Active-duty service members, security clearances, and cloud AI scribes: what private therapy vendor archives mean for DCSA personnel security investigations, IDES proceedings, and military fitness determinations

Why active-duty service members seek private therapy and what it protects

Active-duty service members have three primary pathways to mental health care. The first is care at a military treatment facility (MTF) — the base clinic, hospital, or behavioral health department. MTF records are military medical records in the service member's official file. Under DoD policy, providers at MTFs have chain-of-command reporting obligations for specific categories of clinical concern: imminent danger to self or others, conditions affecting fitness for duty, and certain occupationally relevant findings. Service members correctly understand that MTF mental health records are not confidential in the same sense that private practice records are.

The second pathway is civilian care through TRICARE, the military health insurance program. TRICARE-billed civilian therapy generates claims records in the TRICARE system, and TRICARE as a payer has administrative access to claims data and encounter documentation for purposes of benefits administration and claims audit. The service member's TRICARE utilization is visible in DoD health system records.

The third pathway is cash-pay civilian therapy outside TRICARE and outside any DoD-connected system. A service member who pays out of pocket to see a private-practice therapist who does not bill TRICARE, does not provide services on or near a base, and has no connection to the DoD system creates the strongest barrier between their mental health treatment and their military file. That barrier is real for the therapist's formal clinical records: a private-practice therapist's records are HIPAA-governed, reachable only through the service member's written authorization or valid legal process, and not automatically visible to the chain of command or to DCSA investigators.

The cloud AI scribe creates a fourth record that service members and their therapists typically do not factor into this analysis. When a private-practice therapist uses a cloud AI scribe for note drafting, the vendor processes session audio and retains a verbatim archive of the session content. That archive exists at a commercial vendor as an independent business record. It is not the therapist's formal clinical note. It is not in the therapist's EHR. It is in the vendor's cloud infrastructure, subject to the vendor's data governance and legally reachable through process directed at the vendor — separately from any process directed at the therapist. For the general framework of how cloud AI scribe vendor archives function as third-party business records accessible through legal process, see our analysis of whether AI therapy note vendor archives can be subpoenaed.

The security clearance framework and mental health: DCSA, the SF-86, and Adjudicative Guideline I

Personnel security investigations for security clearances are conducted by the Defense Counterintelligence and Security Agency (DCSA), which is the DoD's primary personnel security investigative agency responsible for most DoD and many interagency clearance investigations. Initial investigations, periodic reinvestigations, and continuous vetting activities are all DCSA functions. DCSA investigators conduct subject interviews, contact references and former employers, review financial records, check law enforcement databases, and — relevant here — seek and review medical and mental health records when the subject's disclosure or other information makes those records relevant.

The mechanism for medical records access in a personnel security investigation is the SF-86: Standard Form 86, Questionnaire for National Security Positions. Among its disclosure requirements, the SF-86 asks about mental health consultations, treatment, and hospitalizations. DoD policy and Security Executive Agent Directive 4 (SEAD 4) have worked to reduce stigma by narrowing the mandatory disclosure window for treatment-seeking — the current SF-86 asks about certain mental health consultations, but includes specific exceptions for counseling related to grief, marital, family, or self-improvement in contexts that did not result in a referral for further treatment. The goal is to encourage treatment-seeking by avoiding a blanket disclosure requirement that would deter service members from getting help.

Critically, when a service member discloses mental health treatment on the SF-86 or when investigation generates reason to investigate mental health treatment, the form's authorization language provides broad authority for investigators to seek and review records. The SF-86's release of information provision authorizes the releasing agency or institution to provide records to investigators. Whether that authorization expressly covers a cloud AI scribe vendor as a separate custodian of the session data is a legal question that has not been definitively resolved, but the underlying intent of the authorization — to allow comprehensive investigation of the subject's background — is broad.

