Compliance

Welcome to Zoom Compliance.

Zoom complies with applicable laws and regulations in the jurisdictions in which it operates.

The information provided here is for Zoom users who have questions about our terms, policies, and compliance. Visit the legal & compliance resources section for more information.

Certifications and Attestations

ISO 27001

Globally recognized security standard for implementing an ISMS

Learn more

ISO 27001 / 17 / 18

Globally recognized security standard for implementing an ISMS

Learn more

ISO 27701

Data privacy framework guiding with GDPR and other regulations

Learn more

SOC 2 Type 2

SOC 2 Type 2 report covering Security, Availability, and Privacy

Learn more

SOC 2 + HITRUST

SOC 2 Type 2 report that includes controls relevant to HITRUST

Learn more

CSA STAR Level 2

Registry of security and compliance controls for cloud service offerings

Learn more

FedRAMP Moderate

US Government security standard for cloud products and service

Learn more

DoD IL4

Cloud computing security requirements for the US Department of Defense

Learn more

StateRAMP

State and local government cybersecurity standard for service providers

Learn more

CJIS

Compliance Assessment Report

Learn more

UK Cyber Essentials Plus

UK Government information security assurance scheme

Learn more

iRAP

Security controls assessment for Australian Government customers

Learn more

ENS

Security standards for all government agencies and public organizations in Spain

Learn more

BSI C5

Security of cloud services that leverages internationally recognized security standards

Learn more

gpaNRW

Zoom's gpaNRW Certificate

Learn more

ISMAP

Evaluates cloud service providers against Japanese government security requirements.

Learn more

ETDA

Promotes digital governance of electronic transactions under the Electronic Transactions Act

Learn more

PCI DSS

PCI compliant solution for Zoom Phone leveraging an integration with PCIpal

Learn more

Assessments and Standards

SIG

Standardized security risk assessment questionnaire

Learn more

CAIQ

Standardized cybersecurity controls questionnaire for cloud computing

Learn more

TruSight

Independent third party assessment for financial institutions

Learn more

CyberGRX

Third party validated security assessment

Learn more

FISC

Security guidelines for Japanese banking and financial institutions

Learn more

Whistic Validated Assessment

Independent assessment of widely used security controls and Standards in line with the Whistic Control Framework

Learn more

HECVAT

The Higher Education Community Vendor Assessment Toolkit (HECVAT)

Learn more

Workvivo Certifications and Attestations

ISO 27001

Globally recognized security standard for implementing an ISMS

Learn more

SOC 2 Type 2

SOC 2 Type 2 report covering Security, Availability, and Privacy

Learn more

CAIQ

Standardized cybersecurity controls questionnaire for cloud computing

Learn more

Additional Resources