3CX Version 20 Expert Guide

3CX Call Recording and Conversation Recording: Complete Setup, Storage, Security and Retrieval Guide

Learn how to record business calls automatically or on demand, store them securely on an SSD, external hard disk, NAS or supported remote storage, protect them with role based permissions, and retrieve the exact conversation needed for quality assurance, dispute resolution or compliance.

3CX Authorized Reseller PBX and Call Center On Premise and Cloud Pakistan Based Support
Automatic or manualChoose the control model per user and policy
Local or remoteSSD, mounted disk, SMB NAS, SFTP, S3 and more
Granular permissionsSeparate viewing, deletion and start or stop rights
Targeted retrievalFind calls by date, party, user and call data

Quick answer

What is 3CX call recording?

3CX call recording is a built in PBX and call center capability that captures selected telephone conversations and makes authorized recordings available for playback, download, archiving and, when configured, transcription. An administrator can record all calls or external calls for selected users, while authorized users may also be allowed to start and stop recording during a live call. Access, deletion and recording control are governed separately through 3CX roles and user permissions.

A useful recording system is more than a red button. It needs a written policy, sufficient storage, restricted access, reliable retrieval and a retention process that matches the organisation's legal and compliance obligations. This guide explains the complete workflow for a dedicated 3CX Version 20 deployment.

Recording control

How Can Conversations Be Recorded in 3CX?

Choose the method that matches the business rule. For compliance sensitive teams, automatic recording with user controls disabled is usually more dependable than relying on agents to press a button.

A

Record All Calls

Configure the selected user so that all supported calls are recorded automatically. This is appropriate where the policy covers both internal and external conversations.

Policy driven
E

Record External Calls

Record inbound and outbound external conversations while excluding ordinary internal extension calls. This can reduce storage use and protect internal privacy.

Customer facing
M

Manual Start and Stop

Grant an authorized user permission to begin or stop recording during a live call. Use this only when selective capture is acceptable under the organisation's policy.

Permission controlled
Q

Queue Recording Choice

In a call queue, the Advanced settings can present a caller option to opt in or opt out of recording. This supports consent based call flows where applicable.

Caller choice
C

Conference Recording

An authorized participant can record a supported conference. Confirm permissions and test the exact desktop, web or phone mode used before relying on it operationally.

Meetings
T

Recording Plus Transcription

Where the licensed edition and transcription integration support it, audio can be transcribed to make review faster. Treat transcripts as an aid and verify important wording against the audio.

Optional AI

Storage architecture

Where Can 3CX Recordings Be Stored?

3CX first needs a writable recording location. With remote storage enabled, recordings can be moved from temporary local storage into a supported archive destination according to the configured schedule.

MethodHow it worksBest useImportant control
PBX server SSDRecordings remain on a local path on the machine or virtual machine hosting 3CX.Smaller deployments and fast local playback.Monitor capacity, set a recording quota and keep the path outside the 3CX installation folders.
External hard diskA properly mounted local disk can be used as a writable recording path on a self managed server.On premise systems needing more economical capacity.Use a permanent mount, correct ownership and permissions, health monitoring and a separate backup. A removable USB disk is not an enterprise archive by itself.
NAS through SMB3CX uses an authenticated SMB share as remote storage and archives recordings from the temporary local path.Central on premises retention using Synology, QNAP, Windows file server or another compatible SMB NAS.Create a dedicated service account and share, restrict access, enable NAS snapshots and test restore or playback.
SFTP or secured FTPRecordings are archived to a remote file server using SFTP or a supported FTP scheme such as FTPS or FTPES.Off server storage managed by the organisation or provider.Prefer encrypted transport. Use a restricted account and rotate credentials or keys.
AWS S3 or Google Cloud3CX connects to a configured bucket and moves selected archived data to cloud object storage.Scalable offsite retention and geographically resilient designs.Apply least privilege credentials, encryption, lifecycle rules and, where required, object lock under a separately validated compliance design.
Microsoft 365 or SharePointA supported Microsoft account can be configured as remote file storage for archived data.Organisations already governed through Microsoft 365.Confirm tenant capacity, retention, access and service account policies before production use.
Archive is not automatically a second copy. The official 3CX workflow moves an archived recording from local storage to remote storage. Therefore, a NAS or cloud archive should still have its own backup, snapshot, replication or immutable retention controls if the organisation requires protection against deletion, ransomware or storage failure.
Disk protection matters. 3CX states that recordings are not written when Disk Protect Mode is active. The condition is triggered when free disk space falls below 500 MB, and the administrator is notified. Capacity alerts should be tested before the system goes live.

