Monitor Zoom compliance pages

Video conferencing platform — meetings, webinars, phone, contact center, and Zoom AI Companion features.

Zoom publishes several compliance and legal pages that change over time. Under GDPR Article 28, data controllers using Zoom as a processor must continuously verify that "sufficient guarantees" remain in place — which means tracking changes to these pages as they happen. Below are the 4 most relevant pages, what typically changes on each, and ready-to-paste monitoring prompts.

Monitor all 4 pages automatically

Choose the pages that matter most and get an alert when something meaningful changes. The free plan covers 3 monitors.

Start with 3 free monitors →

Pages to monitor

Sub-processor list

https://www.zoom.com/en/trust/subprocessors/ ↗

Typical change frequency: quarterly

What to monitor

  • AI Companion sub-processors (training and inference providers)
  • New data center partners and regional infrastructure
  • Sub-processors for Zoom Phone (carrier partners)
  • Contact Center platform sub-processors
  • Transcription and captioning third parties

Suggested monitoring prompt

Alert me when Zoom updates sub-processors, especially for AI features, Zoom Phone, or Contact Center. Report name and purpose.

Data Processing Agreement

https://zoom.us/gdpr ↗

Typical change frequency: yearly

What to monitor

  • Changes to AI Companion data usage (training opt-outs, processing scope)
  • Updates to data residency options and commitments
  • Modifications to recording and transcript handling
  • Changes to cross-border transfer mechanisms

Suggested monitoring prompt

Monitor the Zoom DPA for changes to AI Companion data usage, data residency, recordings handling, or transfer mechanisms.

Privacy policy

https://www.zoom.com/en/trust/privacy/privacy-statement/ ↗

Typical change frequency: yearly

What to monitor

  • Changes to AI training data policies (Zoom has had controversial updates here)
  • Updates to recording and transcript retention
  • New data collection from meeting metadata
  • Changes to customer-of-customer (meeting participant) data handling

Suggested monitoring prompt

Alert me when Zoom changes AI training data policies, recording retention, or participant data handling. These are historically high-controversy changes — report in detail.

Status page

https://www.zoomstatus.com/ ↗

Typical change frequency: weekly

What to monitor

  • Meeting connectivity incidents
  • Authentication and SSO outages
  • Zoom Phone or Contact Center disruptions
  • Recording and cloud storage issues

Suggested monitoring prompt

Alert me on Zoom incidents affecting meetings, authentication, Zoom Phone, or recordings. Ignore minor issues.

Compliance certifications

SOC 2 Type IIISO 27001ISO 27701HIPAAFedRAMP ModerateGDPR

Data location

Hosting locations: United States, European Union, United Kingdom, Canada, Australia, Japan, Singapore

EU-US Data Privacy Framework: Certified

Related

Ready to start monitoring Zoom?

Set up monitoring free →