Zoom AI Companion
zoom.com
Automated, point-in-time. Not independently reviewed or approved by TRUSTYCYBER unless expressly stated.
- A no-training commitment was found: confirm its scope in writing
- Data retention window not stated
See Before you sign, with what to ask for ↓
Scanned Nov 1, 2026 · Public evidence · Point-in-time
Higher scores indicate stronger, independently supported AI assurance, governance, AI systems, models, data, supply chain and third-party assurance evidence. The score and the decision are related but different: a well-scored vendor can still carry conditions.
Before you sign
Why it matters: The sources include a no-training statement ("Zoom states it does not use audio, video, chat, screen sharing, attachments or other communications-like Customer Content to train Zoom's or third-party AI models.") but do not settle the question for every model, plan and data type in scope.
What to ask for: Confirm in writing that the no-training commitment covers every model, plan and data type you will use, including any opt-in sharing or feedback.
“Zoom does not use any of your audio, video, chat, screen sharing, attachments or other communications-like Customer Content (such as poll results, whiteboard and reactions) to train Zoom’s or its third-party artificial intelligence models.”
“Product Research and Development: If authorized by any applicable settings, to develop, test, and improve Zoom products and services, and to troubleshoot products and services.”
Why it matters: The public sources scanned do not give a retention period for customer data or prompts/outputs.
What to ask for: Get retention windows, in days, in writing.
“We retain personal data for as long as required to engage in the uses described in this Privacy Statement, unless a longer retention period is required by applicable law.”
“This data will be deleted when no longer necessary, adequate, or relevant to offering the features or when two years have passed since your last interaction with Zoom, whichever occurs first.”
Australian Government checksdirections checked Nov 1, 2026
No vendor-specific PSPF direction names this vendor or product (checked 2026-11-01).
Independent Cloud Security Assessment against the ACSC ISM up to PROTECTED; scope includes Zoom AI Companion and AI Expert Assist, AI Notetaker, AI Studio / Custom AI Companion, Meetings, Webinars, Phone, Team Chat, Contact Center, Events, Rooms and other listed products. Assessor and assessment date not stated.
“The objective of the independent Cloud Security Assessment was to assess how the security controls implemented at Zoom measure up against the Australian Cybersecurity Centre’s (ACSC’s) Information Security Manual and related standards for effective storage, processing, and communication of information up to the PROTECTED information classification level.”
“AI Notetaker AI Studio / Custom AI Companion (CAIC) including chat compose Customer Managed key Service Frontline Worker Healthcare Clinical Notes Video on Demand Zoom AI Companion and AI Expert Assist”
“Security Certifications and Attestations ISO/IEC 27001 ISO/IEC 27017:2015 ISO/IEC 27018:2019 ISO/IEC 27701 SOC 2 Type 2 SOC 2 + HITRUST CSA STAR Attestation Cyber Essentials Cyber Essentials Plus ENS ISMAP C5 IRAP ETDA GPA NRW FedRAMP Moderate GovRAMP DoD IL4 CJIS PCI DSS v4.0.1 FISC HDS TX-RAMP”
Not found in the sources this scan collected. If the service will hold government data, ask whether it is hosted with a provider certified under the Hosting Certification Framework, and at which level.
No Australian data residency commitment was found in the sources this scan collected. Ask where inputs, outputs, logs and backups are processed and stored, and whether processing can be kept in Australia.
What your organisation still has to do
Every level of government
- Treat AI outputs, including meeting transcripts and summaries, as public records: capture or dispose of them under your records authority (the Archives Act 1983 for Commonwealth agencies, your state's records legislation for state agencies and councils). Source ↗
Commonwealth agencies
- Assess foreign ownership, control or influence risk for this technology asset, as PSPF Direction 001-2024 requires. Source ↗
- Apply the DTA Policy for the responsible use of AI in government: record the use case, assess its impact before deployment, and keep your AI transparency statement current. Source ↗
- Assess the service against the ISM controls for the highest classification of data you intend to use with it (OFFICIAL, OFFICIAL: Sensitive or PROTECTED). Source ↗
State agencies and councils
- Assess the service under your state's privacy law, which governs where residents' personal information may go: for example the PPIP Act 1998 in New South Wales, the Privacy and Data Protection Act 2014 in Victoria or the Information Privacy Act 2009 in Queensland.
- New South Wales agencies: complete the NSW AI Assessment Framework self-assessment, which Circular DCS-2024-04 makes mandatory. Source ↗
- Victorian public sector: follow Administrative Guideline 2024/07 on the safe and responsible use of generative AI. Source ↗
Buyer questionsanswered only from the public evidence scanned, click a row for the answer
!Will they train on your data?Ask the vendor
Zoom states it does not use audio, video, chat, screen sharing, attachments or other communications-like Customer Content to train Zoom's or third-party AI models.
