Vendor registry · Workplace tools
Zoom: DPA, subprocessors and transfers
Last checked 16 September 2026. Changes to this record are tracked.
- Contracting legal entity
- Zoom Communications, Inc.
- Country of registration
- United States
- Transfer mechanism
- EU-US Data Privacy Framework (DPF)
A US certification scheme covered by an EU adequacy decision. Transfers to a certified US organisation need no further mechanism for the certified scope.
- Data processing agreement
- https://media.zoom.com/download/assets/Zoom_GLOBAL_DPA.pdf/2906b5b6b86f11ef9599a6f347fbf652
- Subprocessor list
- https://www.zoom.com/en/trust/subprocessors/
- Security or trust page
- https://www.zoom.com/en/trust/
- Data regions
- EU, US
What to put in your subprocessor list
A ready row. Replace the purpose with what your client actually uses Zoom for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| Zoom | Zoom Communications, Inc. | US | Workplace tools | DPF | https://media.zoom.com/download/assets/Zoom_GLOBAL_DPA.pdf/2906b5b6b86f11ef9599a6f347fbf652 |