TPD eligibility through three pathways: an SSA determination that they are disabled with a review period of five to seven years or longer, a VA determination of service-connected disability rated at 100% with individual unemployability, or a certification by a licensed physician or, since 2018, a licensed clinical social worker, nurse practitioner, physician's assistant, or psychologist practicing within their scope of licensure.

The third pathway — practitioner certification — places the treating mental health therapist in the role of certifying authority. The therapist completes Part 3 of the TPD Discharge Application, attesting that the borrower has a physical or mental impairment that has made them unable to engage in any substantial gainful activity, has lasted or is expected to last continuously for at least sixty months, or is expected to result in death. That certification rests entirely on the clinical evidence the treating practitioner has developed through the treatment relationship. If the therapist documented those sessions using a cloud AI scribe — a vendor whose systems received session audio, generated AI transcripts, and accumulated a longitudinal archive of the treatment course — five adversarial proceedings can reach that archive independently of anything the therapist does after submitting the certification.

The legal framework: TPD discharge and the clinical documentation it depends on

The TPD discharge standard is substantial gainful activity (SGA), not mere impairment. Under 34 C.F.R. § 685.213(a)(3)(ii)(C), for the practitioner certification pathway, the practitioner must certify that the borrower's condition makes them unable to engage in any substantial gainful activity. SGA is a term of art derived from Social Security disability law — it currently means earning more than $1,620 per month (2025 threshold; adjusted annually). A practitioner completing the certification is making a clinical judgment that the borrower's impairment prevents them from working at or above the SGA threshold. That judgment rests on the clinical record accumulated during treatment: session notes, observations of functioning, the client's self-reported activities and limitations, and the longitudinal course of the impairment.

A three-year post-discharge monitoring period runs from the date of discharge. During that period, under 34 C.F.R. § 685.213(b)(7), the loan servicer (currently MOHELA for all federally serviced Direct Loans) monitors the borrower's annual earnings using IRS tax data. If the borrower's earnings exceed the SGA threshold during any year of the monitoring period, the loan is reinstated. But the monitoring period is not the only source of jeopardy. The Department of Education and the DOE Office of Inspector General retain authority to investigate the accuracy of the certification itself — not merely whether the borrower worked during the monitoring period, but whether the practitioner's certification accurately described the borrower's condition at the time it was made. That investigation reaches the clinical documentation. If that documentation was generated using a cloud AI scribe, the vendor archive is the most complete contemporaneous record of what was documented across every session during the treatment period that the certification describes.

The cloud AI scribe vendor archive is significant for a specific reason: it contains three layers of clinical information that the finished note alone does not. Session audio captures everything said in each session — the client's spontaneous disclosures about their activities, their work history, their attempts to return to employment, and the therapist's verbal observations. The AI-generated transcript converts that audio into a text record that is searchable and indexable in ways the finished note is not. The draft notes show the clinical formulation the therapist developed from the session content. All three layers are protected health information. All three are accessible to investigators who subpoena the vendor or issue an administrative production request to the vendor as a business record custodian — independently of the treating practitioner's cooperation. The gap between what the finished certification says and what the vendor archive documents is the core risk that five adversarial proceedings each explore from a different direction.

Proceeding 1: Department of Education post-discharge audit of the practitioner certification

The Department of Education and its loan servicer conduct post-discharge audits to verify that TPD discharge approvals were based on accurate certifications. These audits are distinct from the routine earnings monitoring: they examine whether the practitioner certification itself met the regulatory standard at the time it was submitted, not merely whether the borrower earned above SGA after discharge. An audit is typically triggered by inconsistencies — a borrower who returns to work shortly after discharge, information from a third party suggesting the borrower was employed or active during the treatment period the certification describes, or a pattern of certifications from a particular practitioner that the servicer's review flags for review.