Adjudicative Guideline I of SEAD 4 addresses Psychological Conditions. It identifies concerns when a condition "may indicate a defect in judgment, reliability, or trustworthiness" and lists mitigating factors including treatment-seeking with a favorable prognosis. The guideline is not intended to penalize service members for seeking help. What creates adjudicative exposure is the content of what emerges through the investigation: substance use, illegal conduct, financial problems under Guideline F, foreign contacts under Guideline B, behavioral patterns suggesting untrustworthiness under Guideline E. A private therapist's formal note about a session where a service member discussed these topics is a professional synthesis. The cloud AI scribe vendor's verbatim archive of the same session is the raw record of everything the service member said — including everything that never made it into the formal note because it was tangential, exploratory, or in the therapist's clinical judgment not documentable in formal records.

What cloud AI scribes capture in private therapy sessions with active-duty service members

The adjudicative significance of what a cloud AI scribe captures in sessions with active-duty service members is unusually high because service members' lives involve categories of information that trigger multiple adjudicative guidelines — not just Guideline I on psychological conditions.

Combat and deployment disclosures. Service members frequently discuss specific deployment events, unit experiences, and combat-related trauma in therapy. Depending on the classification status of the underlying information, verbatim accounts of operational events in a vendor's commercial database create both security and evidentiary exposure. Even when the underlying operational content is unclassified, the service member's narrative of specific incidents, their characterization of their unit's conduct, and any accounts of events that generated post-traumatic stress are captured verbatim in the vendor archive.

Substance use. Substance use disorders — alcohol use disorder, cannabis use, prescription medication misuse — are among the most common mental health concerns brought to private-practice therapy by service members. Under Adjudicative Guideline H (Drug Involvement and Substance Misuse), substance use is an independent adjudicative concern. A service member disclosing their alcohol consumption patterns, episodes of cannabis use, or reliance on prescription medications in private therapy sessions may make verbal disclosures in those sessions that are more candid than anything they have formally documented. The vendor's verbatim archive of those conversations contains granular real-time content that the formal therapeutic note characterizes in professional clinical terms.

Financial stress and conduct. Under Adjudicative Guideline F (Financial Considerations), financial difficulties are a security concern. Therapy with active-duty service members dealing with military pay, high consumer debt, gambling, or financial stress from deployment cycles often involves explicit discussion of financial circumstances. The vendor's verbatim archive of those discussions may contain specific dollar amounts, creditor names, and characterizations of the service member's financial decision-making that go beyond what the formal clinical note reflects.

Foreign contacts and relationships. Under Adjudicative Guideline B (Foreign Influence), relationships with foreign nationals are security relevant. Service members who met foreign nationals during overseas assignments, who have family members in foreign countries, or whose spouses or partners are foreign nationals may discuss those relationships in private therapy. The vendor's verbatim archive of those sessions may contain specific names and relationship characterizations that the formal clinical note does not identify.

Criminal conduct and past legal issues. Under Adjudicative Guideline J (Criminal Conduct), undisclosed criminal history is an independent concern. Service members may disclose in therapy past conduct that they did not disclose on their SF-86 — traffic incidents, juvenile record items, incidents in foreign countries, or unreported events from military service. The vendor's verbatim archive of those disclosures is a separately reachable record of an undisclosed criminal history, which compounds the adjudicative exposure under Guideline E (Personal Conduct — deliberate omission) if the investigation reveals the discrepancy.

Five adversarial proceedings that reach the vendor archive in the military context

1. DCSA personnel security investigations

DCSA personnel security investigations proceed through background investigation, subject interview, records review, and adjudication. When mental health treatment is disclosed on the SF-86 or surfaces through investigation, DCSA investigators may seek the treating provider's records using the SF-86 authorization or administrative subpoena authority. For the formal treating provider — the private-practice therapist — this process is governed by HIPAA, and the therapist's records are the formal clinical documentation of the treatment relationship.

The cloud AI scribe vendor is a separate legal entity holding a separate body of records. The Stored Communications Act (18 U.S.C. § 2703) provides authority to compel production from electronic communication service providers and remote computing services through court orders and other lawful process. Cloud AI scribe vendors that store session transcripts and audio on their servers may qualify as remote computing services under the SCA framework. The applicability of specific SCA pathways to personnel security investigation contexts involves unsettled legal questions — but the existence of the vendor archive creates a potential discovery target that would not exist if the therapist processed session notes on-device. If the investigation reveals that the service member's verbal disclosures in therapy diverge materially from their SF-86 self-report, the discrepancy itself becomes adjudicatively significant under Guideline E, independent of whatever the underlying mental health content reflects under Guideline I.