Requires written confirmation, see Before you sign ↓
“Zoom does not use any of your audio, video, chat, screen sharing, attachments or other communications-like Customer Content (such as poll results, whiteboard and reactions) to train Zoom’s or its third-party artificial intelligence models.”
“Product Research and Development: If authorized by any applicable settings, to develop, test, and improve Zoom products and services, and to troubleshoot products and services.”
!How long do they keep your data?Ask the vendor
Retention is criteria-based: personal data is kept for as long as required for the stated uses or longer where law requires, with criteria including the ongoing relationship, user deletion, legal obligations and legal position. No fixed retention window is given for AI prompts, outputs or summaries.
Requires written confirmation, see Before you sign ↓
“We retain personal data for as long as required to engage in the uses described in this Privacy Statement, unless a longer retention period is required by applicable law.”
“This data will be deleted when no longer necessary, adequate, or relevant to offering the features or when two years have passed since your last interaction with Zoom, whichever occurs first.”
✓Who else can access your data?Clear
Anthropic is a named subprocessor (Intelligent Features Service Provider) that may process Customer Content and context in the United States when AI features are enabled, under SCCs.
“Anthropic Intelligent Features Service Provider Anthropic may process the following data if AI features are enabled: Customer Content and context United States SCCs”
“OpenAI Intelligent Features Service Provider OpenAI may process the following data if AI features are enabled: Customer Content and context United States, European Union SCCs”
“Perplexity Intelligent Features Service Provider Perplexity may process the following data if AI features are enabled: Customer Content and context United States SCCs”
“Microsoft Microsoft’s Azure Speech (Speech-to-Text, Text-to-Speech, Speech Translation, Voice Cloning), Intelligent Features Service Provider.”
“Google Cloud Platform Cloud Service Provider, Intelligent Features Service Provider Real-time meeting and webinar traffic Customer Content and context for AI processing if AI features are enabled United States, European Union, Uruguay, Chile, Taiwan, Japan and Singapore SCCs”
“Customer Content and context for AI processing if AI features are enabled Australia, Brazil, Canada, Europe, India, Japan, Singapore, Taiwan, United States SCCs Risk and Compliance whitepaper and AWS Security Center”
“For notifications from Zoom such as those related to the services, phone authentication, meeting invites, meeting summaries and requests to enable AI features, Twilio may process the following data:”
!Where is your data processed?Ask the vendor
Customer Content (including cloud recordings and meeting transcripts) is stored in the US by default; paid accounts may choose a storage location for some Customer Content, while Account Data and Diagnostic Data remain stored in the US.
Confirm in writing: Ask the vendor to state this in writing before signing.
“Customer Content is stored in the US by default. Customers on paid accounts may choose the storage location for some of their Customer Content for their account. Only Account holders, account administrators, or those with the customer account profile privilege will be able to change this setting. Additional details can be found in this Help Article . Please note that Customer Content, Account Data, and Diagnostic Data are still stored in the U.S.”
“Account owners and admins on paid accounts can, at the account, group, or user level, opt in or out of specific Zoom data centers that will be used for the processing of participants’ real-time meeting and webinar video, audio, and shared content during the hosting of meetings and webinars. The data centers in the country supporting the region where an account was provisioned will be locked as an opt-in for processing.”
“Zoom operates globally, which means personal data may be transferred, stored (for example, in a data center), and processed outside of the country or region where it was initially collected where Zoom or its service providers have customers or facilities”
“Zoom offers European customers on eligible paid accounts the option to use data centers in the European Union (EU). Customers can choose data center regions, plus the automatically determined home region, for the hosting of their real-time meeting and webinar traffic.”
!What happens in a security incident?Ask the vendor
Zoom requires subprocessors to meet DPA-equivalent obligations, including processing only on customer instructions, promptly informing Zoom of any security breach, and cooperating with data-subject and regulator requests. No customer-facing breach notification timeline is stated.
Confirm in writing: Ask the vendor to state this in writing before signing.
“promptly inform Zoom about any security breach; and cooperate with Zoom to address requests from data controllers, data subjects, or data protection authorities, as applicable.”
“While Zoom’s core services and platform code does not use PHP, Workvivo does, and that PHP code has been patched with the PHP Group’s update released on October 21, 2026. We are still assessing third-party dependencies in our production environments where PHP may be used.”
