Your AI chat logs are evidence. That is not a prediction — it is the current state of federal law, and this week it landed in the mainstream. Dr. Alex Wissner-Gross flagged it in The Innermost Loop on August 31, 2026, pointing to Washington Post reporting that found a dozen cases in which chatbot conversations were pulled into criminal and civil proceedings — alongside OpenAI’s own disclosure that it handed over data on more than 80 accounts in the second half of 2025, over four times the prior year. If your executives, your HR director, or you personally have been thinking out loud to a chatbot about a deal, a termination, or a dispute, that transcript is discoverable.
The doctrine behind the headline is six months old and it is unforgiving.
The Case That Made AI Chat Logs Fair Game
On February 17, 2026, Judge Jed S. Rakoff of the Southern District of New York issued a twelve-page memorandum in United States v. Heppner, No. 25 Cr. 503 (JSR). He called it “a question of first impression nationwide.” Bradley Heppner, indicted for securities fraud, wire fraud, and falsifying corporate records, had used Claude to work through his exposure after receiving a grand jury subpoena. The FBI seized roughly thirty-one documents memorializing those conversations. Heppner claimed privilege over all of them.
He lost on every element. The court applied the standard three-part test from United States v. Mejia, 655 F.3d 126, 132 (2d Cir. 2011), and found the AI chat logs failed at least two of three — possibly all three. Here is how each failure maps onto a risk sitting inside your own company right now.
Risk 1: The Chatbot Is Not Your Lawyer
“Because Claude is not an attorney,” Rakoff wrote, “that alone disposes of Heppner’s claim of privilege.” No attorney-client relationship, no privilege. The court leaned on the point that recognized privileges rest on a trusting human relationship with a licensed professional who owes fiduciary duties and can be disciplined. A model owes you nothing and cannot be disbarred. For privilege purposes, AI chat logs sit closer to a conversation with a stranger than to a call with your attorney.
Risk 2: Pasting Your Lawyer’s Advice Into a Chatbot Waives It
This is the paragraph business owners need to read twice. Heppner argued the documents were privileged because they incorporated information his counsel had given him. The court’s answer, in a footnote: even if that information was privileged, “he waived the privilege by sharing that information with Claude and Anthropic, just as if he had shared it with any other third party.”
Every time someone in your company copies a memo from counsel into a consumer chatbot to get a plain-English summary, that is a third-party disclosure. It is the same analysis you already apply to confidential information and to trade secrets typed into AI tools. Convenience is not a privilege exception.
Risk 3: Sending the Output to Counsel Afterward Does Not Cure It
Heppner shared his Claude reports with his lawyers, and those reports influenced defense strategy going forward. It did not matter. Non-privileged communications, the court held, “are not somehow alchemically changed into privileged ones upon being shared with counsel,” citing Gould, Inc. v. Mitsui Mining & Smelting Co., 825 F.2d 676, 679–80 (2d Cir. 1987). If the AI chat logs would not be privileged in your hands, forwarding them to your attorney does not fix them.
Risk 4: Work Product Will Not Save You Either
The work product doctrine under Federal Rule of Civil Procedure 26(b)(3) protects material prepared by or at the behest of counsel. Heppner’s lawyers conceded they “did not direct [Heppner] to run Claude searches.” The documents affected counsel’s strategy after the fact, but did not reflect it at the time they were created. That distinction sank the claim. Self-directed AI chat logs — the kind an anxious executive generates at midnight — are precisely the ones the doctrine does not reach.
Risk 5: The Vendor’s Privacy Policy Is Now a Litigation Document
The confidentiality analysis turned substantially on terms almost nobody reads. The court noted that the applicable privacy policy told users the provider collects both inputs and outputs, uses them to train the model, and reserves the right to disclose data to third parties including “governmental regulatory authorities” — even absent a subpoena. On that record, there was no reasonable expectation of confidentiality in the AI chat logs at issue.
Which means the difference between a consumer account and an enterprise agreement with zero-retention and no-training terms is now a legal difference, not an IT preference. That is a contract question, and it belongs in your AI vendor agreements and your AI training clauses — not in a settings menu.
Risk 6: Your Litigation Hold Almost Certainly Omits AI Chat Logs
Most preservation letters still enumerate email, texts, voicemail, and internal messaging. Very few name ChatGPT, Claude, Gemini, or Copilot. Under Rule 37(e), electronically stored information “that should have been preserved in the anticipation or conduct of litigation” and is lost because a party failed to take reasonable steps exposes that party to sanctions. A generic ESI catch-all is weak notice that someone’s chat history matters. Naming the platforms is stronger — in both directions, because opposing counsel will eventually name them to you.
The Counterweight: Courts Are Not Unanimous
Honesty requires the other half of the picture. On February 10, 2026 — the same day Rakoff ruled from the bench — a magistrate judge in the Eastern District of Michigan reached a different result in Warner v. Gilbarco, Inc., No. 2:24-cv-12333. There, the court refused to compel a civil litigant’s ChatGPT materials, holding that generative AI programs “are tools, not persons,” and that work-product waiver requires disclosure to an adversary — a materially different standard from attorney-client waiver.
Heppner is a district court memorandum, not binding precedent, and the Harvard Law Review has criticized its categorical tilt. But it is the first word, it is well reasoned, and defense-side firms across the country have told clients to assume it will be followed. Planning around the optimistic case is not a strategy. Treat your AI chat logs as discoverable until a court in your jurisdiction says otherwise.
What Business Owners Should Do This Week
Four concrete steps, none of which require a project plan:
- Say it out loud to your team: consumer AI accounts are not confidential. Nothing about a live dispute, an investigation, a termination decision, or a deal goes into one.
- Move regulated work onto enterprise agreements with contractual no-training and retention terms, and confirm which accounts your people are actually using. Personal accounts sit outside your Rule 34 “possession, custody, or control” — until a court decides otherwise.
- Update your litigation hold template to name AI platforms as a standalone category — AI chat logs, exported documents, and the prompts themselves.
- If you are already in a dispute — a partnership fight, an employment claim, a regulatory inquiry — stop using consumer AI on the subject matter today and tell counsel what already exists. The NDA you signed does not cover what you typed.
There is one narrow escape hatch. Rakoff suggested that had counsel directed the client to use the tool, it might have functioned as a lawyer’s agent under the Kovel line of cases and fallen inside the privilege. That is a real path — but it only works if your lawyer sets it up in advance, in writing, before anyone starts typing.
Talk to Howard East Before the Subpoena Arrives
Howard East advises business owners on commercial litigation, contract structure, and the technology policies that sit underneath both. If your company uses AI tools in any decision that could end up in front of a judge, an hour spent on your AI chat logs policy now is cheaper than a motion to compel later. Schedule a consultation.
Hat tip to Dr. Alex Wissner-Gross and The Innermost Loop, where this development surfaced.
This article is for informational purposes only and does not constitute legal advice. Court rulings vary by jurisdiction and facts, and this area of law is developing rapidly. Consult a licensed attorney about your specific situation.
