Customer Content License Grant

What it is

Users grant Zoom a perpetual, worldwide, sublicensable, and transferable license over Customer Content for the Permitted Uses defined in the agreement, which include performing obligations, complying with law, and enforcing acceptable use policies. The agreement separately states that communications-like content such as audio, video, chat, and screen sharing is not used to train AI models.

Why it matters (compliance & governance perspective)

This provision establishes a perpetual license over Customer Content, including meeting recordings, transcripts, chat messages, files, and other materials, that extends beyond the subscription term and is sublicensable and transferable to third parties within the scope of Permitted Uses. Enterprise compliance teams should assess whether the perpetual and transferable nature of this license is compatible with their data governance obligations, particularly where Customer Content includes personal data subject to GDPR or CCPA rights such as deletion and portability.

Clause Stability Stable

Consumer impact (what this means for users)

The agreement requires users to grant Zoom a perpetual, worldwide, sublicensable, and transferable license over Customer Content, which the agreement defines to include transcripts, recordings, files, documents, and other materials generated during use of the services. The AI training carve-out explicitly excludes communications-like content such as audio, video, chat, screen sharing, and attachments from being used to train Zoom or third-party AI models.

What you can do

Institutional analysis (regulatory & governance intelligence)

1. REGULATORY LANDSCAPE: The perpetual and transferable license over Customer Content implicates GDPR Articles 6, 17, and 20 where Customer Content contains personal data of EU or UK data subjects, as the lawful basis for a perpetual license and its compatibility with data subject rights to erasure and portability requires evaluation. The CCPA is engaged for California residents whose personal data may be included in Customer Content. The FTC Act may be engaged if the scope of the license is not clearly disclosed at the point of consent. 2. GOVERNANCE EXPOSURE: High. The perpetual, sublicensable, and transferable nature of the license over Customer Content, which includes recordings, transcripts, and chat logs, creates ongoing data governance obligations for organizations whose employees, customers, or other data subjects appear in that content. The Permitted Uses definition constrains but does not eliminate processing scope uncertainty, particularly regarding sharing with subprocessors and authorized third parties. 3. JURISDICTION FLAGS: EU and UK organizations face the highest exposure given GDPR and UK GDPR data subject rights obligations that may be in tension with a perpetual license. California residents have additional rights under CCPA. Organizations in healthcare contexts should assess HIPAA business associate agreement requirements separately. 4. CONTRACT AND VENDOR IMPLICATIONS: Enterprise procurement teams should confirm whether a separate Data Processing Agreement or GDPR-compliant processing addendum supplements or limits the scope of this license grant, as the base Terms of Service alone may not satisfy GDPR Article 28 processor requirements. The sublicensable and transferable nature of the license warrants explicit review of third-party subprocessor lists. 5. COMPLIANCE CONSIDERATIONS: Legal teams should map the Customer Content categories their organization generates against the Permitted Uses definition to assess ongoing processing scope. Data mapping exercises should account for the perpetual duration of the license when calculating retention obligations and data subject rights response timelines. Organizations should confirm whether Zoom's Privacy Statement and any applicable DPA modify or limit the scope of this license.

Applicable agencies

Provision details

Other risks in this policy

• Aggregate Liability Cap at Twelve Months of Charges high
• All Payments Non-Cancelable and Non-Refundable high
• Automatic Renewal Unless Timely Notice Given high
• Class Action and Representative Action Waiver high
• Customer Must Comply with Export Control Laws high
• Customer Responsible for End User Compliance high