Hi, how secure are the recordings made by Vapi? I'm a little concerned that the recording urls are "public", albeit they are protected by the obscurity of the file name. How long are the recordings stored? If I use the create call api, should I use the

recordingEnabled

or

transportConfigurations.record

? Is the first setting for Vapi recordings and the second for Twilio only? I've imported my own twilio number. My company deals with sensitive financial information, so I'd like to make sure recordings are safe and secure

@flyingemolga Hello! I'm glad you're considering the security aspects of using Vapi for your voice recordings. Security is a top priority for us, and we take several measures to ensure that your recordings are kept secure. The recordings made by Vapi are stored securely, and access to them is controlled. While the URLs may seem public, they are indeed protected by the obscurity of the file name, which acts as a unique identifier that is difficult to guess. Additionally, we employ industry-standard security practices to safeguard your data. Regarding the duration of storage for recordings, it typically depends on the policy set by Vapi. If you need specific information about retention periods, please ask support for more info on this. For the

create call

API, the

recordingEnabled

parameter is indeed for enabling Vapi recordings. The

transportConfigurations.record

parameter is used when you want to specify recording settings for calls that are handled by Twilio. Since you've imported your own Twilio number, you might need to configure both settings depending on where you want the recordings to be managed. Given that your company deals with sensitive financial information, it's important to ensure that all recordings are handled in compliance with relevant regulations such as GDPR, PCI DSS, or any other financial services regulations that may apply to your operations. If you have any further questions or need assistance with setting up your call configurations to ensure maximum security, please don't hesitate to reach out to our support team. We're here to help you with any concerns you may have.

Simply input your S3 credentials, and we will store all recordings directly to your bucket.

I might go with this approach, but my IT team wants to keep everything on Microsoft Azure instead of AWS. Is it possible to delete recordings through the API? Does

delete call

delete call information along with the recording?

Yeah, it does