Snapshot 59688
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Zoom Third-Party Subprocessors & Zoom Affiliates Effective: 2 October 2026 See change log What is a Third-Party Subprocessor? A subprocessor is a vendor Zoom uses to process data on behalf of our customers, who are the data controllers of that data. Zoom’s Process for Contracting with Subprocessors Zoom requires its subprocessors to satisfy equivalent obligations as those required from Zoom (as a Data Processor) as outlined in Zoom’s Data Processing Agreement (DPA), including but not limited to the requirements to: process personal data following data controller’s (i.e., Customer’s) instructions (as communicated to the relevant subprocessor by Zoom); in connection with the subprocessing activities, use only personnel who are reliable and subject to a contractually binding obligation to observe data privacy and security, to the extent applicable, under applicable data protection laws; promptly inform Zoom about any security breach; and cooperate with Zoom to address requests from data controllers, data subjects, or data protection authorities, as applicable. Except for as provided below, Zoom owns or controls access to the infrastructure that hosts real-time and stored personal data (should the Customer choose to store such content, e.g., recordings and transcripts). Personal data may be shifted among data centers within a region to ensure Zoom’s performance and availability. Zoom also works with the listed service subprocessors below to provide the noted functionality. The following table describes the countries and legal entities engaged in the processing and storage of personal data by Zoom acting as a data processor on behalf of its customers, the data controllers. Zoom Authorized Subprocessors Name Purpose Data Shared with Subprocessor Location International Transfer Mechanism Additional Safeguards (links to subprocessor resources) Amazon Web Services Cloud Service Provider Real-time meeting and webinar traffic Meeting and call recordings (if saved to the cloud by Customer Transcriptions of meeting or call recordings (if meeting recorded and saved to the cloud by Customer) Uploaded files Customer Content and context for AI processing if AI features are enabled Australia, Brazil, Canada, Europe, India, Japan, Singapore, Taiwan, United States SCCs Risk and Compliance whitepaper and AWS Security Center Anthropic Intelligent Features Service Provider Anthropic may process the following data if AI features are enabled: Customer Content and context United States SCCs Privacy Policy Authzed, Inc. Authorization / Permissions service (Developer tools) Customer Metadata Applications Logs Service identifiers (which may include email address) United States SCCs Privacy Policy Cloudflare Content Delivery Network Meeting and call recordings (if saved to the cloud by Customer) Transcriptions of meeting or call recordings (if meeting recorded and saved to the cloud by Customer) Uploaded files North America, Latin America, Europe, Middle East, Africa, Asia and Oceania. SCCs Cloudflare Compliance Page, GDPR Compliance Page Cloudflare Security IP address European Union, United States SCCs Cloudflare Compliance Page, GDPR Compliance Page Eleven Labs Inc. Intelligent Features Service Provider (Text to Speech,Voice Cloning, Dubbing) Audio files United States, European Union SCCs Privacy Policy Google Cloud Platform Cloud Service Provider, Intelligent Features Service Provider Real-time meeting and webinar traffic Customer Content and context for AI processing if AI features are enabled United States, European Union, Uruguay, Chile, Taiwan, Japan and Singapore SCCs Privacy Resource Center MaestroQA d/b/a Rippit Support Quality Assurance Support related Communications Content such as cloud recordings or in-meeting chat transcripts may be shared with Rippit but only if Customer chooses to provide it directly to a Zoom support agent through a support interaction, i.e., as an attachment to a support ticket. Ireland, United States SCCs Privacy Policy Microsoft Cloud Service Provider. Real-time meeting and webinar traffic Meeting and call recordings (if saved to the cloud by Customer Transcriptions of meeting or call recordings (if meeting recorded and saved to the cloud by Customer) Uploaded files Switzerland SCCs Microsoft Privacy Statement Microsoft Microsoft’s Azure Speech (Speech-to-Text, Text-to-Speech, Speech Translation, Voice Cloning), Intelligent Features Service Provider. Speech-to-Text converts audio to text from a range of sources, including microphones and audio files. Text-to-Speech converts text to audio files. Speech Translation converts an audio stream to translated speech (speech-to-speech), and can use personal voice (voice cloning) Customer Content and context for AI processing if AI features are enabled Australia, Brazil, Canada, Europe, India, Japan, Singapore, Taiwan, United