Zoom
Certifications & attestations
| Certification | Status | Source | Last verified |
|---|---|---|---|
| SOC 2 Type II Covers Security, Availability, Confidentiality, and Privacy. A SOC 2 + HITRUST report is also offered. | Verified | vendor source ↗ | June 10, 2026 |
| ISO 27001 Also holds ISO 27017/27018 and ISO 27701. | Verified | vendor source ↗ | June 10, 2026 |
| FedRAMP (Moderate) Applies to Zoom for Government — scope differs from the standard product. Zoom for Government also lists DoD IL4, GovRAMP, and CJIS. | Verified | vendor source ↗ | June 10, 2026 |
| CSA STAR Level 2 | Verified | vendor source ↗ | June 10, 2026 |
| BSI C5 | Verified | vendor source ↗ | June 10, 2026 |
→ Direct answer: Does Zoom have SOC 2?
Subprocessors
22 subprocessors on record. Vendor's own list: source ↗
| Subprocessor | Purpose | Location | First seen |
|---|---|---|---|
| Amazon Web Services | Cloud service provider (real-time meeting/webinar traffic, cloud recordings) | Australia, Brazil, Canada, Europe, India, Japan, Singapore, US and other regions | 2026-06-10 |
| Anthropic | Intelligent Features (AI) service provider | United States | 2026-06-10 |
| Authzed, Inc. | Authorization / permissions service (developer tools) | United States | 2026-06-10 |
| Cloudflare | Content delivery network and security | Global (incl. EU, United States) | 2026-06-10 |
| Eleven Labs Inc. | Intelligent Features service provider (text-to-speech, voice AI) | United States, European Union | 2026-06-10 |
| Google Cloud Platform | Cloud service provider and Intelligent Features service provider | United States, European Union, Uruguay, Chile, Taiwan, Japan | 2026-06-10 |
| MaestroQA | Support quality assurance | Ireland, United States | 2026-06-10 |
| Microsoft | Cloud service provider (Switzerland); Azure AI Speech, speech-to-text | Switzerland; multiple regions for Azure AI Speech | 2026-06-10 |
| MongoDB | Developer database platform | United States | 2026-06-10 |
| OneTrust | Data subject requests portal, cookie preference center | United States | 2026-06-10 |
| OpenAI | Intelligent Features (AI) service provider | United States, European Union | 2026-06-10 |
| Oracle | Cloud service provider | Mexico, United States, Saudi Arabia | 2026-06-10 |
| Perplexity | Intelligent Features (AI) service provider | United States | 2026-06-10 |
| Qualtrics | Feedback, reviews, and survey responses | Germany, United States | 2026-06-10 |
| Sendbird | Chat functionality for Workvivo customers (optional) | European Union, United States | 2026-06-10 |
| SendSafely | Encrypted file transfer service | United States | 2026-06-10 |
| ServiceNow | Cloud-based customer service platform | Germany, United States | 2026-06-10 |
| Suki AI | Intelligent Features (AI) service provider | United States | 2026-06-10 |
| Sumit-AI | AI speech, speech-to-text service | Europe, United States | 2026-06-10 |
| TaskUs | Support providers | Philippines, Croatia | 2026-06-10 |
| Twilio | Notifications | United States, European Union | 2026-06-10 |
| Stripe | Payment processing (Zoom Events only) | United States | 2026-06-10 |
Hosting & data residency
- Infrastructurenot yet recorded
- Data residencynot yet recorded
Trust documents & links
- Trust centerhttps://www.zoom.com/en/trust/
- Security pagehttps://www.zoom.com/en/trust/security/
- DPAnot yet recorded
- Status pagehttps://status.zoom.us
Security incidents & disclosures
No incidents on record in the public sources we track, as of June 10, 2026. Absence of a record is not a guarantee — see methodology.
Change history
2026-06-10
Vendor added to StackPosture — initial snapshot from published trust documentation. Verification pass pending.
2026-06-10
Verification pass: SOC 2 Type II, ISO 27001, FedRAMP Moderate (Zoom for Government), CSA STAR Level 2, and BSI C5 confirmed against Zoom's compliance page, each with a dedicated source page.
2026-06-10
Subprocessor list extracted from Zoom's published subprocessors page (zoom.com/en/trust/subprocessors): 21 authorized subprocessors plus Stripe for Zoom Events. Notable: four AI 'Intelligent Features' providers (Anthropic, OpenAI, Perplexity, Suki AI) plus Eleven Labs and Microsoft Azure AI Speech.