If these are company-owned phones, the cleanest route is usually policy + enterprise tooling, not “spy apps.” In my last workplace, we handled call reporting through our carrier’s business portal (CDRs) and an MDM setup (Intune/Jamf/Workspace ONE) so logs were centralized, permissioned, and easy to export for audits. The big thing is employee notice and written consent, because trust matters in security work. You also want role-based access and retention rules so data doesn’t sprawl. I’d start with your carrier and legal team first. I even skim airtalk wireless reviews once while comparing plans, and support/reporting options really vary.