Provision record
Zoom · Zoom Sub-Processors · View original document ↗

Subprocessors must satisfy equivalent DPA obligations

High severity High confidence Explicit document language Common · 288 of 352 platforms

Key Facts

Does Zoom require its subprocessors to satisfy equivalent obligations to those required from Zoom as a Data Processor under Zoom's Data Processing Agreement?
Zoom requires its subprocessors to satisfy equivalent obligations to those required from Zoom as a Data Processor under Zoom's Data Processing Agreement (DPA).
Stay ahead of the changes
Track Zoom and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what Zoom's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

By flowing down equivalent DPA obligations to subprocessors, Zoom extends its own data protection commitments through the subprocessing chain, rather than allowing a lower standard at the subprocessor level.

Consumer impact (what this means for users)

Zoom's subprocessors must meet the same data protection obligations Zoom is bound to under its Data Processing Agreement.

How other platforms handle this

Ancestry Medium

These companies are subject to contractual obligations governing privacy, data security, and confidentiality consistent with applicable laws.

Oura Medium

We also require these service providers to protect your personal information to at least the same standards that we do.

Tinder Medium

we may share data between our affiliates for the safety and security of our users and may take necessary actions if we believe you have violated these Terms, including banning you from our Services and/or our affiliates' services...

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Zoom requires its subprocessors to satisfy equivalent obligations as those required from Zoom (as a Data Processor) as outlined in Zoom's Data Processing Agreement (DPA)...

Excerpt from Zoom's Sub-Processors

Applicable regulations

BIPA
Illinois, USA
CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Zoom Sub-Processors
Entity
Zoom
Document last updated
July 6, 2026
Tracking information
First tracked
July 6, 2026
Last verified
July 9, 2026
Record ID
CA-P-067048
Document ID
CA-D-00930
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
144798ca3a98501441f47060f315ea5ef2278a02e7cf3920b5f7e32307047e01
Analysis generated
July 6, 2026 23:07 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Zoom
Document: Zoom Sub-Processors
Record ID: CA-P-067048
Captured: 2026-07-06 23:07:54 UTC
SHA-256: 144798ca3a985014…
URL: https://conductatlas.com/platform/zoom/zoom-sub-processors/provision/CA-P-067048/subprocessors-must-satisfy-equivalent-dpa-obligations/
Accessed: Aug. 19, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Zoom's Subprocessors must satisfy equivalent DPA obligations clause do?

By flowing down equivalent DPA obligations to subprocessors, Zoom extends its own data protection commitments through the subprocessing chain, rather than allowing a lower standard at the subprocessor level.

How does this clause affect you?

Zoom's subprocessors must meet the same data protection obligations Zoom is bound to under its Data Processing Agreement.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 288 platforms. See the full comparison.

Is ConductAtlas affiliated with Zoom?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zoom.