States SCCs Microsoft Privacy Statement MongoDB Developer Database Platform Customer Metadata Applications Logs United States SCCs Trust Center OneTrust Data Subject Requests Portal, Cookie Preference Center Name Email address Account type Country IP address DSAR reports User cookie preferences United States SCCs Trust Page OpenAI Intelligent Features Service Provider OpenAI may process the following data if AI features are enabled: Customer Content and context United States, European Union SCCs OpenAI Privacy Statement Oracle Cloud Service Provider Real-time meeting and webinar traffic Meeting and call recordings address Transcriptions of meeting or call recordings Uploaded files Customer Content and context for AI processing if AI features are enabled Mexico, United States, Saudi Arabia Binding Corporate Rules (BCRs) Technical Brief Whitepaper Perplexity Intelligent Features Service Provider Perplexity may process the following data if AI features are enabled: Customer Content and context United States SCCs Perplexity Privacy Policy Qualtrics Feedback, Reviews, and Survey Responses If a customer chooses to provide feedback, reviews, or survey responses to Zoom, then Qualtrics may process: Email address IP address Account information Customer Content or any data the customer chooses to provide in the feedback, survey, or review Germany, United States SCCs Data Protection & Privacy Sendbird Chat Functionality for Workvivo Customers (Optional) If a customer chooses to use the Chat functionality in Workvivo, then Sendbird may process: User name Workvivo ID Customer Content or any data the Customer chooses to submit via the Chat functionality European Union, United States SCCs Sendbird Security SendSafely Encrypted file transfer service Communications Content such as attachments may be shared with SendSafely but only if Customer chooses to provide it directly to a Zoom support agent through a support interaction (i.e., as an attachment to a support ticket). United States SCCs Privacy Policy | SendSafely | End-to-End Encryption ServiceNow Cloud-based Customer Service Platform Communications Content such as cloud recordings or in-meeting chat transcripts may be shared with ServiceNow but only if Customer chooses to provide it directly to a Zoom support agent through a support interaction. Germany, United States SCCs Complying with the General Data Protection Regulation (GDPR) Suki AI Intelligent Features Service Provider Suki may process the following data if the AI Clinical Notes feature is enabled: Customer Content and context United States SCCs Privacy Policy Sumit-AI AI Speech, Speech-to-Text service Speech-to-Text feature converts audio to text from a range of sources, including microphones and audio files. Europe, United States SCCs Sumit-AI Website Privacy Policy TaskUS Support Providers Communications Content such as cloud recordings or in-meeting chat transcripts may be shared with TaskUS but only if Customer chooses to provide it directly to a Zoom support agent through a support interaction. Philippines, Croatia SCCs Content Security Twilio Notifications For notifications from Zoom such as those related to the services, phone authentication, meeting invites, meeting summaries and requests to enable AI features, Twilio may process the following data: Name Email address Phone number Meeting or webinar subject Meeting/webinar ID Meeting date and start time Meeting summary United States, European Union SCCs Twilio GDPR Whitepaper For additional subprocessors specific to Zoom Events, please see below. For more information about Zoom Events, please see the Zoom Events Privacy Statement. Zoom Events Authorized Subprocessors Name Purpose Data Shared with Subprocessor Location International Transfer Mechanism Additional Safeguards (links to subprocessor resources) Stripe Payment Processing Payment and transaction information such as name, email, bank account details, payment card details, date/time/amount of transaction, and merchant name. United States SCCs Stripe Privacy Center Updates As our business grows and evolves, the Subprocessors we utilize may also change. We will provide the owner of Customer’s account with notice of any new Subprocessors to the extent required under contractual agreement, along with posting such updates here. You may also use the form below to subscribe to updates. What is a Zoom Affiliate? A Zoom affiliate is any entity that Zoom directly or indirectly controls. Together with Zoom Video Communications, Inc., these affiliates form the Zoom Group. International Transfers within the Zoom Group All parties of the Zoom Group have entered a data transfer agreement that sets out the data protection requirements and incorporates the appropriate EU Standard Contractual Clauses (“SCCs”). Zoom Affiliates Entity Name Registered Location Zoom Communications, Inc. Delaware, USA