When AI features are enabled by the customer, Zoom authorizes Anthropic, OpenAI, Perplexity, ElevenLabs, Suki AI, and Sumit-AI to process Customer Content and context, including audio files converted to text, meeting content, and clinical notes where applicable.
This analysis describes what Zoom's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision identifies a conditional data sharing pathway activated at the customer's discretion when enabling AI features; data controllers using Zoom must assess whether their own privacy notices, records of processing, and data subject consent mechanisms reflect onward transfer of Customer Content to these six AI vendors.
Under this provision, enabling AI features in Zoom authorizes the sharing of Customer Content and context with multiple AI vendors in the United States and European Union under Standard Contractual Clauses. The agreement conditions this sharing on customer activation of AI features, meaning organizations that have not enabled AI features are not subject to this subprocessor pathway.
Cross-platform context
See how other platforms handle AI Vendor Authorization for Customer Content Processing and similar clauses.
Compare across platforms →"Anthropic may process the following data if AI features are enabled: Customer Content and context... OpenAI may process the following data if AI features are enabled: Customer Content and context... Perplexity may process the following data if AI features are enabled: Customer Content and context... Suki may process the following data if the AI Clinical Notes feature is enabled: Customer Content and contextExcerpt from Zoom's Sub-Processors
1) REGULATORY LANDSCAPE: This provision engages GDPR Article 28 requirements for subprocessor contracting and Chapter V requirements for international data transfers, as all named AI vendors process data in the United States under SCCs.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision identifies a conditional data sharing pathway activated at the customer's discretion when enabling AI features; data controllers using Zoom must assess whether their own privacy notices, records of processing, and data subject consent mechanisms reflect onward transfer of Customer Content to these six AI vendors.
Under this provision, enabling AI features in Zoom authorizes the sharing of Customer Content and context with multiple AI vendors in the United States and European Union under Standard Contractual Clauses. The agreement conditions this sharing on customer activation of AI features, meaning organizations that have not enabled AI features are not subject to this subprocessor pathway.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zoom.