Email to send the vendor7 items to confirm in writing
Hello Zoom Video Communications team, We are assessing Zoom AI Companion (Zoom Video Communications) as part of our supplier review. Before we proceed, please confirm the following in writing: 1. Do you use our data (inputs, outputs or uploaded files) to train or improve your models? Please confirm in writing, including any opt-out and whether it applies to every plan. 2. How long do you retain our data, in days, for each type (inputs, outputs, logs and backups), and how is it deleted? 3. In which countries and regions is our data processed and stored, and can processing be limited to a region we choose? 4. What is your commitment to notify customers of a security incident affecting our data, including the timeframe? 5. Which of the listed Intelligent Features Service Providers process AI Companion requests for your tenant, and can routing be restricted to Zoom-hosted models? 6. Provide the IRAP assessment date, assessor and report; confirm where AI Companion prompts, transcripts and summaries are processed and stored for an Australian tenant, and whether in-country processing can be enforced. 7. Confirm that AI Companion and the Intelligent Features Service Providers are within the ISO/IEC 27001 and SOC 2 Type 2 system boundary, and share the current certificate and report. A written reply to each point, or a link to where it is documented, is enough. Where a point is covered by a certification or independent report, please include the certificate number or the report and its date. Thank you,
Key findingsclick a row for the evidence
✓Explicit no-training commitment covering Zoom and third-party modelsStrong
The Zoom Privacy Statement states twice that communications-like Customer Content (audio, video, chat, screen share, attachments, polls, whiteboards) is not used to train Zoom's or third-party AI models, and that intelligent features process Customer Content solely to provide the feature. This is organisation-wide for the products the statement covers and so supports AI Companion.
A clear, published no-training commitment that also binds third-party model providers is the primary buyer question for generative AI features; Zoom answers it directly rather than leaving it to contract.
Question for vendor: Confirm in writing that the no-training commitment extends to AI Companion prompts, outputs and generated summaries, and that the settings-gated product research use never includes transcript or summary content.
“Zoom does not use any of your audio, video, chat, screen sharing, attachments or other communications-like Customer Content (such as poll results, whiteboard and reactions) to train Zoom’s or its third-party artificial intelligence models.”
“Intelligent Features: Zoom provides intelligent features and products to its customers, their licensed end users and guests, such as Zoom AI or other tools to recommend chat, email, or other content, including content from third-party integrations. These tools may use artificial intelligence, machine learning, or other technology to process Customer Content and context solely to provide the intelligent features.”
“Product Research and Development: If authorized by any applicable settings, to develop, test, and improve Zoom products and services, and to troubleshoot products and services.”
✓Named AI model providers with dated change logStrong
Zoom's subprocessor list names Anthropic, OpenAI, Perplexity, Microsoft Azure Speech and Google Cloud as Intelligent Features Service Providers that may receive Customer Content and context when AI features are enabled, with processing countries and SCCs, and a dated change log back to 2020. Twilio is also disclosed as receiving meeting summaries for notifications.
Buyers can see exactly which third parties sit in the AI request path and when each was added. The list is feature-agnostic ('if AI features are enabled'), so it does not say which providers serve AI Companion specifically versus other Zoom AI features.
Question for vendor: Which of the listed Intelligent Features Service Providers process AI Companion requests for your tenant, and can routing be restricted to Zoom-hosted models?
“Anthropic Intelligent Features Service Provider Anthropic may process the following data if AI features are enabled: Customer Content and context United States SCCs”
“OpenAI Intelligent Features Service Provider OpenAI may process the following data if AI features are enabled: Customer Content and context United States, European Union SCCs”
“Perplexity Intelligent Features Service Provider Perplexity may process the following data if AI features are enabled: Customer Content and context United States SCCs”
“Microsoft Microsoft’s Azure Speech (Speech-to-Text, Text-to-Speech, Speech Translation, Voice Cloning), Intelligent Features Service Provider.”
“Google Cloud Platform Cloud Service Provider, Intelligent Features Service Provider Real-time meeting and webinar traffic Customer Content and context for AI processing if AI features are enabled United States, European Union, Uruguay, Chile, Taiwan, Japan and Singapore SCCs”
“For notifications from Zoom such as those related to the services, phone authentication, meeting invites, meeting summaries and requests to enable AI features, Twilio may process the following data:”
“28 July 2023 Added Anthropic as a subprocessor. 10 May 2023 Removed CSS Corps from the Subprocessor list. Added OpenAI, Qualtrics, and ServiceNow as subprocessors.”
