Do you need to turn off Retell’s call storage for HIPAA compliance?

Hey everyone — I’m setting up Retell for small healthcare clinics and want to make sure it’s HIPAA-compliant.

From what I understand, as long as you sign the BAA and leave the “Opt out of sensitive data storage” toggle off, Retell keeps call recordings securely and you stay compliant. But I’ve seen some people say you have to turn on that toggle and handle call recording storage yourself to be compliant. This would then require sending the call recording Web hook to your own server/database vs just storing it in retell.

Can someone confirm if you actually need to turn off Retell’s call recording storage for HIPAA or if you are allowed to store the call recordings in retell?

Also, if anyone’s willing to hop on a quick 5-minute call so I could ask a couple more questions, feel free to DM me — would really appreciate it!

1 comment