Hi peoplekind,
For creating a HIPAA compliant application with Vapi and securely storing call recordings, you'll need to leverage your own HIPAA-compliant cloud storage with correct configurations. Vapi does not provide static IP addresses for egress, which affects IP whitelisting. However, you can workaround this by handling the recordings through your storage provider:
1. **Cloud Storage Configuration**: Use a HIPAA-compliant cloud storage provider (e.g., Amazon S3, Google Cloud Storage, Azure) that can securely receive your call recordings.
2. **Storage Credentials**: Set up your cloud storage credentials within Vapi to ensure that when HIPAA compliance is enabled, recordings are stored directly in your cloud environment, as Vapi itself does not store recordings with HIPAA mode enabled.
3. **Integrations**: While there is no platform-agnostic egress API currently available on the dashboard, ensuring that the correct webhook or cloud storage configuration captures the output from Vapi should align with your requirements.
For specific storage requirements that require IP whitelisting, consider using cloud providers that allow for dynamic IP management or setting up a VPN to secure these transactions. This aligns with maintaining compliance while working within the constraints of both Vapi and your storage provider.
For more details, please refer to the [HIPAA Compliance](
https://docs.vapi.ai/security-and-privacy/hipaa) documentation.