2. IDES/LDES military disability evaluation proceedings

The Integrated Disability Evaluation System (IDES) is the military's medical disability evaluation process, used to determine whether a service member is fit for continued duty and to establish disability ratings for members who are found unfit. The process involves a Medical Evaluation Board (MEB), which reviews the service member's medical records and prepares a narrative summary, and a Physical Evaluation Board (PEB), which makes the fitness and disability determination. Mental health conditions — PTSD, TBI, major depressive disorder, adjustment disorder — are among the most frequently evaluated conditions in IDES proceedings.

MEB evaluators review all available clinical records relevant to the condition at issue. For a service member who sought private therapy outside the MTF system, that private treatment history is part of the complete medical picture, and MEB evaluators and IDES legal counsel may seek those records through legal process. If the private-practice therapist used a cloud AI scribe, the vendor holds a verbatim archive of therapy sessions addressing the same mental health conditions that are under evaluation in the IDES proceeding. Service members who contest PEB findings — through appeals to the Physical Review Board (PRB) or further administrative review — generate formal adversarial proceedings in which their complete treatment record becomes relevant. The cloud AI scribe vendor's archive is a separately discoverable third-party business record in those proceedings, in addition to the formal clinical records the MEB gathers through standard processes. For the general analysis of cloud AI scribe vendor archives in administrative and legal proceedings, see our discussion of what a BAA covers and what it does not.

3. Military Sexual Assault restricted reporting and subsequent proceedings

DoD's Military Sexual Assault Prevention and Response (SHARP/SAPR) program provides a restricted reporting option that allows sexual assault survivors to access medical care and counseling without triggering a criminal investigation. A service member who uses restricted reporting can receive treatment at a SARC (Sexual Assault Response Coordinator) or SAFE program without their chain of command being notified. If the service member later seeks ongoing therapy from a private-practice therapist outside the military system — in part because off-base civilian treatment provides stronger records protection — they may continue processing the assault in that private therapy context.

A cloud AI scribe at the private practice creates a verbatim archive of those sessions. If the restricted report is later converted to an unrestricted report — either by the service member's choice or because the investigation is triggered by other means — the MCIO criminal investigation can generate process reaching the private therapist's records including the vendor's separately held archive. Civil litigation by the service member against alleged perpetrators or against the DoD generates civil discovery in federal court. The cloud AI scribe vendor's verbatim archive of ongoing therapy sessions discussing the assault is discoverable in that civil litigation as a third-party business record, through Rule 45 subpoena, independently of the formal clinical records from the restricted reporting program. For the general context of military sexual trauma in the community care setting, see our analysis of veterans, military mental health records, and AI scribes.

4. MCIO criminal investigations

The military's criminal investigative organizations — NCIS (Naval Criminal Investigative Service), CID (Army Criminal Investigation Division), and AFOSI (Air Force Office of Special Investigations) — investigate allegations of criminal conduct by service members under the Uniform Code of Military Justice (UCMJ). When a service member under criminal investigation has received private mental health treatment, MCIO investigators may seek those therapy records as part of the investigation. For the formal therapy records, the investigative pathway involves Rule 17 criminal subpoenas in military courts-martial proceedings or coordination with federal prosecutors for civilian federal court proceedings.

For the cloud AI scribe vendor's archive, the investigative pathway involves the same legal process applicable to any third-party electronic record custodian in a federal criminal proceeding: Rule 17 subpoena in courts-martial, or 18 U.S.C. § 2703 compelled disclosure under the Stored Communications Act in parallel federal civilian proceedings. If the mental health disclosures in the service member's therapy sessions bear on the alleged criminal conduct — characterizations of relationships with alleged victims, disclosures about events that form the basis of the charges, behavioral context for conduct under investigation — the vendor's verbatim archive of those sessions is more detailed and more probative than the formal clinical notes and is independently obtainable by investigators.

