Skip to content

docs: link call recording/transcript retention, encryption & access from Data Flow #1262

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
stephenvapiai wants to merge 2 commits into
base: main
Choose a base branch
from
Draft

docs: link call recording/transcript retention, encryption & access from Data Flow #1262

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
eae3b85
docs: add Data Retention, Encryption & Access section to Data Flow
stephenvapiai Sep 25, 2026
b03489c
Merge branch 'main' into helpcenter-update/call-recording-data-retention
stephenvapiai Sep 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions fern/security-and-privacy/data-flow.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -352,6 +352,21 @@ The **Orchestration Layer** (endpointing, interruption detection, emotion detect

---

## Data Retention, Encryption & Access

Call recordings, transcripts, and call logs stored on Vapi's infrastructure follow the **raw data retention** window included with your Success Package — this is the "configurable retention" referenced throughout this guide. Retention days, encryption, and access controls live in one place so they don't drift out of sync as plans change:

- **How long artifacts are kept:** See the raw data retention row in [Pricing and Success Packages](/billing/pricing-and-success-packages#whats-included) for what your plan includes today. To keep artifacts longer than your plan's window, buy the **extended data retention** add-on — see [Manage Success Packages and add-ons](/billing/manage-packages-and-add-ons#buy-compliance-and-data-add-ons) — or configure [custom bucket storage](#custom-storage-data-flow) so you control retention yourself.
- **Encryption:** Vapi encrypts data in transit and at rest as part of its standard security practices. See [GDPR Compliance](/security-and-privacy/GDPR#data-security-measures) for the full list of technical and organizational safeguards.
- **Who can access stored artifacts:** Access to call recordings, transcripts, and call logs is governed by your organization's role-based access control. See [Role-based access control (RBAC)](/security-and-privacy/sso#role-based-access-control-rbac) for what each plan supports.
- **To stop retention entirely:** Enable [Zero Data Retention (ZDR)](/security-and-privacy/zero-data-retention), which stops Vapi from storing recordings, transcripts, messages, summaries, and detailed call logs after a call ends. ZDR is an organization-wide, all-or-nothing setting — for retention control on individual calls instead, use custom storage plus your own deletion policy.

<Note>
Retention days are set at the plan level in [Pricing and Success Packages](/billing/pricing-and-success-packages#whats-included) rather than repeated here, so this page stays accurate as plans change.
</Note>

---

## What Data Passes Through Vapi

Even with maximum custom configuration, certain data passes through Vapi's orchestration:
Expand Down
Loading