You can limit access to call recordings in the employee role settings.
The Can see calls in the Work Orders block allows access to call recordings in the work order’s event feed.
The Can see calls in the Contacts block allows access to call recordings in the contact profile on the Calls tab.
The Calls allows access to all call recordings on the Calls page.