Recording & Security Settings
Published:
Overview
This guide explains how to configure the security and compliance settings for an AI Voice Agent, including call recording, compliance monitoring, anti-bot detection, HIPAA mode, data retention, and transcription redaction.
Steps to Access Security Settings
- Navigate to Call Flows and locate the agent you want to edit.
- Ensure you are in the Advanced View.
- Click on the Security tab.
Available Security Settings
Recording
- Toggle Recording on to enable call recording for all calls and web demo sessions.
- Toggle Public Recording Link on if you want a publicly accessible URL to be generated for each recording — this is required if you intend to pass recording links to external systems such as a CRM.
Compliance Monitoring
- Toggle Compliance on to enable compliance monitoring across inbound and outbound calls. Compliance results are visible in the call history.
Anti-Bot Detection
- Toggle Anti-Bot Detection on to detect whether an AI-generated voice is calling in. Hover over the information icon for further detail.
HIPAA Mode
- Toggle HIPAA on to enable HIPAA-compliant data handling. When enabled:
- All call data (transcripts, recordings, LLM processing history) is wiped from the platform and its underlying services immediately after the call ends and the post-call webhook fires
- Data can still be sent to an external CRM via webhook before it is wiped
- Call history and transcripts will not be accessible in the portal after the call
- Prior Calls Context (AI Memory) cannot be used, as there is no retained call data to reference
Transcription Redaction
- Toggle Transcription Redaction on and configure which data points should be redacted from transcripts (e.g., date of birth, caller name).
Data Retention
- Configure the Data Retention period for transcripts, summaries, and recordings — options range from 1 day to 1 year, after which data is automatically deleted.
- Click Save to Draft or Publish to Production.
Key Notes
| Item | Details |
|---|---|
| Public Recording Link | Must be enabled for recording URLs to be accessible via external systems |
| HIPAA Trade-Off | Enabling HIPAA mode disables call history visibility and Prior Calls Context in exchange for full data deletion post-call |
| Compliance | Compliance monitoring applies to both inbound and outbound calls |
| Data Retention | Set based on your business or regulatory requirements |
| Anti-Bot Detection | Identifies inbound calls where the caller appears to be an AI-generated voice |
