Hello. We've enabled the HIPAA Compliance toggle under assistant settings AND setup the S3 cloud storage integration. How can I support receiving transcripts and structured outputs in a hipaa-compliant way? When we enable "Transcription" under Assistant Settings -> Privacy -> Transcription, transcripts and structured outputs go to S3, the end of call report webhook, and show up in Vapi call logs. However, this doesn't seem hipaa-compliant if Vapi is storing everything. Thank you!

Hey ezzy, With hipaaEnabled: true, Vapi does not store call logs, recordings or transcriptions on their servers. Your S3 bucket is where the data goes instead, so you stay in control of it. Here are the relevant docs for reference: HIPAA guide: https://docs.vapi.ai/security-and-privacy/hipaa Data flow under HIPAA: https://docs.vapi.ai/security-and-privacy/data-flow https://cdn.discordapp.com/attachments/1479165503393239133/1479326322818809887/image.png?ex=69aba17f&is=69aa4fff&hm=b0153295aa460482ed7966c66419967094306bd4ce963099d2ac6bee6b23039d&

You’re right, if transcripts and outputs hit Vapi’s logs, that could be a HIPAA concern. I can help set up a workflow where everything flows directly to your S3 and webhook without storing sensitive data in Vapi. To make this precise, can you clarify if you need real-time call transcripts or just end-of-call reports? @ezzy

@Dharun Karthick It says "transcriptions are not stored". However, when "Transcriptions" is enabled with hipaaEnabled: true under the Assistant, I've confirmed transcriptions are STILL show up in VAPI call logs. I removed the S3 bucket and the transcriptions still show up in call logs. Is this expected behavior or a bug? What am I missing here? @James Christopher Thanks for the response. I need end-of-call-reports with transcripts and structured outputs, but ideally Vapi can handle that in a hipaa compliant way. (see above response about the problem i'm facing)

Hi, Could you please check your organization configuration and confirm that both

hipaaEnabled

and

zdrEnabled

are enabled? If either of these settings is not enabled, please update the configuration accordingly. Enabling both settings should resolve the issue you are experiencing. If the issue still persists after updating the configuration, please share your Organization ID so we can review it further from our side. Best regards, Oshi Raghav Customer Support Vapi