HIPAA Compliance
# support
k
Hello! I am looking for technical support for a Vapi (functional & working) Conversational AI Agent. I need direction on a couple-three settings to complete. My Challenges/Needs/Questions: 1. External storage – Google Cloud Bucket external storage (audio files: configured, working, & storing) A. Currently stores FOUR audio files (mono, stereo, assistant, customer) in mp3 format on my Google Cloud Buckets (for each call) B. I only need ONE file, the stereo version audio file (with assistant & customer), can the other 3 audio files be ignored and NOT stored on my Google Cloud Bucket? 2. Vapi > Assistants > Call Logs (dashboard) A. When HIPAA is Enabled, is the current dashboard available with links to the my Google Cloud Bucket external storage? I've read it WILL be available and I've read it is NOT available due to the HIPAA Compliance being toggled. B. In the NON-toggle, it currently displays the dashboard and links to my Google Cloud Bucket files. But, when I toggle the HIPAA Compliance the link to download the files is BLANK (Vapi > Assistants > (Assistant Name) > Privacy > HIPAA Compliance) 3. When I toggle the HIPAA Compliance (Vapi > Assistants > (Assistant Name) > Privacy > HIPAA Compliance) Vapi will NOT store files on my Google Cloud Bucket external storage. What am I missing? Thank you in advance for any assistance/direction you can provide.
v
Currently, Vapi does not provide a documented configuration to store only the stereo audio file and suppress the other three (mono, assistant, customer) in your Google Cloud Bucket. You can set the recording format and path using the
assistant.artifactPlan.recordingFormat
and
assistant.artifactPlan.recordingPath
properties, but selective file suppression is not described in the documentation. With HIPAA compliance enabled, the dashboard will not display links to recordings, and storage of logs/recordings is generally disabled unless a custom bucket is configured. If you need more granular control, you may need to implement post-processing in your bucket to remove unwanted files after upload. Sources: - [Vapi HIPAA Compliance Documentation](https://docs.vapi.ai/security-and-privacy/hipaa) - [Vapi Call Recording Documentation](https://docs.vapi.ai/call-recording) - [Vapi Provider Keys Documentation](https://docs.vapi.ai/customization/provider-keys)
k
Great, thank you. What about item #3 in my request?: 3. When I toggle the HIPAA Compliance (Vapi > Assistants > (Assistant Name) > Privacy > HIPAA Compliance) Vapi will NOT store files on my Google Cloud Bucket external storage.
@Vapi Support Bot Great, thank you. What about item #3 in my request?: When I toggle the HIPAA Compliance (Vapi > Assistants > (Assistant Name) > Privacy > HIPAA Compliance) Vapi will NOT store files on my Google Cloud Bucket external storage.
v
When you enable HIPAA compliance for your Vapi assistant, no call recordings—including those in your Google Cloud Bucket—will be stored. This is a strict privacy measure: Vapi disables all storage of audio files, logs, and transcriptions to ensure HIPAA compliance. If you need to retain recordings, you must keep HIPAA mode disabled; otherwise, storage is not possible while HIPAA is active. For more details, see the [Vapi HIPAA Compliance Documentation](https://docs.vapi.ai/security-and-privacy/hipaa). Sources: - [Vapi HIPAA Compliance Documentation](https://docs.vapi.ai/security-and-privacy/hipaa) - [Vapi Call Recording Documentation](https://docs.vapi.ai/call-recording)
k
Adjust your assistant’s recording settings via the dashboard or API, when HIPAA compliance is enabled, Vapi disables dashboard download links and stops storing audio in your Google Cloud Bucket by design, requiring a HIPAA-compliant storage setup and explicit configuration to resume secure file storage..
v
Message marked as helpful by @kapchur! 🎉
Message marked as helpful by @kapchur! 🎉
k
Thanks for your comment and assistance. To make sure I understand. . . With the HIPAA Compliance ENABLED, Vapi will prevent the storage of ANY audio/transcription files on external storage, even my Google Cloud Bucket that is set up for HIPAA. In order for my Google Cloud Bucket to store from Vapi, I have to DISABLE the HIPAA Compliance option on Vapi, correct?
k
With HIPAA compliance enabled in Vapi, audio and transcription files are not stored anywhere, including your HIPAA-compliant Google Cloud Bucket unless you disable the HIPAA setting and explicitly configure secure storage..