How Long to Retain Sales Call Recordings and Which Clock Applies

TL;DR: No federal rule names a retention period for sales call recordings as such. Two rules set periods for specific records, and a recording picks up a clock only when it is one of those records. The FTC Telemarketing Sales Rule, in the recordkeeping section of 16 CFR Part 310, makes sellers and telemarketers keep five categories of record for 24 months from the date the record is produced, and one of those categories is every record of express informed consent or express agreement, which is exactly where a recorded authorization lands. The FCC rule at 47 CFR 64.1200(d)(6) makes a do-not-call request stay honored for 5 years from the time the request is made, and 64.1200(a)(7)(iii) makes you keep records establishing abandonment compliance without naming any period at all. Pulling the other way, the California Attorney General gives a business 45 calendar days to respond to a deletion request, extendable by another 45 with notice, and a maximum of 15 business days on an opt-out, though the right to delete gives way when the business has to comply with a legal obligation or defend a legal claim. So the number you need is not a duration. It is a lookup. For one named person, which recordings exist, what category each one falls in, and which clock it is on. Build the schedule per category, name the trigger that starts the clock, take the longest floor that applies, write the legal hold down before you need it, and test that deletion actually reaches transcripts, summaries, CRM notes, exports and backups. Unlimited storage is a storage feature. It is not a retention policy.

Someone asks how long you keep sales call recordings. The honest first answer is a question back. Which recording, and what is on it?

Does that sound like dodging? It is not. A recording of a rep leaving a voicemail and a recording of a customer verbally agreeing to be billed are the same file type sitting in the same folder under the same naming convention, and they are not on the same clock. One is coaching material. The other may be the only record you hold of an authorization, and a federal rule has an opinion about how long it survives.

Most retention advice skips that distinction and lands on a round number instead. Ninety days. A year. Seven years, because somebody once heard it about tax records. Pick a number that way and you get the worst of both outcomes at once, because you end up holding months of coaching audio nobody will ever open while deleting the one file that proves a customer said yes.

Why there is no single answer to how long to retain sales call recordings

Start with what a recording actually is inside your operation, because it is not one thing and treating it as one thing is the root of the problem. Across a normal week an outbound team produces coaching audio, quality review samples, calls that turn into complaints months later, calls where a customer agreed to terms out loud, and calls where the person on the other end asked never to be called again.

That is five different records sharing a file format.

So which one is the regulator looking at? The rules follow the content, not the container. A regulator does not care that the audio happens to live in your calling platform, it cares whether the thing you are holding is a record it told you to keep or personal information a consumer can ask you to delete. Same file. Different duty.

There is a second reason the single number fails, and it is the one teams collapse constantly. Retention and consent are separate questions. Does having permission to record tell you how long to keep the file? No. Does a tidy deletion schedule make the recording lawful in the first place? Also no. Answer both, separately, and in that order.

The federal rules that set a floor for sales call recordings

Two federal rules govern most US outbound sales calling, and both of them talk about records rather than about audio. Neither one sets a retention period for call recordings as a category. Both can still put a hard floor under a specific recording, depending entirely on what is on it.

Read them as floors rather than as answers, because a floor tells you the minimum you have to hold and says nothing whatsoever about the maximum you should.

The Telemarketing Sales Rule runs 24 months from the record, not the call

The FTC’s Telemarketing Sales Rule is specific about this. Under the recordkeeping section of 16 CFR Part 310, any seller or telemarketer must keep, for a period of 24 months from the date the record is produced, five categories of material. Advertising, scripts and promotional materials. Prize recipients, where the prize is represented to be worth $25 or more. Customer name and last known address, what they bought, the date it shipped and the amount paid. Employee details for anyone directly involved in telephone sales, including any fictitious name, which must be traceable to only one specific employee. And all verifiable authorizations or records of express informed consent or express agreement required under the Rule.

That last category is the one that reaches your audio. If the recording is the record of express informed consent, it inherits the 24-month clock.

Now read the trigger again, because this is where schedules go wrong quietly. When does the clock start? From the date the record is produced. Not the date of the sale, not the date the deal closed, and not the date the account churned. A team that starts counting at close will under-retain on every call that happened before it, which on a long cycle is most of them.

Two more details in the same section change how you operate. The Rule says you may keep the records in any form, and in the same manner, format or place you keep them in the ordinary course of business, so no particular archive product is mandated and your existing systems are probably fine. Failure to keep them is itself a violation. And the section addresses who carries the duty, which matters the moment you outsource, because a seller and a telemarketer may allocate recordkeeping between themselves by written agreement, but where that agreement is unclear or absent the seller is responsible for paragraphs (a)(1) through (a)(3) and (a)(5) of that section while the telemarketer is responsible for paragraph (a)(4).