ZVC JAPAN K.K. Japan ZVC Netherlands B.V. Amsterdam, Netherlands Norway (Branch Office) ZVC- Australia Pty Ltd. New South Wales, Australia ZVC UK Ltd. England Wales Zoom Voice Communications, Inc. Delaware, USA Hong Kong (Bus. Registration) ZVC France SAS Paris, France ZVC India Pvt. Ltd. Mumbai, India ZVC Canada, Ltd. Registered In: New Brunswick, Canada Extra Provincial Registrations: Alberta British Columbia Manitoba Ontario Quebec Keybase, LLC Delaware, USA ZVC Singapore Pte. Ltd. Singapore ZVC Germany GmbH Germany Zoom Video Communications (Hong Kong) Limited Hong Kong Zoom Video Communications (Shanghai) Co., Ltd. China Zoom Software (Hangzhou) Co., Ltd. China Zoom Video Communications Korea, LLC Republic of Korea Zoom Arabia Communications Company Kingdom of Saudi Arabia ZM Services India Private Ltd. India Zoom Software (Wuhan) Co., Ltd. China Zoom Middle East and North Africa Regional Headquarters Company Kingdom of Saudi Arabia Saasbee Inc. (Hefei) Ltd. China Saasbee Software (Hangzhou) Co., Ltd. China Solvvy, LLC Delaware, USA Zoom Video Communications (Suzhou) Inc. China Workvivo Limited Ireland Brighthire, Inc. Delaware, USA Bonsai Technologies Inc. Delaware, USA France (Bus. Registration) Date of change Change Notes 2 October 2026 Updated Microsoft with new processing activity. Updated MaestroQA with new d/b/a. 29 April 2026 Updated Oracle with new processing activity and location. Updated Sumit-AI with a new location. 11 March 2026 Added Authzed, Inc. as a subprocessor. Removed Apple and Google Firebase as subprocessors. 30 January 2026 Added Brighthire and Bonsai as affiliates. 15 December 2025 Updated Google Cloud Platform with a new processing activity. 03 December 2025 Added the following affiliates: Solvvy, LLC Zoom Software (Hangzhou) Co., Ltd. Zoom Video Communications Korea, LLC Zoom Arabia Communications Company ZM Services India Private Ltd. Zoom Software (Wuhan) Co., Ltd. Zoom Middle East and North Africa Regional Headquarters Company 03 November 2025 Added the European Union as a processing location for Twilio. Added Sendbird as a subprocessor for Workvivo chat feature. Removed Zendesk as a subprocessor. Zendesk is no longer a vendor of Zoom 24 June 2025 Updated OpenAI with a new processing location. Updated ElevenLabs with a new processing location. 01 April 2025 Added Eleven Labs Inc. as a subprocessor. Updated Cloudflare with a new processing activity. 20 March 2025 Added Suki AI as a subprocessor 14 January 2025 Added MSFT’s Azure and Sumit-AI for their AI Speech, Speech-to-Text service. 04 October 2024 Added MongoDB and Perplexity as subprocessors. Updated Google Cloud Platform and TrustUS for accuracy. 19 July 2024 Added data shared with AWS and Twilio. Updated Anthropic and OpenAI for accuracy. 03 November 2023 Added United States as a processing location for ServiceNow. 23 October 2023 Added Workvivo as an affiliate. Added Mexico as a processing location for Oracle. 28 July 2023 Added Anthropic as a subprocessor. 10 May 2023 Removed CSS Corps from the Subprocessor list. Added OpenAI, Qualtrics, and ServiceNow as subprocessors. Updated Cloudflare, MaestroQA, and Twilio for accuracy. Added Stripe as a subprocessor for Zoom Events. CSS Corps is no longer a vendor of Zoom. 05 October 2022 Added Taiwan as a processing location for Amazon Web Services. Added Google Cloud Platform for processing in Taiwan only. Added SendSafely as a subprocessor. 25 April 2022 Added Microsoft as a subprocessor. 17 February 2022 Removed Karlsruhe Information Technology Solutions from Affiliates list. Added MaestroQA, OneTrust, and Cloudflare to the list of Subprocessors for accuracy. Updated list of AWS locations for accuracy. Karlsruhe Information Technology Solutions was merged with ZVC Germany GmbH. Following an internal assessment, we identified the absence of three vendors. Zoom has always used these vendors for that purpose; they are not new subprocessors. 30 December 2021 Added Twilio, CSS Corp, TaskUS for accuracy. Added Zoom Affiliates for transparency. Following an internal assessment, we identified the absence of four vendors. Zoom has always used these vendors for that purpose; they are not new subprocessors. 11 February 2021 Updated regional locations of cloud service infrastructure providers Updated regional locations of cloud service infrastructure providers for accuracy 14 October 2020 Removed vendors erroneously classified as subprocessors. Following an internal assessment, we identified some vendors previously listed that did not, in fact, process any customer data for which Zoom is the data processor. For that reason, we removed them. 14 October 2020 Added Apple and Google Firebase for accuracy. Following an internal assessment, we identified the absence of two vendors for mobile phone push notifications. Zoom has always used these vendors for that purpose; they are not new subprocessors.