The audit process can include requests for contemporaneous clinical documentation from the treating practitioner. The servicer may issue a records request for session notes covering the treatment period described in the certification. If the practitioner used a cloud AI scribe, the vendor archive exists as a parallel record of those sessions. A DOE administrative subpoena or records request directed to the cloud AI scribe vendor as a third-party custodian of business records can produce the session audio, AI-generated transcripts, and draft notes from every session during the certification period, independently of any records the treating practitioner provides. If the vendor archive reveals that the client spontaneously reported activities during sessions — working part-time, performing substantial household management activities, taking on caregiving responsibilities, or describing income sources — that are inconsistent with the SGA impairment standard, the audit can result in a finding that the certification was not adequately supported and the loan can be reinstated with interest and penalties.

The treating practitioner's exposure in a DOE audit is not primarily financial but reputational and professional: a finding that the certification was unsupported by the clinical record damages the practitioner's credibility as a future certifying authority and creates the factual predicate for the OIG investigation described below. The critical fact is that the cloud AI scribe vendor archive allows DOE and its servicer to assess the clinical basis of the certification without the treating practitioner's cooperation — before any formal proceeding has been initiated and before the practitioner has an opportunity to characterize the clinical evidence in their own words. The question of whether an AI therapy note can be subpoenaed addresses this evidentiary access in detail; for TPD certification proceedings, the answer determines whether the vendor archive can support or contradict the certification the practitioner submitted.

Proceeding 2: SSA Continuing Disability Review reaching the treatment record

For borrowers who discharged their loans through the SSA pathway — presenting an SSA award letter reflecting a medical improvement review period of five to seven years or longer — a subsequent Continuing Disability Review (CDR) that results in a finding of medical improvement terminates the SSA determination that served as the basis for the discharge. Under 34 C.F.R. § 685.213(b)(7)(iii), a post-discharge CDR finding of medical improvement creates the predicate for loan reinstatement. The CDR process is independent of the loan discharge proceeding: SSA conducts CDRs based on its own scheduling and evidence-development cycle, and a CDR outcome unfavorable to the borrower affects the loan discharge as a collateral consequence of the SSA determination, not as a direct DOE proceeding.

For borrowers who discharged via the practitioner certification pathway, an SSA CDR operates differently but creates a related risk. If a borrower whose loan was discharged based on a practitioner's mental health certification subsequently applies for SSA disability benefits, SSA's disability evaluation process — including the consultative examination, the Disability Determination Services review, and any appeals — develops a contemporaneous record of the borrower's functioning that can be compared against the TPD certification's SGA determination. SSA disability proceedings under 42 U.S.C. § 405(g) can reach treating provider records through records requests to treating providers and subpoenas in any federal court review. If the treating therapist used a cloud AI scribe, the vendor archive of session transcripts and draft notes provides SSA with a session-by-session longitudinal record of the client's self-reported activities, functional limitations, and treatment course that SSA's own records requests may not capture from the practitioner's own files.

The SSA CDR creates a distinctive risk for practitioners who used cloud AI scribes: the vendor archive may disclose session content that the practitioner documented only in the AI-generated transcript but not in the finished note. Clients often make spontaneous disclosures during therapy sessions that are clinically relevant but not incorporated into the formal session note — a reference to work activities the client describes as "just helping out," a description of travel that suggests physical capacity beyond what the certification describes, or a discussion of caregiving responsibilities that implies a level of daily functioning inconsistent with the SGA impairment standard. The finished session note may not document those disclosures because the therapist exercised clinical judgment about what was treatment-relevant. The AI-generated transcript in the vendor archive documents them verbatim. An SSA CDR proceeding or a DOE audit that reaches the vendor transcript archive has access to that unfiltered record in ways that the practitioner's finished notes do not provide. The relationship between SSDI proceedings and therapy documentation addresses the SSA disability evaluation process and the way cloud AI scribes create evidence accessible to SSA independently of the treating provider's cooperation.

