Skip to main content
Zoom logo

Zoom

GDPR evidence

Modernize workflows with Zoom's trusted collaboration tools: including video meetings, Zoom Chat, VoIP phone, webinars, whiteboard, contact

zoom.usCollaborationLast verified 2 Nov 2026
Request the report Are you Zoom?
GDPR mark, CertReports state No public evidenceNo public evidence

Zoom and GDPR

CertReports found no public GDPR evidence for Zoom as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.

Are you the vendor? Add evidenceVendor trust centre

Evidence

Vendor-statedVendor states ISO/IEC 27701 on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
1 Nov 2026ISO/IEC 27701
Live page Snapshotsha256 33e0d77e30
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 903abbdd3f
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 0e084ad857
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 0a5eceae33
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 8f5a231586
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 f5bbac9d5b
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 73c9e5bd1f
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 7572e793a3
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 bc89d5044d
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 abc48c3813
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 8b781d642c
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 6f19cca5b9
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 a29ea43a28
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 2dffc54737
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 8d342ac262
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 e51c280bdd
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026ISO/IEC 27701
Live page Snapshotsha256 cded97bc4c
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 642c96b2da
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 0149aa8475
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 465fc9c10e
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 7bd70c0140
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
20 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 c54cb8fb3b
Zoom trust centre (Drata)
Vendor trust centre · HTTP 200
17 Sep 2026ISO/IEC 27701
Live page Snapshotsha256 24b1483848
This is wrong
VerifiedActive: UK Extension Certification, SW-US Certification, EU-US Certification
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Issued or listed
18 Nov 2016
Expires or valid through
19 Dec 2026
Scope
Please see Zoom's global DPA https://explore.zoom.us/docs/doc/Zoom_GLOBAL_DPA.pdf Categories of personal data processed by Zoom: Customer Content Data: Zoom Account Profile Info: Data associated with the end user's Zoom account, profile picture, password, company name, and Customer's preferences. This will include: • Zoom unique user ID, • profile picture (optional) Diagnostic Data: Meeting metadata: Metrics about Service usage, including when and how meetings were conducted). This category includes: • event logs (including action taken, event type and subtype, in-app event location, timestamp, client UUID, user ID, and meeting ID) • meeting session information, including frequency, average and actual duration, quantity, quality, network activity, and network connectivity • number of meetings • number of screen-sharing and non-screen-sharing sessions • number of participants • meeting host information • host name • meeting site URL • meeting start/end Time • join method • performance, troubleshooting and diagnostics information Telemetry data: Data collected from locally installed software (applications and browser information about the deployment of Zoom Services and related systems environment / technical information. This includes: • PC name • microphone • speaker • camera • domain • hard disc ID • network type • operating system type and version • client version • MAC address • event logs (including action taken, event type and subtype, in-app event location, timestamp, client UUID, • user ID and meeting ID) • service logs (information on systems events and states) Other Service Generated Data: • spam identification • push notifications • Zoom persistent unique identifiers such as UUID or user ids that are combined with other data elements including: • IP address • Data center • PC name • Microphone • Speaker • Camera • Domain • Hard disc ID • Network type • Operating System Type and Version • Client Version • IP Addresses along the Network Path Support Data: • problem description, post-meeting feedback
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026Zoom: Active: UK Extension Certification, SW-US Certification, EU-US Certification
Live pagesha256 1c52639813
This is wrong
What GDPR means, and what it does not

"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.

Read the GDPR guide and browse all vendors with evidence

Questions buyers ask

Is Zoom GDPR compliant?

There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Alternatives with GDPR evidence

Similar vendors (shared product tags or the Collaboration category) whose GDPR row is verified or vendor-stated, ranked by similarity.

Taskworld logo

Taskworld

Collaboration

Taskworld is a cloud-based collaboration platform created by Fred Mouawad

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
2 stated2 Nov 2026
Theta Lake logo

Theta Lake

Collaboration

Theta Lake’s multi-award-winning product suite provides patented compliance and security for modern collaboration platforms, enabling

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedISO 42001 mark, CertReports state Vendor-stated
1 verified · 6 stated2 Nov 2026
CircleCo logo

CircleCo

Collaboration

Build a home for your community, events, and courses — all under your own

SOC 2 mark, CertReports state VerifiedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedSOC 3 mark, CertReports state VerifiedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
2 verified · 3 stated2 Nov 2026

Understand GDPR evidence

All articles