!IRAP assessed to PROTECTED with AI Companion in scope; no Australian residency commitmentGap
Zoom's IRAP page states an independent assessment against the ISM up to PROTECTED with Zoom AI Companion and AI Expert Assist, AI Notetaker and Custom AI Companion in scope, but gives no assessor name or assessment date, and the report is access-controlled. No document commits to processing or storing data in Australia: Customer Content is stored in the US by default, data centre choice applies to real-time meeting traffic only, and Australia appears merely as one of many AWS and Azure regions. The EU has an in-region option; nothing equivalent is stated for Australia.
For Australian government buyers the IRAP scope is a genuine positive, but the AI processing path (Anthropic, OpenAI, Perplexity in the US) and US-default storage mean AI Companion content very likely leaves Australia. The IRAP currency and the data flows need confirming before relying on the assessment.
Question for vendor: Provide the IRAP assessment date, assessor and report; confirm where AI Companion prompts, transcripts and summaries are processed and stored for an Australian tenant, and whether in-country processing can be enforced.
“The objective of the independent Cloud Security Assessment was to assess how the security controls implemented at Zoom measure up against the Australian Cybersecurity Centre’s (ACSC’s) Information Security Manual and related standards for effective storage, processing, and communication of information up to the PROTECTED information classification level.”
“AI Notetaker AI Studio / Custom AI Companion (CAIC) including chat compose Customer Managed key Service Frontline Worker Healthcare Clinical Notes Video on Demand Zoom AI Companion and AI Expert Assist”
“Customer Content is stored in the US by default. Customers on paid accounts may choose the storage location for some of their Customer Content for their account. Only Account holders, account administrators, or those with the customer account profile privilege will be able to change this setting. Additional details can be found in this Help Article . Please note that Customer Content, Account Data, and Diagnostic Data are still stored in the U.S.”
“Account owners and admins on paid accounts can, at the account, group, or user level, opt in or out of specific Zoom data centers that will be used for the processing of participants’ real-time meeting and webinar video, audio, and shared content during the hosting of meetings and webinars. The data centers in the country supporting the region where an account was provisioned will be locked as an opt-in for processing.”
“Zoom operates globally, which means personal data may be transferred, stored (for example, in a data center), and processed outside of the country or region where it was initially collected where Zoom or its service providers have customers or facilities”
“Zoom offers European customers on eligible paid accounts the option to use data centers in the European Union (EU). Customers can choose data center regions, plus the automatically determined home region, for the hosting of their real-time meeting and webinar traffic.”
“Customer Content and context for AI processing if AI features are enabled Australia, Brazil, Canada, Europe, India, Japan, Singapore, Taiwan, United States SCCs Risk and Compliance whitepaper and AWS Security Center”
!AI Companion-specific documentation thin in the stash; retention and incident terms genericGap
The AI whitepaper and the AI Companion legal guide were retrieved only as stubs (table of contents and a teaser), so the responsible AI, data governance and admin-control sections could not be assessed. Retention is criteria-based with no stated window for AI prompts, outputs or summaries. Incident handling is evidenced by a vulnerability disclosure policy, a live CVE response and a subprocessor breach-notification duty to Zoom, but no customer-facing breach notification timeline appears. testing_and_evaluation is marked partial: penetration testing and regular control testing are evidenced, but the only AI-specific evaluation disclosure (a pre-deployment simulator) belongs to AI Expert Assist, a different product, and cannot clear AI Companion.
The organisation-wide statements are solid, but the product-specific detail a buyer needs for AI Companion (model routing, admin controls, retention of AI artefacts, AI evaluation) sits in documents that were not retrievable here and must be obtained directly.
Question for vendor: Provide the full AI Companion security and privacy whitepaper, the retention period for AI Companion prompts, outputs and meeting summaries, the customer breach-notification commitment and timeline, and any AI-specific evaluation or red-teaming evidence.
“These pages explain how Zoom uses artificial intelligence across its products and services for Zoom Workplace, Webinars, and Events. Other Zoom products are not currently included across these pages.”
“Administrative Controls Zoom's Commitment to Responsible AI Data Governance and Privacy Security Framework User Transparency and Notice”
“When you're thinking about integrating AI Companion into your organization, it's important to know about our data protection and privacy features and how they fit with your organization’s data governance requirements.”
“We retain personal data for as long as required to engage in the uses described in this Privacy Statement, unless a longer retention period is required by applicable law.”
“promptly inform Zoom about any security breach; and cooperate with Zoom to address requests from data controllers, data subjects, or data protection authorities, as applicable.”