Proceeding 3: DOE Office of Inspector General fraud investigation

The Department of Education Office of Inspector General investigates fraud in federal student aid programs, including TPD discharge fraud, under the Inspector General Act of 1978 and DOE OIG's authority to issue administrative subpoenas under the Education Department General Administrative Regulations. OIG investigations of TPD discharge fraud are triggered by the same signals that trigger DOE audits — earnings inconsistencies, third-party reports, pattern analysis of certifications — but they are criminal-referral proceedings, not administrative compliance reviews. An OIG investigation that finds evidence of a false certification can result in a criminal referral to the Department of Justice, civil litigation under the False Claims Act, referral to state licensing boards, and exclusion from participation in federal education programs.

The OIG's investigative authority includes the power to subpoena records from third parties — including cloud AI scribe vendors — as business record custodians. OIG's administrative subpoena power does not require the treating practitioner's cooperation and is not limited by HIPAA's general practitioner-subpoena protection in the way that a private party's subpoena would be: HIPAA § 164.512(f) authorizes disclosures of PHI in response to a law enforcement agency's administrative subpoena or summons under law enforcement authority, which OIG exercises in the course of an investigation. A cloud AI scribe vendor served with an OIG administrative subpoena must evaluate its production obligations, which in practice means producing the session records for the borrower's sessions with the treating practitioner unless the vendor asserts a privilege that applies — and the vendor's ability to assert the psychotherapist-patient privilege on behalf of the practitioner is limited, particularly when the OIG frames the production request as a business records subpoena to the vendor as a non-party custodian rather than as a demand for privileged communications from the treating practitioner.

The OIG investigation creates particular risk for the certifying practitioner because it proceeds independently and may be well advanced before the practitioner learns of it. OIG investigations are frequently conducted by grand jury subpoena if the matter is referred to DOJ — and grand jury proceedings are secret under Federal Rule of Criminal Procedure 6(e), meaning the practitioner has no notice that the cloud AI scribe vendor has been subpoenaed and has produced the vendor archive until the OIG or DOJ makes contact with the practitioner directly. By the time the practitioner is approached, OIG has already reviewed the contemporaneous session records — audio, transcript, and draft notes — that the vendor archive contains, and the investigation has been shaped by those records' contents. The terms of the BAA between the therapist and the cloud AI scribe vendor do not create any investigative privilege that prevents OIG from reaching the vendor archive; the BAA governs the commercial relationship between the covered entity and the business associate, not the vendor's obligations to federal investigators exercising administrative subpoena authority.

Proceeding 4: False Claims Act proceeding and qui tam liability

A TPD discharge application supported by a practitioner certification that materially misrepresents the borrower's condition is a false claim against the federal government under 31 U.S.C. § 3729(a)(1)(A) and (B). The FCA's false statement provision (§ 3729(a)(1)(B)) applies to any person who "makes, uses, or causes to be made or used, a false record or statement material to a false or fraudulent claim" for federal funds. A practitioner who certifies a borrower as totally and permanently disabled when the clinical record does not support the SGA impairment standard — or when the session transcripts in the vendor archive document the borrower's activities as inconsistent with the certification's conclusion — is potentially the maker of a false statement material to the claim for a TPD discharge that the federal government funds by forgiving the outstanding loan balance.

The FCA's qui tam provision (31 U.S.C. § 3730(b)) allows a private person with knowledge of a false claim — a "relator" — to file suit on behalf of the United States in federal district court, under seal, and collect between 15% and 30% of any recovery if the government intervenes or the relator prevails. For TPD discharge fraud, potential relators include the borrower's former employer, a coworker, a family member with knowledge of the borrower's activities during the certification period, or the loan servicer's fraud detection operation if it identifies a suspicious certification through routine monitoring. A qui tam complaint that includes allegations of a false practitioner certification will generate a DOJ investigation that issues civil investigative demands to the practitioner and, independently, to the cloud AI scribe vendor — again without prior notice to the practitioner that the vendor archive is being reviewed.

