Explicit clarification of cloud storage endpoints

Author: sahil-vapi

fern/security-and-privacy/PCI.mdx

@@ -40,8 +40,8 @@ If your organization handles payment data, you can enable PCI compliance by upda
 1. Log in to your Vapi account and navigate to your assistant’s settings.
 2. Enable the PCI Compliance toggle.
 3. Select the PCI-compliant Model, Voice, and Transcriber options for your assistant.
-4. Configure **cloud storage credentials** for storing call recordings.
-5. Set up **webhooks** for receiving transcriptions.
+4. [Optional] Configure cloud storage credentials for storing call recordings. If you have any of the storage endpoint credentials, they will be used to push the recordings.
+5. [Optional] Set up **webhooks** for receiving transcriptions.
 
 
 <Warning>
@@ -54,7 +54,7 @@ Example configuration for `PCI compliant` assistant is:
   "pciEnabled": true
 }
 ```
-Note: The default value for pciEnabled is false. Activating this setting aligns your assistant with PCI DSS standards by ensuring data is securely transmitted without being stored on Vapi’s systems.
+Note: The default value for `pciEnabled` is false. Activating this setting aligns your assistant with PCI DSS standards by ensuring data is securely transmitted without being stored on Vapi’s systems.
 
 ## Can PCI be used alongside HIPAA?
 Yes, you can enable both HIPAA and PCI compliance for an assistant. In this case, the restrictions from both compliances will apply, meaning that no recordings or transcripts will be stored or transmitted, even if you have specified cloud storage endpoints or webhooks for storing transcripts.
@@ -65,7 +65,7 @@ Yes, you can enable both HIPAA and PCI compliance for an assistant. In this case
 
 A: Enabling PCI compliance does not degrade the quality of the voice assistant services.
 However, it restricts you to use only the PCI-compliant endpoints, while limiting access to certain features, such as reviewing call logs, recordings or transcriptions, within the Vapi platform.
-If the cloud storage endpoints are enabled, you can review the audio recordings in your own storage environment. The recordings follow naming convention:
+If any cloud storage endpoints are provided, you can review the audio recordings in your own storage environment. The recordings follow naming convention:
 
 ```
 call_ID-recording.wav