Skip to main content

Vendor Privacy Scorecard · Zoom

Zoom AI Companion: is it safe for client information?

Meeting summaries, transcripts and chat help inside Zoom.

Depends on plan and settings

Bottom line

Reasonable for internal meetings. Tell attendees when AI summaries are on, and confirm your BAA covers AI Companion before using it in patient conversations.

Does it train on your data? By plan

  • Paid Zoom Workplace plans: No training

    Zoom states it does not use your audio, video, chat or content to train its or third-party AI models.

What an auditor will ask

Trains AI on your data? No
Zoom's published policy says customer content is not used for training.
Retention you can control? Yes
Summaries and recordings follow your account retention settings.
Signs a HIPAA BAA? Depends on plan
Zoom offers a BAA for healthcare accounts. Confirm in writing which AI Companion features it covers.
Staff may read your content? No
Not reviewed for training purposes.

Security certifications

  • SOC 2 Type II
  • ISO/IEC 27001
  • FedRAMP (Zoom for Government)

Set it up the safe way

  1. Decide which meetings may use AI summaries and say so in your policy.
  2. Make sure attendees see the AI notice when summaries are on.
  3. Have someone review AI summaries before they are shared or filed.

Zoom trust centerBusiness privacy terms

Summarized from Zoom's published terms, last checked 10/1/2026. Vendors change terms. Confirm every point against the agreement you actually signed. This is not legal advice.

See every vendor scorecard

Using Zoom AI Companion at work? An unvetted tool can cost you your license.

When an employee pastes client information or confidential files into Zoom AI Companion without the correct safeguards, licensing boards and regulatory bodies hold you responsible. AI Governance Rule Watch™ documents your approved tool roster, vendor reviews, and staff guidelines in permanent diligence records ready for any audit.

Founding member rate. Cancel anytime. Plus applicable taxes. Renews until canceled. Not legal advice and not a compliance certification.