Hi Vapi Team, I have a few questions regarding call data storage and AI training policy. 1. If I connect AWS S3 to Vapi for the custom storage, will Vapi still save call data (ex. Recordings, transcripts, etc.) in Vapi's servers? 2. For call data that is saved in Vapi's servers, is there a way to request deletion of all those data? 3. If we use TTS and STT providers directly from Vapi's dropdown selection, what would the AI training and data collection policy be when the call goes through those providers? Thank you for the support. I look forward to hearing from you.

If you connect AWS S3 as custom storage in Vapi, your call recordings and transcripts will be uploaded to your S3 bucket instead of being stored on Vapi's servers. Only system logs and product usage metrics remain on Vapi's infrastructure and are never uploaded to your custom bucket. Example configuration for AWS S3 in Vapi:

json
{
  "awsAccessKeyId": "YOUR_KEY",
  "awsSecretAccessKey": "YOUR_SECRET",
  "s3BucketName": "your-bucket-name",
  "bucketPathPrefix": "optional/path/prefix"
}

For more details, see the [Vapi documentation](https://docs.vapi.ai/security-and-privacy/data-flow). Sources: - [Vapi Security and Privacy: Data Flow](https://docs.vapi.ai/security-and-privacy/data-flow) - [Vapi AWS S3 Provider Setup](https://docs.vapi.ai/providers/cloud/s3)

Hi, Great questions - happy to walk through each one. 1. Custom S3 + Vapi storage When you connect your own S3 bucket, call recordings (audio files) are redirected there instead of Vapi's servers. However, other data - transcripts, messages, summaries, and call metadata — still gets stored in Vapi's database. If you want Vapi to store nothing on our side, you'd need to enable Zero Data Retention (ZDR) mode alongside custom S3. With both enabled, recordings go to your S3 bucket and all other call data is scrubbed from Vapi's systems - you still receive everything via end-of-call webhooks. 2. Requesting data deletion Yes, a few options: - Email support@vapi.ai with a deletion request - data not required for legal/business purposes is deleted within 30 days - Use the DELETE /calls API to remove individual call records: https://docs.vapi.ai/api-reference/calls/delete - Enterprise customers also have access to bulk deletion We're GDPR and CCPA compliant, so data subject rights requests are fully supported. For reference, default retention on pay-as-you-go is 14 days for call data and 30 days for chat data. 3. TTS/STT provider training policy Vapi does not use your call data to train any AI models - no opt-out needed, this is the default. For TTS/STT providers in our dropdown (Deepgram, ElevenLabs, etc.), we configure them all in no-training, zero-retention modes by default and opt out of any human review programs they offer. Audio is processed for the conversion and then discarded - it's not retained or used to improve their models. For more detail on our security posture, SOC 2, and DPA templates, check our trust center at https://security.vapi.ai. Let me know if you have any follow-up questions! Best, Vapi Support

Hey Shaunak, Sorry for the late reply. Thanks for the very clear and thorough explanation. One last thing I want to confirm: - No data is used for AI training policy in vapi and the model provider - call data goes to s3 if configured, and other data (transcripts, summaries, etc.) goes to vapi's server Are all applicable to pay as you go plans as well right? Thanks for your help.

Hi, thanks for the follow up.

Right, thanks for the update