https://retellai.com/?utm_source=discord&utm_medium=seo logo
Currently, recordings are accessible via public UR...
# ❓・ai-evy-support
g
@AI Evy Currently, recordings are accessible via public URLs, and even with signed URLs that expire, a leaked link could allow unauthorized access to sensitive information before expiration. I need recordings and transcripts to remain accessible to us, but behind proper authentication. Is there a way to enable this?
a
Thanks for tagging me @g3nbl0k. I'll look through relevant sources and get back to you shortly.
### Answer Retell AI's recording URLs are not currently protected by API key authentication [(1) ]() . While you can enable secure URLs that expire after 24 hours [(2) ]() , these URLs still don't require authentication to access before expiration [(1) ]() . To maintain access to recordings and transcripts while adding proper authentication, you'll need to implement your own secure storage solution: 1. **Download and store recordings yourself**: Use webhook events (call_ended or call_analyzed) to receive the recording URL [(3) ]() , then immediately download and store recordings in your own secure infrastructure where you control access [(1) ]() . 2. **Remove recordings from Retell**: After downloading, you can use the update-call API to remove the recording URL from Retell's system . This makes the original URL inaccessible. 3. **Alternative: Use Data Storage Settings**: Configure your agent's Data Storage Settings to "Basic Attributes Only" [(4) ]() . This prevents Retell from storing transcripts, recordings, and logs entirely . However, you can still access this data through webhook events where the call recording link expires after 10 minutes . The webhook approach allows you to capture recordings before they're deleted while implementing your own authentication layer. Note that even with "Basic Attributes Only" selected, recordings are still temporarily created for up to 10 minutes before deletion [(5) ](
0794) .
​ To learn more, see the sources I considered: [[1] Recording_URL not protected](https://discord.com/channels/1186424376300679209/1344475027663487157) [[2] Opt in to secure URL - Retell AI](https://docs.retellai.com/accounts/signed-secure-url) [[3] accessing call logs and from_number](https://discord.com/channels/1186424376300679209/1361465621056983222) [[4] Data Storage Settings - Retell AI](https://docs.retellai.com/accounts/privacy-disable) [[5] Discord message from @dailai. on 2025-01-30](https://discord.com/channels/1186424376300679209/1186462578310910112/1334400788293750794) ​
Feel free to tag @AI Evy with additional questions. I also appreciate feedback, it helps me improve.