Do I have to worry about GDPR and HIPPA compliance...
# supports
Salah
09/27/2025, 6:29 AMHey I'm asking about the GDPR compliance, I want to build solutions for European Union based businesses, but I don't know if VAPI is 100% GDPR compliant,
Also the HIPAA compliance. I saw that the HIPAA compliance is enabled by paying $1000 per month, and as I see now in the dashboard, it doesn't seem like you have to pay $1000, so it seems to be free. Could you make more clear about that?
v
Vapi Support Bot
09/27/2025, 6:30 AMVapi is fully GDPR compliant for EU-based businesses, with strong data protection and privacy measures in place. For HIPAA compliance, you can enable it by adding the following to your assistant or organization configuration:
Copy code
json
{
"compliancePlan": {
"hipaaEnabled": true
}
}s
Salah
09/27/2025, 6:38 AMI mean if I use it to build solutions with open ai models, deepgram, 11labs, and n8n there is a guarantee that is 100% GDPR compliant?
https://cdn.discordapp.com/attachments/1421383255638282360/1421385394842505216/image.png?ex=68d8d7ce&is=68d7864e&hm=bc4878f7aa0e0cea31d8b58e899d2dfd77d208749c236608456a40549b0aa617&
c
Chiranjeet Mishra
09/30/2025, 11:03 PMYou will still need to pay the $1000 USD to enable HIPAA to become fully compliant and have the signed certificate for HIPAA with your business' name. We can guarantee VAPI is compliant, but anything outside of VAPI services like n8n we cannot extend that guarantee.
a
alex@pnp
10/08/2025, 6:55 AMHi Kyle, your collegue yesterday told us that VAPI stopped all Data Processing Agreements (DPA) that are mandatory in the EU to be GDPR compliant. Can you confirm that and if not we need a DPA. Our link we got from you was withdrawed. We have invested the last 5 weeks heavily to move from your competitor. Can you please clarify what options we have with VAPI?
r
Relaximus
10/08/2025, 7:01 AMAlso, is there an alternative as the self-hosted or on-premise installation of VAPI?
Relaximus
10/09/2025, 6:00 AM@User anyone? We’re still missing any clear information about the GDPR situation. We were just about to launch our services based on VAPI Live — the only thing holding us back is the DPA and confirmation of GDPR compliance.
However, we received a confusing email from VAPI support stating that you are not based in the EU and no longer provide a DPA. This completely contradicts the information on your own website and even what’s been communicated here in Discord.
Can you please clarify what’s actually going on regarding GDPR compliance? Should we expect any upcoming changes? Is there a self-hosted version we could use? Or should we simply stop wasting our time, scrap all the work and integrations we’ve done, and start looking for an alternative service?
Honestly, it’s frustrating — we’re just asking about a basic legal requirement, and after two days we still can’t get a straight answer from support.
j
Jeremias
10/28/2025, 4:57 PMAnything on this?
c
Chiranjeet Mishra
11/03/2025, 9:47 PMWe apologize for the delay in responses lately. We are in process of making some changes to our workflow in how we handle support requests. The good news is that we are starting to get back on track of having a 48 hour response time and we would like to start cleaning up anything old.
With that being said, just wanted to check in with you to see if you have made any progress or changes to your project since support has last reached out.
2 Views