Using an outsourced calling vendor? Then that allocation clause is worth reading with counsel before anyone assumes the vendor is holding something on your behalf.

Do-not-call requests run on a five-year clock

Which rule carries the longest common clock? The FCC one. Under 47 CFR 64.1200(d)(6), anyone making telemarketing calls must maintain a record of a consumer’s request not to receive further calls, and that do-not-call request must be honored for 5 years from the time the request is made.

Note carefully what carries the five-year duty. Is it the audio? No. It is the request.

Why does that distinction matter operationally? Because if a prospect says “take me off your list” on a recorded call, the thing that has to survive five years is the suppression record, and that record belongs in your dialer and your CRM where it can actually block a future dial, not inside an audio file somebody would have to find and listen to first. A team that treats the recording as its do-not-call system has quietly built a five-year obligation on top of a file it may delete in ninety days.

So separate them on purpose. The call produces the request, the request becomes a durable suppression record with its own retention, and the audio is then free to run on its own schedule.

Abandonment records carry a duty with no number

The same FCC section caps abandoned telemarketing calls at three percent of calls answered live by a person, measured over a 30-day period for a single calling campaign. Then 64.1200(a)(7)(iii) adds one short sentence that is easy to read past. The seller or telemarketer must maintain records establishing compliance with that limit.

How long? It names no period. None.

An open-ended duty is not a license to keep every recording forever, and it is not permission to keep nothing either. What it means in practice is that your dialer’s campaign-level statistics are the records doing that job, not your audio library, which was never structured to prove a rate in the first place. So ask your calling platform what it retains at campaign level and for how long. That is a procurement question most teams never think to ask until someone needs the answer.

The deletion request that sets a ceiling

Floors are only half the problem. What happens when somebody asks you to delete?

Under the California Consumer Privacy Act, as described by the California Attorney General, a consumer may request that a business delete personal information it collected from them and tell its service providers to do the same. The response clock is short. A business must respond to a request to delete within 45 calendar days, and it may extend that by another 45 days, 90 days in total, if it notifies the consumer. An opt-out request moves faster still, with a maximum of 15 business days from the date it is received.

Read that as a systems requirement rather than a legal footnote, because inside 45 days you have to locate every recording tied to one named person, across every system that holds a copy, and then act on all of them. What if your recordings are indexed by rep and by date but not by the person on the other end of the call? Then you cannot do it. Not slowly. At all.

So what does that look like as a test? Pick one customer, ask the team to list every recording, transcript and summary that involves that person, and time how long the whole exercise takes.

The right to delete also has exceptions, and this is the point where the floor and the ceiling stop contradicting each other. The Attorney General lists common reasons a business may keep the information, including completing a transaction, certain internal uses compatible with the context in which the information was provided, and complying with legal obligations, exercising legal claims or rights, or defending legal claims. The underlying statutory exceptions sit in the California Civil Code, and the Attorney General names them directly on the same page.

Here is the part teams miss. You only get the benefit of that exception if you can say which obligation applies to which recording. Is “we keep everything because storage is included” a legal obligation? It is not, and it will not survive the question. A documented schedule that ties a category of recording to a named rule will.

California is the example here because its regulator publishes plainly and in public. It is not the only state privacy law, and sector regulators in financial services, insurance and healthcare layer their own recordkeeping rules on top of everything above. Those have to be checked against current primary sources with qualified counsel, for your entity and your activity, rather than inferred from a general sales policy or borrowed from another company’s.

How to decide how long to retain sales call recordings

You now have the shape of the answer. A floor from any rule that applies, a ceiling from any deletion right that applies, and a documented reason sitting in between. So how do you turn that into a schedule an administrator can actually configure?

Name the purpose for every category of call

Write down why each category of call gets recorded. “It might be useful someday” is not a purpose. It cannot be defended to a regulator and it cannot be turned into a lifecycle rule in any system you own, which is the practical tell that it was never real to begin with.

Usable purposes are narrow. Ramping a new rep, scoring a quality sample, resolving a billing dispute, or preserving an authorization that a rule requires you to hold. And if one recording serves several of those at once, pick the single obligation that controls its lifecycle and write that choice down, because otherwise retention ratchets upward every time a new team finds another possible use for the same file.