Before configuration

Plan the Recording Policy and Capacity First

  • List the users, departments, queues and call types that must be recorded.
  • Decide whether internal calls are included or only external conversations.
  • Confirm the lawful basis, consent or notification requirement in every relevant jurisdiction.
  • Define who may listen, download, delete, start or stop a recording.
  • Define the retention period and the approved deletion process.
  • Measure actual recording size during a pilot, then calculate peak daily and annual capacity with headroom.
  • Synchronise PBX time and confirm the correct time zone so timestamps are dependable.
  • Decide whether the archive needs encryption, snapshots, replication or immutable retention.
  • Document the process for legal hold, investigation export and chain of custody.
  • Test playback and retrieval using the same roles that will operate the production system.

Administrator walkthrough

Step by Step: Configure 3CX Call Recording

Menu labels can change slightly between Version 20 updates and licensed editions. The workflow below follows the current 3CX documentation and identifies the function to look for if a label moves.

1

Sign In With the Correct Administrative Role

Open the 3CX Web Client, select Admin, and sign in as the authorised System Owner or another role permitted to configure the relevant users and storage. Do not use a shared administrator identity for routine operation.

2

Confirm Time, Email and System Health

Verify the PBX time zone, time synchronisation, administrator email delivery and available disk space. Generate or review an Event Log notification so storage warnings will reach the responsible person.

3

Prepare the Local Recording Path

For local SSD or external disk storage, create or select a dedicated folder outside the 3CX installation directory. On Linux, the path must be owned by the phonesystem user and writable by the PBX. If using an external disk, configure a persistent mount and verify that it is present after reboot.

4

Configure Local Storage Limits

Open Admin → System → Storage. Set the temporary or local recording location, the recording quota in GB and the policy for deleting temporary recordings older than the selected number of days. Size the quota from measured call volume, not guesswork.

5

Enable Remote Storage When Required

In Admin → System → Storage, enable Remote Data Storage and Archive. Select the supported destination: SMB, SFTP, FTP or secured FTP, Google Storage, AWS S3, or Microsoft 365 or SharePoint. Enter the path and credentials, connect, and select the correct root folder.

6

Enable Recording Archiving

Within Storage, enable Recordings among the data to archive and specify when recordings should be moved. Save the configuration. Remember that the temporary recording location is used until the archive operation completes.

7

Choose the Recording Mode for Each User

Go to Admin → Users, open a user and select Options. Under the call recording setting choose Off, External calls only or All calls. Repeat for each user covered by the policy.

  • Use All calls only when internal call capture is required.
  • Use External calls only for customer facing teams when internal privacy should be preserved.
  • Do not leave recording Off for a user whose calls are in scope.
8

Set Viewing, Deletion and Start or Stop Rights

In the same user's Options, review these independent controls:

  • Show call recording: permits the recording to be accessible to the appropriate department managers, owners and System Owners.
  • Allow deletion of recordings: permits that user to delete recordings. Leave it cleared for ordinary agents and most supervisors.
  • Can start and stop recordings: permits live recording control. Leave it cleared when automatic recording must not be interrupted by the user.
  • Call Recording Notification: emails the user a recording link and, where enabled, its transcription.
9

Configure the Call Queue and Caller Choice

For a call center, open Admin → Call Handling, create or edit the required Queue, then check the Queue's Advanced settings. Configure the caller's recording option if your consent model requires an opt in or opt out choice. Confirm that all agents in scope also have the correct user recording mode and permissions.

10

Add an Appropriate Recording Notice

If required by law or policy, place a clear notice in the IVR, queue greeting or agent script before recording begins. For example: “This call may be recorded for quality, training and compliance purposes.” Have local legal or compliance advisers approve the wording and process.

11

Run a Controlled Test Matrix

Test inbound, outbound and internal calls as applicable. Include transferred calls, queued calls, calls handled through desktop and mobile apps, a desk phone, conferences and any failover path. Confirm audio for both parties, timestamp, parties, duration, storage destination and permissions.

12

Test Archive, Retrieval and Recovery

Allow at least one test recording to move to remote storage. Retrieve and play it through 3CX using the intended supervisor role. Then test the separate NAS, snapshot or cloud recovery procedure. A configuration should not be considered complete until a target recording can be found and recovered.

Protection model

How 3CX Prevents Unauthorized Access, Deletion or Recording Control

3CX uses role based access and separate per user controls. This lets an organisation give technical administration rights without automatically exposing sensitive conversation content.

R

Role Based Access

System wide and department roles determine scope. A System Administrator can manage the system but, by design, cannot view recordings or reports. A System Owner can view them. Department Managers can see recordings within their authorised scope.