The FCA's damages structure is significant for the certifying practitioner. Treble damages under 31 U.S.C. § 3729(a)(1) apply to any false claim — meaning the face value of the discharged loan, multiplied by three, is the baseline measure of the government's damages exposure that the practitioner faces as the maker of the false certification. Civil penalties of $13,946–$27,894 per false claim add to that exposure. For a borrower with $75,000 in discharged federal student loans, the government's damages claim against the certifying practitioner is $225,000 before civil penalties. For a practitioner who certified multiple borrowers — or whose certifications were referred to a lending servicer's bulk-certification process — aggregate FCA exposure across multiple false claims multiplies accordingly. The clinical documentation underlying each certification, including the vendor archive of session records, is the evidence the government uses to establish that each certification was materially inaccurate relative to the session records that existed at the time the certification was submitted.

Proceeding 5: licensing board complaint and professional malpractice

When a TPD certification becomes the subject of a DOE audit, an OIG investigation, or an FCA proceeding, the certifying practitioner faces collateral proceedings before their state professional licensing board. Licensing board complaints arising from TPD certification issues can be filed by the DOE OIG as a referral after a fraud finding, by the loan servicer as part of its fraud-detection process, or by the borrower if loan reinstatement results in financial harm the borrower attributes to a defective certification. The licensing board's jurisdiction over the certifying practitioner's conduct is independent of the federal enforcement proceedings: the board regulates the practice of licensed professional counseling, clinical social work, marriage and family therapy, or psychology within the state, and a certification that misrepresents a client's clinical condition — or that is inconsistent with the clinical documentation underlying it — is a professional conduct matter within the board's authority regardless of its federal law consequences.

A licensing board investigation of a TPD certification typically requests the practitioner's clinical records for the period of treatment covered by the certification. If the practitioner used a cloud AI scribe, the board may independently subpoena the vendor for those records as business records of the treatment — a production request that reaches the vendor archive of session audio, AI-generated transcripts, and draft notes independently of what the practitioner provides. The licensing board can also rely on records that the DOE OIG, the loan servicer, or the qui tam relator has already assembled, meaning the vendor archive may already be in the board's possession through another proceeding before the board's own investigation begins.

The professional malpractice dimension arises when the borrower sues the certifying practitioner after loan reinstatement, alleging that the practitioner's certification was negligent — either because it misrepresented the borrower's condition or because it was not adequately supported by contemporaneous clinical documentation. The malpractice theory focuses on the standard of care for practitioners who complete TPD certifications: the standard requires that the certification be based on contemporaneous clinical observations, consistent with the clinical record, and supported by adequate documentation of the borrower's functional limitations. If the cloud AI scribe vendor archive reveals that the session records are inconsistent with the certification — either because the finished notes reflect a different clinical picture than the transcript of the sessions supports, or because the session audio discloses client activity inconsistent with the SGA impairment standard — the malpractice plaintiff uses the vendor archive as the measure of the gap between what the record showed and what the certification said. The licensing board complaint process for AI scribe-documented sessions describes how state boards handle clinical record disputes when a cloud AI scribe vendor holds the session record; for TPD certification proceedings, those dynamics determine whether the practitioner's clinical judgment can be defended against the vendor archive's contemporaneous record.

The convergence of all five proceedings on the vendor archive

Each of the five proceedings examined above reaches the cloud AI scribe vendor archive from a different direction. The DOE post-discharge audit reaches it as a business record request seeking contemporaneous clinical evidence that either supports or contradicts the certification's conclusion. The SSA Continuing Disability Review reaches it as a treating provider records request developing a longitudinal clinical picture for the disability evaluation. The DOE OIG fraud investigation reaches it as an administrative subpoena issued under federal law enforcement authority independently of the treating practitioner. The FCA proceeding reaches it via DOJ civil investigative demands and FRCP Rule 45 subpoena as part of both the government's investigation and the qui tam relator's evidence development. The licensing board complaint reaches it as a professional conduct records request and, if needed, by administrative subpoena, as the board evaluates whether the certification was consistent with the practitioner's contemporaneous clinical documentation.