Pick the trigger that starts the clock

What actually starts the clock? Duration without a trigger is not a policy. The trigger is the event that starts the counting, and a vague one makes deletion impossible to automate and impossible to audit afterwards.

The candidates are easy enough to name. Date of the call, or date the record was produced, which is the trigger the Telemarketing Sales Rule actually uses. Completion of the quality review, close of the opportunity, end of the customer relationship, or resolution of a complaint. Choose one per category and write it next to the duration, because the pair is the actual rule and either half on its own is decoration.

Take the longest floor that applies, then stop

For each category, list the obligations that reach it, take the longest one, and set the period there. Then stop. That instinct to add “plus a buffer, just in case” is exactly how a 24-month record quietly becomes a seven-year archive with no owner and no stated reason.

Is longer more careful? No, it is more exposure. Every extra month is more personal information to secure, more material to produce when somebody asks for it, and more to find and delete when a request lands inside a 45-day window.

Write the legal hold down before you need it

Routine deletion has to pause when a recording becomes relevant to litigation, an investigation, a complaint or an audit. That is a foreseeable event, so build the process while nothing is actually on fire.

Name who can approve a hold, define how affected records are identified and where they are held, and define when the hold is released, because an unreleased hold is precisely how “temporary” preservation turns into permanent retention nobody ever decided on. Keep all of it in a controlled workflow with an audit trail. Is a manager downloading calls into a personal folder a legal hold? No. It is an uncontrolled copy with no owner and no end date, and it will still be sitting there when the deletion request arrives.

Automate deletion, then test that it worked

Configure lifecycle rules in every system that supports them rather than relying on a person to remember. People do not remember.

Then test it, which is the step almost everyone skips. Pick a recording that should have aged out already and go looking for it, in the calling platform, in the CRM, in the data warehouse, in the exports, and in the collaboration tool where somebody once shared a clip. Deletion that was configured and never verified is an assumption, and it is the exact assumption that fails under a deletion request.

Sales call recording retention by use case

So what belongs in which bucket? The categories below are planning buckets, not prescribed periods. Durations still have to be approved for your entity and your obligations. What the buckets do is stop one number from being applied to five different kinds of record.

• Coaching audio. Keep it through the coaching cycle or calibration session that uses it, then let it go. If a particular call is genuinely worth keeping as a teaching example, that is a separate named purpose with its own period, not a reason to retain the whole month around it. Most teams analyze far fewer calls than they record, which is itself an argument for a shorter default.
• Quality review samples. Keep the sample long enough to finish scoring, calibration and any internal challenge of a score. If you need the full call population rather than a sample, document why.
• Complaint and dispute handling. Tie the period to the documented complaint lifecycle and to any contractual or limitation requirement that applies, rather than to the call date.
• Deal documentation. Decide honestly whether the audio is still needed once the approved details are in the CRM, because often a structured CRM note carries the workflow and the recording is redundant. That is a governance decision, not a rep’s decision.
• Authorizations and express agreements. This is the category with a federal floor under it. Where the recording is the record of express informed consent or express agreement under the Telemarketing Sales Rule, 24 months from the date the record is produced is the minimum, not the target.
• Do-not-call requests. The request itself must be honored for 5 years. Make the suppression record the durable artifact and do not rely on the audio to carry it.

A commonly repeated figure such as 90 or 180 days is a workflow default somebody once chose, not a legal standard. It may well be right for your coaching bucket. It is not an answer for the whole library.

Transcripts, AI summaries, and the copies nobody tracks

Does deleting the audio delete what you made from it? It does not, and this is where most retention schedules quietly fail.

One call can produce a transcript, a clip, an AI summary, a sentiment label, a coaching score, a CRM note, a task, a draft email, an export and an analytics row. The copies spread further than that. Backups, the data warehouse, a spreadsheet somebody built for a QBR, and a clip pasted into a chat thread eleven months ago that nobody has thought about since.

So inventory the derived records separately, and give each one a purpose, an owner, a trigger, an access rule and a deletion method of its own. A transcript is not a lesser object because it is smaller. Does it carry the same personal or regulated information the audio carried? Usually yes, which means it does not automatically earn a longer period just because text is cheap to store. If anything the reverse is true, since text is searchable and audio is not.

Then define how deletion propagates between systems. If the recording leaves the calling platform and the transcript stays in the CRM, the information has not been deleted from your systems at all. It has just been moved out of the place you were looking.

Recording consent is a separate question from retention

Retention assumes something it should not assume, namely that the recording was lawful to make in the first place. Confirm that separately, because the consent rules turn on where the parties to the call are located rather than on where your company is headquartered.