D

Deletion Is a Separate Right

Clear Allow deletion of recordings for users who must not delete audio. Reserve deletion for a small number of named custodians working under an approved retention process.

S

Start or Stop Is a Separate Right

Clear Can start and stop recordings when automatic recording must continue without agent intervention. The recording mode remains controlled by the administrator.

V

Visibility Is Deliberate

The Show call recording setting controls whether a user's recordings are exposed to authorised managers and owners. Department membership limits the operational scope of department roles.

A

Administrative Audit Trail

3CX provides an Audit Log for actions by administrators and department managers. Current Version 20 updates also include improved recording permission management and auditing of recording downloads.

O

Storage Layer Controls

3CX permissions do not stop a server, hypervisor, NAS or cloud administrator from acting directly on stored files. Protect that layer with least privilege accounts, MFA where supported, encryption, snapshots, immutable retention and monitored backups.

Compliance limitation: 3CX access controls reduce unauthorized actions inside the application, but ordinary recording storage is not automatically a legally immutable archive. If regulations require write once retention, legal hold or provable chain of custody, design and validate those controls at the storage and governance layers.

Investigation workflow

Step by Step: Find and Retrieve a Specific 3CX Recording

Start with the narrowest known facts: date and time window, incoming or outgoing number, extension or agent, queue or department, and approximate duration. Available filters and labels can vary slightly by Version 20 update and role.

1

Record the Search Criteria

Before opening 3CX, note the known time window, caller ID or dialled number, direction, agent extension, queue, DID, trunk, call status and approximate talk time. For compliance retrieval, also note the case or request reference.

2

Sign In Using a Named Authorized Account

Use a user with access to the required department or system scope. A System Administrator alone cannot view recordings. Use a System Owner or an appropriately scoped Manager, Owner or other permitted role.

3

Open the Recordings View

In the 3CX Web Client or Windows Softphone, open Recordings. In the Windows Softphone this is available from More → Recordings. Depending on the current build and role, the administrative recording view may appear with reporting functions.

4

Select My Recordings or the Authorized Wider Scope

Choose My Recordings for the signed in user's calls or All Recordings when the assigned role and department permissions allow wider access.

5

Apply the Date and Party Filters

Set a narrow date and time range, then search or filter using the external number, caller or callee, agent or extension, and other fields offered by the current build. If the result is not found, widen the time window carefully and check the PBX time zone.

6

Correlate With Call Reports When Necessary

Open Admin → Reports and use the inbound or outbound call report. These reports can provide date and time, caller and callee, trunk, DID for incoming calls, answered status, ringing time, talking time, total duration, answering user and recording URL where available. Use these details to identify the exact call.

7

Preview and Confirm Both Parties

Play the recording inside 3CX. Confirm the caller, called party, topic, timestamp and duration against the case criteria. Do not rely only on a filename or similar telephone number.

8

Download Only If Required

If policy permits, download the selected recording. Store the exported copy only in the approved case folder or evidence repository. Do not distribute it through personal email, consumer messaging or unapproved storage.

9

Document the Retrieval

Record who retrieved it, when, why, the source call details, where the export was stored and to whom it was released. Preserve the original in 3CX or its archive under the retention and legal hold policy.

Details Typically Available for Identification

Date and Time

Timestamp in the PBX or department time context.

Call Parties

Caller, callee, external number and user or extension.

Duration

Talk time and, in reports, ringing and total duration.

Routing Context

Direction, status, trunk, incoming DID and answering user where reported.

Governance

Compliance and Security Checklist

Inside 3CX

  • Assign System Owner rights only to named, trusted custodians.
  • Use department roles to limit supervisors to their own teams.
  • Disable deletion for agents and routine supervisors.
  • Disable start and stop control where recording is mandatory.
  • Review Audit Logs and recording download activity regularly.
  • Configure quotas, low disk alerts and archive schedules.
  • Keep 3CX and the operating system on supported updates.

Outside 3CX

  • Encrypt server, backup and NAS storage where appropriate.
  • Use dedicated service identities with minimum required access.
  • Protect administrative access with MFA wherever supported.
  • Keep a separate backup, snapshot or replicated copy.
  • Use immutable storage if the governing rule requires it.
  • Test restoration and evidence export periodically.
  • Document consent, retention, legal hold and authorized disclosure.
Important legal note: Recording laws differ by country, sector and call destination. Some situations require one party consent, others require all party consent or a clear notice. This technical guide is not legal advice. Obtain written guidance from your legal and compliance advisers before enabling production recording.

