VAPI does state it’s GDPR-compliant for handling EU data, including for healthcare-related use cases like yours, but the default platform infrastructure is hosted outside the EU (typically US regions) unless you configure custom storage or self-hosted deployment options.
For strict EU data residency, you’ll likely need to store recordings/transcripts in your own EU-region bucket or deploy via an EU-hosted instance (e.g., AWS Marketplace in an EU region) to meet local requirements.
If you want, I can help map out exactly how to set that up for your clinic.
@Umer