Some states require that all parties consent before a call is recorded, and the workflow has to account for outbound calls, inbound calls, conference calls and transfers rather than assuming one path covers every situation. The specifics and the state-by-state distinctions are covered in our guide to the laws governing call recordings. Treat that as the upstream question and this article as the downstream one.

Worth saying plainly. A valid retention schedule does not cure an unlawful recording, and valid consent does not justify keeping the file forever.

What a sales call recording retention policy has to answer

What does a policy that says recordings are kept “as needed” actually decide? Nothing at all. A usable one answers operational questions, in writing, for every category you identified.

• Scope. Which teams, call types, jurisdictions and systems are covered.
• Purpose. Why this category is recorded and used.
• Owner. Who approves the schedule and who approves exceptions.
• Trigger. The event that starts the clock.
• Duration. The approved period, and the obligation it came from.
• Derived records. How transcripts, summaries, CRM notes, exports and backups are treated.
• Access. Which roles can listen, download, share or delete.
• Deletion method. How deletion happens, and how that is verified against the record.
• Exceptions. How a legal hold is approved, scoped and released.
• Review. When the schedule is revisited, and what forces an early review.

That last line has a practical trigger worth naming out loud. Revisit the schedule whenever you enter a new jurisdiction, add a tool that records or transcribes, or start capturing a type of call you were not capturing before. New tool, new copies, new clock.

One note on tooling, because it quietly sets the default you inherit. Kixie records inbound and outbound calls on a Kixie number automatically, on any device, and logs calls, texts, outcomes and recordings into the connected CRM, with call recording storage included. Included storage is a genuine convenience, and it quietly removes the cost pressure that used to force these decisions for you before anybody wrote a policy. That is exactly the point. Nothing ages out on its own any more, so the schedule has to be a decision somebody makes rather than a side effect of a storage bill.

Sales call recording retention FAQs

How many years are sales call recordings required to be retained?

There is no general number for recordings as a category. Where the Telemarketing Sales Rule applies and the recording is one of the records listed in the recordkeeping section of 16 CFR Part 310, the period is 24 months from the date the record is produced. A do-not-call request under 47 CFR 64.1200(d)(6) must be honored for 5 years from the time it is made. Sector regulators and state laws can impose different periods, so confirm your own with qualified counsel.

Is 90 days long enough to retain sales call recordings?

For a coaching or quality review bucket, often yes. For a recording that is the record of an express agreement under the Telemarketing Sales Rule, no, because that category carries a 24-month floor beneath it. The honest answer depends on which bucket the recording sits in, which is why the buckets have to exist before the number does.

Can sales call recordings be kept indefinitely with consent?

Consent to record is not consent to retain without limit. Privacy rules generally expect information to be kept only as long as there is a documented purpose for it, and a consumer can still make a deletion request you have to answer inside 45 calendar days. Indefinite retention also means indefinite exposure, which is a security and litigation cost rather than a saving.

Should transcripts follow the same retention period as recordings?

Evaluate them separately, but start from the assumption that they carry the same sensitivity as the audio. A transcript can contain substantially the same personal or regulated information. If you set a different period for it, write down the rationale rather than defaulting to a longer one because text is cheap to store.

When should recording deletion be suspended?

When the records are relevant to an authorized legal hold, litigation, an investigation, a complaint or an audit. Scope the hold, record who approved it, and release it when the matter closes. An indefinite hold that nobody owns is just retention under a different name.

This article describes recordkeeping rules in general terms and is not legal advice. Confirm the obligations that apply to your entity and your calling activity with qualified counsel. Reviewed October 11, 2026.

Sources

• Federal Trade Commission, Telemarketing Sales Rule, recordkeeping requirements, 16 CFR 310.5(a), 24-month retention and the five record categories. https://www.govinfo.gov/content/pkg/CFR-2024-title16-vol1/xml/CFR-2024-title16-vol1-sec310-5.xml
• Federal Communications Commission, delivery restrictions on telephone solicitations, 47 CFR 64.1200, including paragraph (d)(6) on do-not-call records and paragraph (a)(7)(iii) on abandonment records. https://www.govinfo.gov/content/pkg/CFR-2024-title47-vol3/xml/CFR-2024-title47-vol3-sec64-1200.xml
• California Office of the Attorney General, California Consumer Privacy Act frequently asked questions, requests to delete and requests to opt out, including the exceptions at Civil Code sections 1798.105(d) and 1798.145. https://oag.ca.gov/privacy/ccpa

Sources verified by the Kixie Research Team on October 11, 2026.