“Vulnerability disclosure Vulnerability disclosure policy Vulnerability disclosure policy Security bulletins Security Bulletins”
“Use a built-in simulator to fine-tune AI responses and guardrails before customer use.”
“App Security Zoom Communications Pen Test Zoom Productivity Pen Test Zoom Spaces Pen Test”
!Broad certification list, mostly without stated scopeGap
The trust centre lists ISO/IEC 27001, 27017, 27018, 27701, SOC 2 Type 2, SOC 2 + HITRUST, CSA STAR, Cyber Essentials Plus, C5, FedRAMP Moderate, DoD IL4, PCI DSS and others. Only a few carry scope detail: SOC 2 Type II period 16 Oct 2024 to 15 Oct 2025, ISO 27001 now including Workvivo, PCI AOCs for Contact Center and Phone, TX-RAMP Level 2 for Zoom Commercial, and DoD IL4 for the separate Zoom for Defense platform. All are vendor-stated; no independent registry document is in the stash.
A long list is reassuring but the buyer needs to know whether AI Companion and its model-provider subprocessors fall within the ISO 27001 and SOC 2 boundaries; the published material does not say.
Question for vendor: Confirm that AI Companion and the Intelligent Features Service Providers are within the ISO/IEC 27001 and SOC 2 Type 2 system boundary, and share the current certificate and report.
“Security Certifications and Attestations ISO/IEC 27001 ISO/IEC 27017:2015 ISO/IEC 27018:2019 ISO/IEC 27701 SOC 2 Type 2 SOC 2 + HITRUST CSA STAR Attestation Cyber Essentials Cyber Essentials Plus ENS ISMAP C5 IRAP ETDA GPA NRW FedRAMP Moderate GovRAMP DoD IL4 CJIS PCI DSS v4.0.1 FISC HDS TX-RAMP”
“Zoom SOC 2 Type II report covering 10/16/2024 to 10/15/2025, along with the corresponding bridge letter Workvivo SOC 2 Type II report covering 1/1/2025 to 12/31/2025 PCI Service Provider Attestations of Compliance (AOCs) for Zoom Contact Center and Zoom Phone ISO 27001 certificate, which now includes Workvivo within its scope TX-RAMP Level 2 certification for Zoom Commercial (upgraded from Level 1)”
“ISO 27701 Data privacy framework guiding with GDPR and other regulations SOC 2 Type 2 SOC 2 Type 2 report covering Security, Availability, Confidentiality, and Privacy”
“Zoom for Defense has officially received authorization from the Defense Information Systems Agency (DISA) for Impact Level 4 (IL4) communications on the DoD’s NIPRNet.”
Assurance dimensionsweighted components of one score, not eight separate ratings
Organisation & AI governance15% of the scoreorganisation-level evidence40
Graded from organisation-level evidence, it does not automatically establish assurance for this product.
Who owns AI risk: policies, responsible-AI principles, human oversight and administrative controls.
Assessed against ISO 42001 · NIST AI RMF · AIUC-1
“You can contact our Data Protection Officer by sending an email to [email protected] .”
“Security begins at the earliest stages of design, including our AI/Machine Learning security strategy and secure product development lifecycle.”
“Administrative Controls Zoom's Commitment to Responsible AI Data Governance and Privacy Security Framework User Transparency and Notice”
AI system15% of the scoreorganisation-level evidence40
Graded from organisation-level evidence, it does not automatically establish assurance for this product.
What AI the vendor actually runs and where it sits in the product, the map everything else is judged against.
Assessed against ISO 42001 · NIST AI RMF
“These pages explain how Zoom uses artificial intelligence across its products and services for Zoom Workplace, Webinars, and Events. Other Zoom products are not currently included across these pages.”
“Zoom AI features deliver powerful, real-time capabilities to help users improve productivity and work together more effectively. These features are throughout Zoom Workplace — Meetings, Phone, Chat, Whiteboard, Email, and more.”
“AI Companion is baked into every tool in Zoom's AI Productivity Suite, including Canvas. Each AI Productivity Suite license includes AI credits that power intelligent features;”
“Intelligent Features: Zoom provides intelligent features and products to its customers, their licensed end users and guests, such as Zoom AI or other tools to recommend chat, email, or other content, including content from third-party integrations. These tools may use artificial intelligence, machine learning, or other technology to process Customer Content and context solely to provide the intelligent features.”
“Agentic Search Web search, Zoom sources, and connected third-party data sources Deep research Workflows Workflows with access to Zoom and third-party applications, using advanced AI nodes and tools”
“Execute tasks across systems: Let AI process refunds and billing updates across your third-party apps.”
How AI features are evaluated before and after release, evals, red-teaming, monitoring.
