Compliance

Welcome to Zoom Compliance.

Zoom complies with applicable laws and regulations in the jurisdictions in which it operates.

The information provided here is for Zoom users who have questions about our terms, policies, and compliance. Visit the legal & compliance resources section for more information.

Certifications and Attestations

ISO

ISO 27001

Globally recognized security standard for implementing an ISMS

Learn more
SOC2

SOC 2

SOC 2 Type II report covering Security and Availability

Learn more
SOC2

SOC 2 + HITRUST

SOC 2 Type II report that includes controls relevant to HITRUST

Learn more
Star Level 2

CSA STAR Level 2

Registry of security and compliance controls for cloud service offerings

Learn more
FedRamp

FedRAMP Moderate

US Government security standard for cloud products and service

Learn more
DOD logo

DoD IL4

Cloud computing security requirements for the US Department of Defense

Learn more
Stateramp

StateRAMP

State and local government
cybersecurity standard for service providers

Learn more
CJIS Compliance

CJIS

Compliance Assessment Report

Learn more
Common Criteria

Common Criteria

Certification of security functionality of the Zoom client

Learn more
Cyber Essentials

UK Cyber Essentials Plus

UK Government information security assurance scheme

Learn more
iRAP

iRAP

Security controls assessment for Australian Government customers

Learn more

Assessments and Standards

Shared Assessments

SIG

Standardized security risk assessment questionnaire

Learn more
CAIQ Compliance

CAIQ

Standardized cybersecurity controls questionnaire for cloud computing

Learn more
TruSight

TruSight

Independent third party assessment for financial institutions

Learn more
CyberGRX

CyberGRX

Third party validated security assessment

Learn more
FISC

FISC

Security guidelines for Japanese banking and financial institutions

Learn more

Additional Resources

Privacy at Zoom
Legal & Compliance Resources