Apparatus for recording multi-party Internet Protocol (IP) sessions at a branch, the apparatus comprising: a data capturer, deployed on a device in a local network of the branch, configured to capture at least one data packet of a multi-party IP session involving the branch; and a recorder, deployed on the device, associated with the data capturer, and configured to receive at least one of the captured data packets from the data capturer and to record the received data packets.