Updating the docs

Author: sahil-vapi

fern/security-and-privacy/PCI.mdx

@@ -51,10 +51,12 @@ If either cloud storage or webhook is not configured, the respective data will n
 Example configuration for `PCI compliant` assistant is:
 ```JSON
 {
-  "pciEnabled": true
+  "compliancePlan": {
+    "pciEnabled": true
+  }
 }
 ```
-Note: The default value for `pciEnabled` is false. Activating this setting aligns your assistant with PCI DSS standards by ensuring data is securely transmitted without being stored on Vapi’s systems.
+Note: The default value for `compliancePlan.pciEnabled` is false. Activating this setting aligns your assistant with PCI DSS standards by ensuring data is securely transmitted without being stored on Vapi’s systems.
 
 ## Can PCI be used alongside HIPAA?
 Yes, you can enable both HIPAA and PCI compliance for an assistant. In this case, the restrictions from both compliances will apply, meaning that no recordings or transcripts will be stored or transmitted, even if you have specified cloud storage endpoints or webhooks for storing transcripts.
@@ -65,10 +67,10 @@ Yes, you can enable both HIPAA and PCI compliance for an assistant. In this case
 
 A: Enabling PCI compliance does not degrade the quality of the voice assistant services.
 However, it restricts you to use only the PCI-compliant endpoints, while limiting access to certain features, such as reviewing call logs, recordings or transcriptions, within the Vapi platform.
-If any cloud storage endpoints are provided, you can review the audio recordings in your own storage environment. The recordings follow naming convention:
+If any cloud storage endpoints are provided, you can review the audio recordings in your own storage environment. The recordings follow the naming convention:
 
 ```
-call_ID-recording.wav
+<call_UUID>-<timestamp>-<generated_UUID>-<audio_type>.wav
 ```
 
 **Q: Who should use the PCI compliance feature?**