Assessed against NIST GenAI · NIST AI RMF · ISO 42001
“App Security Zoom Communications Pen Test Zoom Productivity Pen Test Zoom Spaces Pen Test”
“Zoom implements a process for regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures to support the security of the data we process.”
“Use a built-in simulator to fine-tune AI responses and guardrails before customer use.”
How changes to models and AI features are controlled and communicated: versioning, notice, rollback.
Assessed against ISO 27001 · ISO 42001
“We will provide the owner of Customer’s account with notice of any new Subprocessors to the extent required under contractual agreement, along with posting such updates here.”
“28 July 2023 Added Anthropic as a subprocessor. 10 May 2023 Removed CSS Corps from the Subprocessor list. Added OpenAI, Qualtrics, and ServiceNow as subprocessors.”
“If we make material changes to this Privacy Statement, we will notify you and provide you an opportunity to review before you choose to continue using our products and services.”
Model10% of the scoreorganisation-level evidence60
Graded from organisation-level evidence, it does not automatically establish assurance for this product.
Which model providers and versions process customer data, and how changes to them are disclosed.
Assessed against NIST GenAI · ISO 42001
“Anthropic Intelligent Features Service Provider Anthropic may process the following data if AI features are enabled: Customer Content and context United States SCCs”
“OpenAI Intelligent Features Service Provider OpenAI may process the following data if AI features are enabled: Customer Content and context United States, European Union SCCs”
“Perplexity Intelligent Features Service Provider Perplexity may process the following data if AI features are enabled: Customer Content and context United States SCCs”
“Microsoft Microsoft’s Azure Speech (Speech-to-Text, Text-to-Speech, Speech Translation, Voice Cloning), Intelligent Features Service Provider.”
“Google Cloud Platform Cloud Service Provider, Intelligent Features Service Provider Real-time meeting and webinar traffic Customer Content and context for AI processing if AI features are enabled United States, European Union, Uruguay, Chile, Taiwan, Japan and Singapore SCCs”
Model provider transparency: vendor-evidenced, not yet independently corroborated.
Customer data15% of the scoreorganisation-level evidence82
Graded from organisation-level evidence, it does not automatically establish assurance for this product.
Whether customer data trains models, how long it is retained, where it is processed, and how it is protected.
Assessed against ISO 27018 · OAIC APPs · EU AI Act
“Intelligent Features: Zoom provides intelligent features and products to its customers, their licensed end users and guests, such as Zoom AI or other tools to recommend chat, email, or other content, including content from third-party integrations. These tools may use artificial intelligence, machine learning, or other technology to process Customer Content and context solely to provide the intelligent features.”
“Zoom does not use any of your audio, video, chat, screen sharing, attachments or other communications-like Customer Content (such as poll results, whiteboard and reactions) to train Zoom’s or its third-party artificial intelligence models.”
“Product Research and Development: If authorized by any applicable settings, to develop, test, and improve Zoom products and services, and to troubleshoot products and services.”
“Zoom employees do not access or use Customer Content including meeting, webinar, messaging, or email content (specifically, audio, video, files, in-meeting whiteboards, messaging, or email contents), or any content generated or shared as part of other collaborative features (such as out-of-meeting whiteboards), unless authorized by the account owner hosting the Zoom product or service where the Customer Content was generated, or as required for legal, safety, security or support purposes.”
“We retain personal data for as long as required to engage in the uses described in this Privacy Statement, unless a longer retention period is required by applicable law.”
“Customer Content is stored in the US by default. Customers on paid accounts may choose the storage location for some of their Customer Content for their account. Only Account holders, account administrators, or those with the customer account profile privilege will be able to change this setting. Additional details can be found in this Help Article . Please note that Customer Content, Account Data, and Diagnostic Data are still stored in the U.S.”
“Account owners and admins on paid accounts can, at the account, group, or user level, opt in or out of specific Zoom data centers that will be used for the processing of participants’ real-time meeting and webinar video, audio, and shared content during the hosting of meetings and webinars. The data centers in the country supporting the region where an account was provisioned will be locked as an opt-in for processing.”
“Zoom operates globally, which means personal data may be transferred, stored (for example, in a data center), and processed outside of the country or region where it was initially collected where Zoom or its service providers have customers or facilities”
“This data will be deleted when no longer necessary, adequate, or relevant to offering the features or when two years have passed since your last interaction with Zoom, whichever occurs first.”
“Zoom offers European customers on eligible paid accounts the option to use data centers in the European Union (EU). Customers can choose data center regions, plus the automatically determined home region, for the hosting of their real-time meeting and webinar traffic.”
