Compliance

Welcome to Zoom Compliance.

Zoom complies with applicable laws and regulations in the jurisdictions in which it operates.

The information provided here is for Zoom users who have questions about our terms, policies, and compliance. Visit the legal & compliance resources section for more information.

Certifications and Attestations

ISO

ISO 27001

Globally recognized security standard for implementing an ISMS

Learn more
SOC2

SOC 2 Type 2

SOC 2 Type 2 report covering Security, Availability, and Privacy

Learn more

SOC 2 Type 1

SOC 2 Type 1 report covering Security, Availability, and Privacy

Learn more
SOC2

SOC 2 + HITRUST

SOC 2 Type 2 report that includes controls relevant to HITRUST

Learn more
Star Level 2

CSA STAR Level 2

Registry of security and compliance controls for cloud service offerings

Learn more
FedRamp

FedRAMP Moderate

US Government security standard for cloud products and service

Learn more
DOD logo

DoD IL4

Cloud computing security requirements for the US Department of Defense

Learn more
Stateramp

StateRAMP

State and local government
cybersecurity standard for service providers

Learn more
CJIS Compliance

CJIS

Compliance Assessment Report

Learn more
Common Criteria

Common Criteria

Certification of security functionality of the Zoom client

Learn more
Cyber Essentials

UK Cyber Essentials Plus

UK Government information security assurance scheme

Learn more
iRAP

iRAP

Security controls assessment for Australian Government customers

Learn more
ACN

ACN

Italian supervisory body that certifies qualified trust service providers

Learn more
ENS Compliance

ENS

Security standards for all government agencies and public organizations in Spain

Learn more

BSI C5

Security of cloud services that leverages internationally recognized security standards

Learn more

Assessments and Standards

Shared Assessments

SIG

Standardized security risk assessment questionnaire

Learn more
CAIQ Compliance

CAIQ

Standardized cybersecurity controls questionnaire for cloud computing

Learn more
TruSight

TruSight

Independent third party assessment for financial institutions

Learn more
CyberGRX

CyberGRX

Third party validated security assessment

Learn more
FISC

FISC

Security guidelines for Japanese banking and financial institutions

Learn more
Whistic Validated Assessment

Whistic Validated Assessment

Independent assessment of widely used security controls and Standards in line with the Whistic Control Framework

Learn more

Additional Resources

Privacy at Zoom
Legal & Compliance Resources