Zoom AI Companion procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ If you are (i) a “business” and we process “personal information” (as those terms are defined by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020) on your behalf, (ii) a “controller” and we process “personal data” (as those terms are defined by other applicable US state data privacy Laws) on your behalf, or (iii) you meet both criteria set out in (i) and (ii), then our US State Law Privacy Addendum is incorporated herein by reference and applies to our “processing” of your “personal information” and “personal data” (as those terms are defined under the aforementioned Laws).” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 31.3 Data Processing Addendum . If you are a business, enterprise, or education account owner and your use of the Services requires Zoom to process an End User’s personal data under a data processing agreement, Zoom will process such personal data subject to Zoom’s Global Data Processing Addendum .” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ 28. ANONYMIZED AND AGGREGATED DATA ” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ 14.5 Deletion and Access to Customer Content After Termination . For thirty (30) calendar days following expiration or termination of this Agreement, Zoom will provide you access to retrieve your Customer Content, after which time your Customer Content will be deleted according to applicable Law, this Agreement, and our regularly scheduled deletion protocols, policies, and procedures. All access during the period set forth in this Section 14.5 is provided to you subject to and governed by this Agreement.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “For thirty (30) calendar days following expiration or termination of this Agreement, Zoom will provide you access to retrieve your Customer Content, after which time your Customer Content will be deleted according to applicable Law, this Agreement, and our regularly scheduled deletion protocols, policies, and procedures.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “In addition to the foregoing permitted disclosures, Zoom also may disclose Customer Confidential Information to its consultants, contractors, service providers, subprocessors, and other third parties who are bound by confidentiality obligations at least as protective as the confidentiality provisions herein.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “Zoom also may disclose Customer Confidential Information to its consultants, contractors, service providers, subprocessors, and other third parties who are bound by confidentiality obligations at least as protective as the confidentiality provisions herein.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 13.8 Disclosures to Taxing Authorities . In accordance with applicable tax Law, and notwithstanding any of Zoom’s notice obligations that may arise under this Agreement, including but not limited to, Section 17.4 or pursuant to our Government Request Guide , we may disclose Customer information, including Customer Confidential Information, to a tax authority without notice to you before or after the disclosure.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Zoom may use consultants, contractors, service providers, subprocessors, and other Zoom-authorized third parties in connection with the delivery of the Services or Software. Zoom will ensure that any sharing of Customer Content with an authorized third party will be in compliance with applicable Law.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 17.4 Permitted and Compelled Disclosures . Notwithstanding the restrictions in this Section 17 and without limiting any other rights of Zoom, including our disclosure rights without notice in Section 13.8, we may disclose Customer Confidential Information received in connection with this Agreement, the Services, or Software to the extent authorized in our Government Request Guide or as required by applicable Law; provided, however, that Zoom will first notify you, unless providing such notice or timely notice is: (i) prohibited by applicable Law; or (ii) determined by Zoom in its sole discretion to be (a) a risk or potential risk of harm to a person or to the health of a person, (b) a risk or potential risk of damage to property, (c) an emergency, or (d) a threat to the Services, Software, or Zoom’s rights or property.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “In accordance with applicable tax Law, and notwithstanding any of Zoom’s notice obligations that may arise under this Agreement, including but not limited to, Section 17.4 or pursuant to our Government Request Guide , we may disclose Customer information, including Customer Confidential Information, to a tax authority without notice to you before or after the disclosure” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 33.1 Assignment; Successors and Assigns . You may not assign your rights or transfer any of your obligations under this Agreement without our prior express written consent. Any purported assignment or transfer in violation of this section is null and void. We may assign our rights or transfer any or all of our obligations under this Agreement at any time, without prior notice to you, (i) in the event of a merger, acquisition, or sale of all or substantially all of our assets, or (ii) to our affiliate. This Agreement is binding upon, and inures to the benefit of, the parties and their respective permitted successors and assigns.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Notwithstanding the restrictions in this Section 17 and without limiting any other rights of Zoom, including our disclosure rights without notice in Section 13.8, we may disclose Customer Confidential Information received in connection with this Agreement, the Services, or Software to the extent authorized in our Government Request Guide or as required by applicable Law; provided, however, that Zoom will first notify you, unless providing such notice or timely notice is: (i) prohibited by applicable Law; or (ii) determined by Zoom in its sole discretion to be (a) a risk or potential risk of harm to a person or to the health of a person, (b) a risk or potential risk of damage to property, (c) an emergency, or (d) a threat to the Services, Software, or Zoom’s rights or property” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ This Section 30 applies if you are a governmental or public entity, including the U.S. federal government or any agency or instrument of any federal, state, or local governmental entity. The Software is “commercial computer software” and the Services are “commercial services,” as defined at 48 C.F.R. § 2.101, and constitute “commercial computer software,” as defined in 48 C.F.R. § 252.227-7014(a)(1) and as used in 48 C.F.R. §§ 12.212 and 227.7202. This commercial computer software and related Documentation is provided to you and your End Users for use, by you and on your behalf, with only those rights as are granted to all other end users pursuant to the terms and conditions herein. This Agreement, including (by way of example only) Sections 12.3 Changes to Pricing; 12.7 Termination or Suspension for Nonpayment; 14 Term, Termination and Suspension; 15 Modifications to this Agreement; 25 Indemnification; 27 Dispute Resolution, Arbitration Agreement, and Class Action Waiver; 33.3 Governing Law; Jurisdiction and Venue, apply to you except to the limited extent you are prohibited by applicable Laws of your jurisdiction from accepting such terms. If and to the extent any provision of this Agreement is so prohibited, such provision will be deemed modified only to the extent reasonably necessary to conform to applicable Law, but to give maximum effect to this Agreement and the applicable terms as written.” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.