None of the five proceedings depends on the others for access to the vendor archive. All five can proceed concurrently, each independently subpoenaing or requesting the same vendor archive. The cloud AI scribe vendor is not a party to any of these proceedings, has no professional duty of confidentiality to the practitioner, and produces records in response to valid legal process without the practitioner's consent — a dynamic the description of what cloud AI scribes actually send to their servers makes concrete. The vendor's BAA with the practitioner is a commercial contract; it does not create any investigative privilege that prevents a federal agency exercising administrative subpoena authority from obtaining the vendor's records.

The specific risk for TPD certification proceedings is that the vendor archive captures the clinical record that the certification rests on with greater comprehensiveness than the practitioner's own finished notes typically provide. The finished session notes that a therapist writes — or reviews from a cloud AI scribe draft — reflect clinical judgment about what is therapeutically relevant and professionally appropriate to document. The AI-generated transcript in the vendor archive is verbatim: it captures every spontaneous disclosure the client made during the session, including disclosures about activities, work, income, and functioning that the therapist did not incorporate into the finished note because they were not clinically significant for the treatment purpose. In a TPD certification proceeding, those disclosures are exactly what investigators are looking for — evidence that the borrower engaged in activities inconsistent with the SGA impairment standard during the treatment period the certification describes. The vendor archive provides that evidence independently of the practitioner's notes, and the practitioner has no control over what the archive contains after the sessions occur.

What on-device processing eliminates

On-device processing eliminates the third-party custodial vendor archive before it can become the target of the five proceedings described above. When a therapist uses TherapyDraft, session audio is captured on the clinician's Mac, transcribed by a locally running Whisper model, and drafted into a clinical note by a locally running inference model — without any data leaving the device. There is no cloud AI scribe vendor holding a repository of session audio, AI-generated transcripts, and draft notes that a DOE audit, an SSA CDR, an OIG investigation, a DOJ civil investigative demand, or a licensing board subpoena can reach independently of the treating practitioner.

The practitioner's own clinical records remain the only contemporaneous documentation of the sessions. That is not a trivial distinction for TPD certification proceedings: when the practitioner's finished notes are the only clinical record in existence, the practitioner controls what evidence exists, can characterize the clinical picture in the context of the treatment relationship, and produces records in response to legal process after consulting counsel and understanding what is being sought. The five proceedings described above can still request the practitioner's records — nothing about on-device processing eliminates the practitioner's own record-keeping obligations or the legal process by which those records can be reached. But the proceedings must work through the practitioner's own records rather than through an independent vendor archive that captures the raw session content without the clinical judgment embedded in the practitioner's finished notes.

On-device processing also eliminates the gap between what the AI-generated transcript captures and what the finished note says. That gap — the verbatim record of session content versus the clinically curated record in the finished note — is exactly what TPD certification proceedings exploit when they reach the vendor archive. The AI-generated transcript is not filtered by professional judgment about what is treatment-relevant; it is a verbatim record of the session. The finished note is filtered: the practitioner decided what clinical observations and client disclosures to include based on what was relevant to the therapeutic work. When the only record in existence is the practitioner's finished note, that professional filter is a feature — the note reflects what the practitioner assessed as clinically significant, which is the judgment a TPD certification rests on. When a vendor archive also exists, the unfiltered transcript is available to investigators before the practitioner has any opportunity to provide clinical context for what the session content means in the treatment relationship.

For practitioners who complete TPD certifications, on-device processing makes the clinical record management question simpler: the record that exists is the record you created through your clinical judgment, and the processes by which investigators can reach that record all require engaging you as the practitioner. The five proceedings described above do not disappear — DOE audits, SSA CDRs, OIG investigations, FCA proceedings, and licensing board complaints are features of the regulatory environment for practitioners who certify disability claims in federal benefit programs. But those proceedings work through the practitioner's records and professional engagement rather than through a vendor archive that accumulated outside the practitioner's control during ordinary documentation of the treatment sessions that underlie the certification.