Customer data treatment: the certifications above are independently corroborated, but they cover the management system — these specific disclosures are the vendor's own statements, not yet independently verified.
AI supply chain10% of the scoreorganisation-level evidence60
Graded from organisation-level evidence, it does not automatically establish assurance for this product.
The named chain of AI and infrastructure providers behind the product, and how it is disclosed.
Assessed against ISO 27001 · ISO 27017
“Google Cloud Platform Cloud Service Provider, Intelligent Features Service Provider Real-time meeting and webinar traffic Customer Content and context for AI processing if AI features are enabled United States, European Union, Uruguay, Chile, Taiwan, Japan and Singapore SCCs”
“Customer Content and context for AI processing if AI features are enabled Australia, Brazil, Canada, Europe, India, Japan, Singapore, Taiwan, United States SCCs Risk and Compliance whitepaper and AWS Security Center”
“promptly inform Zoom about any security breach; and cooperate with Zoom to address requests from data controllers, data subjects, or data protection authorities, as applicable.”
“Except for as provided below, Zoom owns or controls access to the infrastructure that hosts real-time and stored personal data (should the Customer choose to store such content, e.g., recordings and transcripts). Personal data may be shifted among data centers within a region to ensure Zoom’s performance and availability.”
“For notifications from Zoom such as those related to the services, phone authentication, meeting invites, meeting summaries and requests to enable AI features, Twilio may process the following data:”
“We will provide the owner of Customer’s account with notice of any new Subprocessors to the extent required under contractual agreement, along with posting such updates here.”
“28 July 2023 Added Anthropic as a subprocessor. 10 May 2023 Removed CSS Corps from the Subprocessor list. Added OpenAI, Qualtrics, and ServiceNow as subprocessors.”
Subprocessors & supply chain: vendor-evidenced, not yet independently corroborated.
Security foundation15% of the scoreorganisation-level evidence65
Graded from organisation-level evidence, it does not automatically establish assurance for this product.
How security problems are found, reported and handled: disclosure channels, bug bounty, incident response.
Assessed against ISO 27001 · NIST AI RMF
“Vulnerability disclosure Vulnerability disclosure policy Vulnerability disclosure policy Security bulletins Security Bulletins”
“While Zoom’s core services and platform code does not use PHP, Workvivo does, and that PHP code has been patched with the PHP Group’s update released on October 21, 2026. We are still assessing third-party dependencies in our production environments where PHP may be used.”
“Work with confidence knowing the tools you use every day undergo proactive reviews — even after release — to identify and minimize vulnerabilities before they become a problem.”
“promptly inform Zoom about any security breach; and cooperate with Zoom to address requests from data controllers, data subjects, or data protection authorities, as applicable.”
Independent assurance evidence10% of the score59
Whether claimed certifications and attestations are independently corroborated, checked against official registries and issuing bodies. Which certifications, and what each one does and does not establish, is stated per certificate.
Assessed against ISO 17021-1 · ISO 42006 · ISO 27006-1 · ISO 27008
“The objective of the independent Cloud Security Assessment was to assess how the security controls implemented at Zoom measure up against the Australian Cybersecurity Centre’s (ACSC’s) Information Security Manual and related standards for effective storage, processing, and communication of information up to the PROTECTED information classification level.”
“AI Notetaker AI Studio / Custom AI Companion (CAIC) including chat compose Customer Managed key Service Frontline Worker Healthcare Clinical Notes Video on Demand Zoom AI Companion and AI Expert Assist”
“Security Certifications and Attestations ISO/IEC 27001 ISO/IEC 27017:2015 ISO/IEC 27018:2019 ISO/IEC 27701 SOC 2 Type 2 SOC 2 + HITRUST CSA STAR Attestation Cyber Essentials Cyber Essentials Plus ENS ISMAP C5 IRAP ETDA GPA NRW FedRAMP Moderate GovRAMP DoD IL4 CJIS PCI DSS v4.0.1 FISC HDS TX-RAMP”
“Zoom SOC 2 Type II report covering 10/16/2024 to 10/15/2025, along with the corresponding bridge letter Workvivo SOC 2 Type II report covering 1/1/2025 to 12/31/2025 PCI Service Provider Attestations of Compliance (AOCs) for Zoom Contact Center and Zoom Phone ISO 27001 certificate, which now includes Workvivo within its scope TX-RAMP Level 2 certification for Zoom Commercial (upgraded from Level 1)”
“ISO 27701 Data privacy framework guiding with GDPR and other regulations SOC 2 Type 2 SOC 2 Type 2 report covering Security, Availability, Confidentiality, and Privacy”
Read from the registry record above, cited, not reproduced.
