Zoom AI Companion can be used at work only under specific conditions. Our verdict for a typical 50–500 person company handling client or regulated data: Limited. Zoom says it does not train on customer content, and admins can control it — but meeting summaries still capture confidential discussions and require consent discipline. The policy questions are consent and distribution: who gets the summary of the meeting where the layoff list was discussed?
| Vendor | Zoom |
|---|---|
| Category | Meeting AI |
| Our tier verdict | Limited — Zoom says it does not train on customer content, and admins can control it — but meeting summaries still capture confidential discussions and require consent discipline. |
| Trains on your data? | No (per vendor terms). No. Zoom states it does not use customer audio, video, chat, or other communications content to train its or third-party AI models. |
| Data retention | AI Companion outputs (summaries, transcripts) are stored per account retention settings your admins control. |
| Admin controls | Account and group-level enablement, in-meeting disclosure to participants, and admin configuration of features. |
| Compliance certifications | SOC 2 Type 2; ISO 27001 (per Zoom’s published compliance documentation) |
| HIPAA / BAA | Zoom offers BAAs for healthcare customers; whether AI Companion features are covered under your BAA must be confirmed with Zoom — do not assume. |
No. Zoom states it does not use customer audio, video, chat, or other communications content to train its or third-party AI models.
Retention: AI Companion outputs (summaries, transcripts) are stored per account retention settings your admins control.
Zoom offers BAAs for healthcare customers; whether AI Companion features are covered under your BAA must be confirmed with Zoom — do not assume. As a rule: no signed Business Associate Agreement means no protected health information (PHI) — regardless of how good the vendor’s general security posture is.
HIPAA is the gate: Zoom offers BAAs for healthcare customers; whether AI Companion features are covered under your BAA must be confirmed with Zoom — do not assume. Until a BAA is confirmed in writing, treat Zoom AI Companion as off-limits for anything containing PHI — patient names, appointment details, clinical notes, even "anonymized" summaries that could be re-identified.
For SEC/FINRA-regulated firms the questions are recordkeeping and confidentiality: can communications through Zoom AI Companion be captured for books-and-records requirements, and do the data terms hold up in vendor due diligence? Account and group-level enablement, in-meeting disclosure to participants, and admin configuration of features.
The privilege question comes first: entering client-confidential facts into any third-party AI service must be evaluated as a potential disclosure. Zoom AI Companion’s no-training terms on corporate plans help, but confidentiality duties still require client-consent and matter-sensitivity judgment.
Why the tier verdict is "generic": Limited is the right starting classification for most 50–500 person companies — but a healthcare company, a law firm, and a SaaS startup should not have identical tool lists. The $79 policy kit classifies Zoom AI Companion and 24+ other tools specifically for your industry, company size, and the data your team handles.
And it goes stale: vendor data policies change quietly — a terms update can move a tool between tiers overnight. The $149/mo Monitor plan exists precisely because this page is only accurate as of July 2026.
Zoom AI Companion can be used at work only under specific conditions. Our verdict for a typical 50–500 person company handling client or regulated data: Limited. Zoom says it does not train on customer content, and admins can control it — but meeting summaries still capture confidential discussions and require consent discipline. The policy questions are consent and distribution: who gets the summary of the meeting where the layoff list was discussed?
No. Zoom states it does not use customer audio, video, chat, or other communications content to train its or third-party AI models.
Zoom offers BAAs for healthcare customers; whether AI Companion features are covered under your BAA must be confirmed with Zoom — do not assume. As a rule: no signed Business Associate Agreement means no protected health information (PHI) — regardless of how good the vendor’s general security posture is.
We classify Zoom AI Companion as Limited for a typical 50–500 person company. Zoom says it does not train on customer content, and admins can control it — but meeting summaries still capture confidential discussions and require consent discipline. Your own classification should reflect your industry, data types, and which plan/account type your company actually uses.
A 4-document AI policy kit — acceptable use policy, tool tier list, acknowledgment form, manager FAQ — that classifies Zoom AI Companion and 24+ other tools for your company, industry, and data. Generated in about 10 minutes.
Generate my policy kit →We re-check vendor terms monthly and alert you when Zoom AI Companion’s data policy changes — plus regenerate your whole kit so it never goes stale. This directory is a snapshot — Monitor is the live feed.
See Monitor plan →Already have an AI policy? Check it for gaps in 30 seconds →