Hello, As you can see vapi team has provided you that and more. HIPAA is far more strict than PCI-DSS which is the international regulations enforced by the PCI aka Payment Card Industry. If your client takes major card swipes ig visa mastercard etc etc then your client is obligated to follow those regulations. SO in a sense, you can turn off recording and you can enable HIPAA which means teh VAPI platform will be compliant with HIPAA and TECHNICALLY more secure than PCI-DSS regulations, however your solution will still fail to be compliant with PCI-DSS unless you learn what to do and do precisely that Low code no code is fucking dangerous because it lets alotta people play with fire. You can manage a regulated space, but you do not want to fuck up because you'll need lawyers to recover if you charge off a cliff and your client gets binged for it in some manner https://cdn.discordapp.com/attachments/1211484481848873020/1240023116927729746/image.png?ex=66450d05&is=6643bb85&hm=ad39aa395f4eaa2b0e4ea8e1abd36c05a92b7a34b300c2f86930d7ca3620166e&