---
title: "Configure recordings and retention"
description: "Control saved conversation data and review what your clinic should collect."
url: "https://documentation.verbatik.com/privacy/"
---

# Configure recordings and retention

Control saved conversation data and review what your clinic should collect.

## Decide the data policy first
Before connecting a public clinic line, decide which conversations may be recorded, which notices callers should hear, how long records should be kept and which staff can access them. Configure the agent's **Privacy & recordings** section and workspace retention settings accordingly.

Avoid collecting payment-card details, passwords or unnecessary patient information in a prompt or transcript. A knowledge source or custom field should contain only information the agent needs for the approved task.

## Review saved content
**Call history** and **Chat history** can contain personal data. A recorded charge, call status or summary can remain useful even when a transcript is redacted. Do not assume deleting audio automatically deletes every transcript, export, integration record or source-system copy.

In **Conversation retention**, set transcript and session-metadata retention, optionally remove phone numbers when transcripts expire, enable automatic retention and select **Review policy** before applying it. Enabled policies remove expired transcripts, QA evidence, derived contact memory and recordings. Accounting session totals remain; metadata is archived after its configured period. Removed content cannot be restored by disabling the policy. Confirm the resulting status in the interface. Keep a record of any separate cleanup required in a CRM, booking system or file-storage service.

## External integrations
Authorize the minimum scopes and selected resources needed. A customer's Google Calendar, CRM or document connector belongs to its workspace. Disconnect or revoke obsolete access through both Verbatik and the provider when appropriate. Secrets belong in connection fields, never knowledge text, Assistant messages or documentation examples.

## Security and compliance claims
Product configuration alone does not establish a clinic's compliance obligations or create a signed agreement. Confirm any required contractual, privacy and recording terms with Verbatik before sending regulated data. Request explicit confirmation of any certification, data-residency commitment or regulated-data agreement your clinic needs.

For troubleshooting, share a session ID and a short redacted description before sending a full transcript or recording.