Read from the registry record above, cited, not reproduced.
“Zoom for Defense has officially received authorization from the Defense Information Systems Agency (DISA) for Impact Level 4 (IL4) communications on the DoD’s NIPRNet.”
None of the corroborated certifications is AI-specific (ISO/IEC 42001 or AIUC-class) — this assurance is security and data-transfer attestation, not AI-management-system assurance.
Legal & contractual10% of the score60
The contractual backbone a buyer can rely on, terms, DPAs, privacy commitments and regulatory posture.
Assessed against EU AI Act · OAIC APPs
“Zoom provides these commitments to all our customers by incorporating Zoom’s Data Processing Addendum into the Zoom Terms of Service .”
“Zoom typically notifies users of governmental requests for information, including a copy of the request received unless we are legally prohibited from notifying the user.”
“Zoom complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.”
“Zoom Meetings/Webinar/Zoom Chat Data Transfer Impact Assessment Zoom Phone Data Transfer Impact Assessment Zoom Contact Center Data Transfer Impact Assessment Zoom Virtual Agent Data Transfer Impact Assessment”
“When you're thinking about integrating AI Companion into your organization, it's important to know about our data protection and privacy features and how they fit with your organization’s data governance requirements.”
Legal & contractual transparency: vendor-evidenced, not yet independently corroborated.
Not graded: Agent, not applicable to this scan.
What would strengthen assuranceeach figure is from today's score, resolving one changes the others
Resolving an evidence gap strengthens the dimension it belongs to, and with it the score: 58 → up to 80 with every identified gap resolved.
AI supply chainclick a node to focus it · drag to pan · zoom with the controls
View as list
What you inheritTrustyCyber's AI Shared Responsibility Matrix v1.0
This scan names the vendor’s AI supply chain without assessing the responsibility split, that depends on how you consume the product. Under the common managed models, a deployer inherits 16 of the matrix’s 41 responsibilities from providers, each with named evidence owed.
Map your inherited responsibilitiesAssurance evidence: certifications 21, registry checks and verification ladders, click to view
Independent Cloud Security Assessment against the ACSC ISM up to PROTECTED; scope includes Zoom AI Companion and AI Expert Assist, AI Notetaker, AI Studio / Custom AI Companion, Meetings, Webinars, Phone, Team Chat, Contact Center, Events, Rooms and other listed products. Assessor and assessment date not stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Certificate reported in March 2026 as now including Workvivo; AI Companion inclusion not stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Listed as ISO/IEC 27017:2015 on the trust centre; no scope stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Listed as ISO/IEC 27018:2019 on the trust centre; no scope stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Listed on the trust centre and privacy page as a privacy framework certification; no scope stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Report period 16 Oct 2024 to 15 Oct 2025 with bridge letter; covers Security, Availability, Confidentiality and Privacy. Separate Workvivo SOC 2 Type II for calendar 2025.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Listed as 'SOC 2 + HITRUST'; no scope stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Listed as 'CSA STAR Attestation'; level and scope not stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Listed on the trust centre; no scope stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Listed on the trust centre; no scope stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Listed on the trust centre; the authorised offering is not named on the stashed pages.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
PCI DSS v4.0.1; Service Provider AOCs for Zoom Contact Center and Zoom Phone.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
DISA Impact Level 4 authorisation for Zoom for Defense (Meetings, Chat, Webinars, Events, Rooms); separate government platform, not the commercial AI Companion.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Level 2 certification for Zoom Commercial (upgraded from Level 1).
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Listed on the trust centre; no scope stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Listed on the trust centre; no scope stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Listed on the trust centre; no scope stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Listed on the trust centre; no scope stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Not claimed in any public source scanned. This is the AI-management-system certification — in its absence, the vendor’s AI governance rests on its general security and privacy certifications.
Checked against Data Privacy Framework (dataprivacyframework.gov), Nov 1, 2026: Verified on the registry
Checked against FedRAMP Marketplace (fedramp.gov), Nov 1, 2026: Verified on the registry
Sources 14, click to view
Appendix: standards landscape 8, click to view
Where each standard behind this assessment stands today, from TrustyCyber’s continuously maintained standards radar.
This automated result is based on publicly available information at the time of scanning. It is not an audit, certification, legal opinion or assurance engagement. Publicly unavailable evidence may materially change the conclusion.
Monitor for changes
Get an email if its TRUSTYCYBER Score, grade or certifications change. One credit per refresh; reading the report always stays free.