5. Administrative separation proceedings and fitness-for-duty determinations

Military administrative separation (ADSEP) proceedings convene when a service member faces involuntary discharge from active service. The procedural vehicle is an Administrative Separation Board (ASB) for enlisted service members and a Board of Inquiry (BOI) for commissioned officers. Grounds for ADSEP include, among others, drug or alcohol abuse, pattern of misconduct, commission of a serious offense, physical or mental condition not amounting to a disability, and failure to meet fitness standards. Mental health history is often directly relevant in ADSEP proceedings — either as the basis for the action (mental condition not amounting to disability) or as context evidence in misconduct-based proceedings.

ADSEP boards are adversarial proceedings in which both the service member and the command present evidence. Discovery processes apply. The command's legal representation can seek the service member's medical and mental health records as evidence. A service member who sought private mental health treatment outside the DoD system to maintain records separation may find that the private-practice therapist's cloud AI scribe vendor holds a verbatim archive of therapy sessions that is discoverable in the ADSEP proceeding through the same legal process applicable in federal administrative litigation. The formal clinical notes from the private therapist are the professional record; the vendor's verbatim archive is the raw session content — potentially containing disclosures that the formal notes characterize differently. For the intersection of fitness-for-duty evaluation and cloud AI scribe documentation, see our analysis of fitness-for-duty psychological evaluations and AI scribe documentation.

On-device processing in the security clearance and military context

On-device processing eliminates the vendor archive across all five adversarial proceedings described above. When a private-practice therapist uses a tool that processes session audio entirely on a local device without transmitting content to a cloud vendor, there is no separately held verbatim archive at a third-party commercial company. There is no record for DCSA investigators to reach through the Stored Communications Act or through the SF-86 authorization process that operates on vendors independently of the therapist. There is no third-party archive for MCIO investigators to serve with a Rule 17 subpoena. There is no separately discoverable record custodian for ADSEP command counsel to identify and subpoena.

The therapist's formal clinical records continue to exist and are subject to the standard HIPAA framework and to whatever legal process applies to those records in context. The SF-86 authorization, if applicable, authorizes investigators to seek the therapist's own records — and those records are governed by HIPAA and state therapist-client privilege law in the normal way. On-device processing does not insulate the therapist's own records from authorized investigative access; it eliminates the additional, separately reachable third-party archive that creates a second documentation pathway to the same session content.

For the service member, the practical significance is that the carefully constructed records separation they achieved by going off-base to a private-practice therapist outside the TRICARE system remains intact when the therapist uses on-device processing. The formal treatment record exists with the therapist, subject to HIPAA and state privilege, reachable through the same legal process that applies to any private practitioner's records. No second record exists at a commercial vendor in cloud infrastructure subject to SCA compelled-disclosure pathways, Stored Communications Act orders, or Rule 17 subpoenas directed at the vendor independently of the therapist. For the technical details of what cloud-based vs. on-device processing means for vendor data custody, see our analysis of what cloud AI scribes actually send to their servers.

Practical implications for clinicians treating active-duty service members

Service members should specifically ask whether their private therapist uses cloud AI for documentation. The records separation that off-base, cash-pay private therapy creates — the practical and legal insulation from DoD records systems — is undermined by any documentation tool that transmits session content to a commercial cloud vendor. A service member who has chosen private therapy specifically to protect their security clearance or career should know that their therapist's cloud AI scribe creates a third-party archive outside both the DoD system and the HIPAA-governed formal clinical record. Asking "do you use AI tools for note-taking, and if so, does the audio or transcript leave your device?" is a reasonable question with direct relevance to the service member's records protection goals.

Private-practice clinicians treating active-duty service members should disclose AI scribe use specifically in their consent forms. Standard HIPAA-compliant consent forms address the general treatment relationship. A consent form that describes cloud AI scribe use — including that audio and transcript content is processed by a commercial vendor that retains an archive — gives the service member the information they need to make an informed choice about whether to proceed with that therapist using that documentation method. The service member's decision to seek private therapy was a deliberate records-protection choice; an informed clinician treats that choice as relevant context.

