Do you need to turn off Retell’s call storage for HIPAA compliance?

Hey everyone — I’m setting up Retell for small healthcare clinics and want to make sure it’s HIPAA-compliant.

From what I understand, as long as you sign the BAA and leave the “Opt out of sensitive data storage” toggle off, Retell keeps call recordings securely and you stay compliant. But I’ve seen some people say you have to turn off that toggle and handle call recording storage yourself to be compliant.

Can someone confirm if you actually need to disable Retell’s storage for HIPAA or if you are allowed to store the call recordings in retell?

Also, if anyone’s willing to hop on a quick 5-minute call so I could ask a couple more questions, feel free to DM me — would really appreciate it!

7 comments