Quick question - I'd like to use the HIPAA compliance for an healthcare firm, however we need two endpoints from the call but it says on VAPI that once the feature is toggled on, no logs, recordings, or transcriptions will be stored unless custom storage and credentials are configured. How can I get endpoints from the call as we need the recordings / transcription to make a decision?

I can help you get HIPAA-compliant calls working on VAPI while still capturing the endpoints you need. The trick is setting up custom storage with your own credentials, so recordings and transcriptions don’t get stored by VAPI but are still available for you. Quick question: Do you need these recordings/transcriptions just for real-time decisions, or also for long-term use? @Dove

Hi Dove, If you are looking to ensure HIPAA compliance with Vapi's voice assistant platform, you can enable the

hipaaEnabled

configuration to prevent the storage of call logs, recordings, or transcriptions. Here's how to do it: 1. In your assistant's configuration, set

hipaaEnabled

to `true`:

json
   {
     "hipaaEnabled": true
   }

2. This configuration ensures no sensitive data is stored on Vapi's systems. Instead, you can store end-of-call report messages on your server for record-keeping. 3. Remember to enable HIPAA compliance at the organization level if needed and ensure all third-party service providers, such as Azure or OpenAI, are also HIPAA-compliant. For more details on configuring HIPAA, you can refer to the [HIPAA Compliance documentation](https://docs.vapi.ai/security-and-privacy/hipaa).

I built a direct API endpoint for this to bypass the logic app layer. It handles the signature handshake in real-time so you don't have to poll for status