IDES and ADSEP contexts require specific disclosure awareness. Service members whose mental health conditions are under formal evaluation in IDES disability proceedings or whose behavior is the subject of ADSEP proceedings have an immediate and concrete interest in whether their private therapy vendor archive can be reached by the command or by the adversarial parties in those proceedings. Clinicians treating service members in either of these contexts should understand that their cloud AI scribe vendor's archive of the treatment relationship is a separately discoverable record — and that the service member's counsel in those proceedings should be made aware of that archive's existence and location when litigation holds and discovery obligations are assessed.

The Personnel Reliability Program creates additional scrutiny. Service members assigned to duties involving nuclear weapons, certain special access programs, and other high-reliability roles are subject to the Personnel Reliability Program (PRP), which imposes ongoing fitness monitoring requirements. PRP-assigned service members face more frequent mental health screening and have reduced ability to self-refer for private treatment without PRP reporting implications. For PRP-assigned personnel who do seek private mental health care, the cloud AI scribe question carries heightened weight because the investigative scrutiny applied to their records is continuous rather than periodic. For the broader landscape of cloud AI scribe documentation in outpatient private practice, see our analysis of AI therapy note vendor archives and third-party subpoena access.

Frequently asked questions

Can the military or DoD access a private therapist's records when an active-duty service member seeks private treatment?

Not automatically — but through several legal pathways. A service member who discloses mental health treatment on the SF-86 or whose treatment is identified during a personnel security investigation authorizes investigators to seek records from the identified provider. The therapist's formal records are HIPAA-covered and reachable through the authorization or administrative subpoena. A cloud AI scribe vendor holding a verbatim archive of the same sessions is a separate third-party business record custodian whose records may be reachable through Stored Communications Act compelled-disclosure pathways directed at the vendor independently of the therapist.

Does signing the SF-86 give security clearance investigators access to my cloud AI scribe vendor's records?

The SF-86 authorization is intended to be broad. Whether it expressly covers a cloud AI scribe vendor as a separate custodian of session data is unsettled. The more established pathway is the Stored Communications Act (18 U.S.C. § 2703), which allows compelled disclosure from remote computing services through court order. Cloud AI scribe vendors storing session transcripts may qualify as remote computing services under the SCA. The vendor archive is an independently reachable record through pathways that operate separately from the authorization the therapist holds from the service member for their own formal records.

What is Adjudicative Guideline I and how does it affect mental health treatment-seeking by service members?

Adjudicative Guideline I — Psychological Conditions — is one of 13 adjudicative standards under Security Executive Agent Directive 4 (SEAD 4). It addresses mental health conditions that may indicate a defect in judgment, reliability, or trustworthiness. DoD policy has worked to encourage treatment-seeking by listing it as a mitigating factor: ongoing therapy with a favorable prognosis is a positive adjudicative consideration, not a disqualifying fact. The adjudicative exposure lies in what is disclosed in therapy: substance use, criminal conduct, financial problems, foreign contacts — categories covered by other adjudicative guidelines that a cloud AI scribe vendor's verbatim archive may document with more granularity than the formal clinical note.

Can a cloud AI scribe vendor's session archives be subpoenaed in military administrative separation proceedings?

Yes. ADSEP proceedings are formal adversarial processes in which both sides can seek relevant records. If the service member's mental health history is at issue in the ADSEP proceeding, the cloud AI scribe vendor that independently holds a verbatim archive of private therapy sessions is a discoverable third-party business record custodian. The command's legal representation can serve process on the vendor independently of the therapist's formal records, potentially reaching more granular content than the therapist's formal documentation reflects.

Does on-device processing protect a service member's private therapy records from personnel security investigation?

On-device processing eliminates the separately reachable vendor archive — no cloud vendor holds a verbatim transcript archive reachable through legal process independent of the therapist. The therapist's formal clinical records continue to exist under HIPAA and applicable state law. On-device processing does not eliminate the security clearance system's authorized access to the therapist's own records through the SF-86 release; it eliminates the additional third-party business record that exists at a commercial vendor outside the formal records system and that is reachable through Stored Communications Act pathways, Rule 17 subpoenas, and administrative investigative tools directed at the vendor separately from the therapist.