Compliance frameworks, security audits, and quality certifications this company maintains.
Zoom holds SOC 2 Type II certification, providing independent verification that its video conferencing, phone, and contact center infrastructure meets rigorous security, availability, and confidentiality controls protecting enterprise customer data.
Zoom's information security management system is ISO 27001 certified, demonstrating a systematic approach to managing sensitive enterprise meeting data, recordings, and chat logs across its global cloud infrastructure.
Regulatory
FedRAMP Moderate
CertifiedZoom for Government holds FedRAMP Moderate authorization, enabling US federal agencies and state/local governments to use Zoom Meetings and Zoom Phone in compliance with federal cloud security requirements.
Zoom's healthcare-specific configuration supports HIPAA-compliant telehealth deployments, enabling hospitals, clinics, and health systems to conduct patient video consultations under a signed Business Associate Agreement.
Zoom complies with GDPR requirements for EU customers and employees, providing data processing agreements, data subject rights workflows, and configurable data residency options for EU meeting and recording data.
Zoom supports FERPA-compliant configurations for K-12 and higher education customers, enabling schools and universities to use Zoom Meetings for virtual instruction while protecting student education records.
Zoom is certified under ISO 27017 for cloud service security controls, covering the specific risks of cloud-hosted meeting, recording, and communication services used by Zoom's 220,000+ enterprise customers.
Zoom holds ISO 27018 certification for protection of personally identifiable information in public cloud services, governing how meeting participant data, chat messages, and recordings are handled in Zoom's cloud infrastructure.
Zoom's billing and payment processing infrastructure complies with PCI DSS standards, securing cardholder data for enterprise customers purchasing Zoom licenses and Zoom Phone services through direct subscription.
Zoom's desktop and mobile applications conform to WCAG 2.1 AA accessibility guidelines, supporting screen readers, keyboard navigation, and closed captioning to ensure users with disabilities can participate fully in Zoom meetings.