Business value

Benefits and Use Cases of Conversation Recording

Q

Quality Assurance

Review real customer interactions, score service quality and identify recurring coaching needs.

T

Agent Training

Use approved examples to teach listening, tone, product knowledge, escalation and accurate scripting.

D

Dispute Resolution

Verify what was said, promised, ordered or authorized instead of relying on conflicting recollections.

C

Compliance Review

Retain relevant conversations and retrieve them for internal reviews, auditors or regulators under an approved process.

S

Sales Improvement

Identify effective discovery questions, objections, missed opportunities and successful closing behaviour.

P

Process Evidence

Confirm service requests, delivery instructions, bookings, support actions and verbal customer requirements.

Which Business Sectors Use 3CX Call Recording?

Banking and Finance

Treasury, dealing, customer service, collections and complaint handling, subject to applicable regulatory controls.

Call Centers and BPO

Quality scoring, coaching, client reporting, escalation and service level improvement.

Healthcare

Appointment, helpline and administrative calls, with strict privacy and authorized access.

Insurance

Policy enquiries, claims notifications, disclosures and complaint investigations.

Legal and Professional

Client intake, service instructions and documented consultations where recording is lawful.

Retail and Ecommerce

Order verification, delivery instructions, returns, refunds and customer complaints.

Real Estate

Lead qualification, property enquiries, viewing arrangements and follow up commitments.

Education

Admissions, fee enquiries, student support and parent communication under the institution's policy.

Hospitality and Travel

Reservations, itinerary changes, special requests and service recovery.

Logistics

Pickup instructions, shipment status, proof of communication and exception handling.

Manufacturing

Dealer support, order coordination, technical helpdesk and after sales service.

Government and Utilities

Citizen services, complaints and accountable helpdesk operations under approved rules.

Frequently asked questions

3CX Call Recording FAQ

Does 3CX have built in call recording?
Yes. Supported 3CX editions provide built in call recording and management without requiring a separate recorder for standard PBX and call center use. Licensing and feature availability should be confirmed for the edition and Version 20 update being deployed.
Can 3CX record every call automatically?
Yes. An administrator can configure a user to record all calls or external calls only. If recording must not be interrupted, clear the user's permission to start and stop recordings.
Can 3CX store recordings on an SSD or external hard disk?
Yes, on a self managed system a dedicated writable local path can be placed on the PBX SSD or a properly mounted external disk. Keep it outside the 3CX installation folders, give the PBX account correct permissions, monitor capacity and maintain a separate backup.
Can 3CX archive recordings to a NAS?
Yes. Enable Remote Data Storage and Archive, select SMB, and configure the NAS path and credentials. 3CX temporarily stores the recording locally and then moves it to the remote archive according to the configured schedule.
Can an agent delete a 3CX call recording?
Only if the relevant permission has been granted. Clear “Allow deletion of recordings” for agents and other users who must not delete audio. Also restrict direct access to the server, NAS and cloud storage.
Can an agent stop mandatory recording?
Not through the normal 3CX recording control if “Can start and stop recordings” is cleared for that user and automatic recording is configured. Administrators should test the deployed apps, desk phones and transfer scenarios before go live.
How do I find one specific recorded call?
Open Recordings with an authorized account, select the permitted scope, and narrow the results using the date and time, external number, user or extension and other available filters. Correlate the result with inbound or outbound call reports for trunk, DID, status, duration, answering user and recording URL details where available.
What happens when the 3CX recording disk is full?
A configured recording quota can stop further recording when reached. 3CX also states that recordings are not written when Disk Protect Mode is enabled, which is triggered at less than 500 MB of free disk space. Configure and test alerts before production use.
Are archived 3CX recordings automatically immutable?
No. Standard archiving moves files to remote storage but does not by itself prove immutability or regulatory compliance. If required, add and validate storage controls such as snapshots, restricted deletion, object lock, retention policies, legal hold and monitored backups.
Is it legal to record business calls?
The answer depends on the countries involved, the sector, the purpose and whether one party or all parties must consent. Use an approved announcement or consent flow where required and obtain advice from qualified legal and compliance professionals.

Designed and supported in Pakistan

Need a Secure 3CX Call Recording Solution?

TekkPak Technologies is a 3CX Authorized Reseller. We can design and configure an on premise or cloud based 3CX PBX and Call Center with recording policies, storage sizing, NAS or remote archiving, role based access, retrieval testing and administrator handover.

Technical references

Official Sources Used in This Guide

3CX menus and licensing can change with updates. Confirm the current feature list and test the final production build before relying on any control for legal or regulatory compliance.


Discover more from TekkPak Technologies

Subscribe to get the latest posts sent to your email.