AI Assistants

Zoom AI Companion Vendor Risk Profile

Zoom AI assistant for meeting summaries, action items, and content generation within Zoom.

Last verified: September 1, 2026Review Required

Risk Score

/100

AI Trust

/100

Compliance Overview

HIPAA Compatible

—

BAA Available

—

BAA Notes

Available for Zoom Workplace Pro, Business, and Enterprise accounts with an active BAA. [Enabling or disabling meeting summary with AI](https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0057960)

Hosting Model

—

Healthcare Focused

—

Approval Status

Review Required

Risk Level

—

Last Reviewed

—

Last Verified

September 1, 2026

Verification reflects VNDRIQ's latest automated source check. Editorial review is a separate human assessment.

AI & Data Policies

AI Training Policy

No; Zoom does not use communications-like customer content (audio, video, chat, etc.) to train its own or third-party AI models. [Zoom launches AI Companion 3.0](https://news.zoom.com/zoom-launches-ai-companion-3-0)

Data Retention Policy

AI Companion side panel searches data from the last 90 days. [AI Companion Security and Privacy](https://zoom.com/en/products/ai-assistant/resources/privacy-security)

Support Access Risk

—

Executive Summary

Primary Use Cases

Zoom AI assistant for meeting summariesaction itemsand content generation within Zoom.

Key Procurement Considerations

Integration ReadinessCustomer Support InformationCompliance Documentation

Security Highlights

Encryption at rest

Vendor Trust Score

Limited Trust Data

5

/100

HIPAA Readiness0*
BAA Availability0*
Security Controls33
Governance Documentation0*
Transparency0*
Product Maturity0*
Healthcare Focus0*
Integration Readiness0*
Customer Support Information0*
Compliance Documentation0*

Informational framework based on publicly available and registry data. Not a certification or guarantee. Asterisks indicate categories with limited registry data.

Security & Compliance Dashboard

Standardized view of available registry security information. Not Verified indicates the registry has no documented data.

HIPAA StatusNot Verified
BAA AvailabilityNot Verified
SOC 2SOC 2 Type 2. [Privacy at Zoom](https://explore.zoom.us/en-us/trust/privacy.html)
ISO 27001Maintains third-party certifications and attestations available via the Trust Center. [Zoom Security and Compliance FAQ](https://www.zoom.com/en/trust/legal-compliance/faq)
HITRUSTZoom aligns its controls to the Healthcare Industry Trust Report (HITRUST) framework. [Zoom Security and Compliance FAQ](https://www.zoom.com/en/trust/legal-compliance/faq)
Encryption at RestYes
Encryption in TransitYes
Single Sign-On (SSO)Not Verified
Multi-Factor AuthNot Verified
Audit LoggingNot Verified
Role-Based AccessNot Verified
Data ResidencyNot Verified
Public Security DocsNot Verified
Incident ResponseNot Verified

AI Governance Maturity

Foundational9/100

Minimal governance documentation; early-stage controls.

Foundational
Developing
Established
Advanced
Leading

Assessed Indicators

Governance Documentation
Human Oversight
AI Policies
Compliance Transparency
Risk Management
Security Controls
Operational Governance

Procurement Risk Considerations

Informational considerations for procurement evaluation, not definitive ratings.

Governance Maturity

Foundational

Elevated Consideration

Security Readiness

33/100 security controls

Elevated Consideration

Compliance Readiness

0/100 compliance documentation

Elevated Consideration

Integration Complexity

API not verified — verify integration path

Moderate Consideration

Operational Complexity

Not Verified

Vendor Transparency

0/100 transparency

Elevated Consideration

Healthcare Experience

Healthcare focus not verified

Moderate Consideration

Documentation Completeness

0/100 governance docs

Elevated Consideration

Vendor Lifecycle & Change History

Available registry milestones. Detailed change tracking expands as the registry matures.

Profile Updated

2026-09-01

Last Website Review

2026-09-01

Last Verification

2026-09-01

Registry Added

2026-08-17

Regulated Use Assessment

VNDRIQ does not classify vendors as HIPAA Compliant, SEC Compliant, or FINRA Approved unless official evidence exists. Vendor suitability depends on each organization's governance requirements, contractual obligations, deployment model, risk tolerance, and applicable regulations.

Quick Facts

Category

AI Assistants

Risk Score

/100

AI Trust Score

/100

Last Verified

September 1, 2026

Request Vendor Evaluation

Get a structured risk assessment and governance recommendation for Zoom AI Companion.

Vendor Governance

Approval Tier

Restricted / Review Required

BAA Verification

Not Started

PHI Exposure

—

AI Risk Level

—

Last Review

2026-09-01

Verification Status

Verified

Last Verified

2026-09-01

Vendor Completeness Score

65/100

Partial

Website Present

+20

Category Assigned

+15

Approval Status Present

+15

BAA Status Present

+15

PHI Exposure Classified

+10

Risk Level Present

+10

Review Date Present

+10

Verification Notes Present

+5

Trust & Transparency

Last Reviewed Date

Not yet reviewed

Review Frequency

Monthly

Vendor Verification Process

Every vendor is reviewed against public documentation, trust centers, and contract evidence before classification.

Editorial Independence Statement

VNDRIQ classifications are independent of vendor relationships. Ratings reflect available evidence and governance risk only.

Registry Update Policy

The registry is reviewed on a monthly cycle. All updates are editor-reviewed before publication; no automated public data changes.

Editorial Methodology

Vendors are evaluated across compliance, security, AI governance, and enterprise readiness. Each review follows a standardized 12-point checklist covering website, HIPAA, BAA, security, compliance, AI capabilities, deployment, pricing, product changes, ownership, integrations, and documentation.

Trust Signals

Editorial Review StatusPending Review
Last ReviewedNot Verified
Last Updated2026-09-01
Verification Date2026-09-01
Registry ConfidenceNot Verified
Governance MaturityFoundational
Trust Score5/100
Compliance SnapshotSOC2
Security SnapshotEncryption

Vendor Benchmarking

Comparison against registry averages where supported. Benchmarks are informational and based on registry data.

Governance Maturity9 ↑ 5 vs avg 4
Security Readiness33 ↑ 23 vs avg 10
Documentation Completeness0 ↑ 0 vs avg 0
Integration Readiness0 ↑ 0 vs avg 10
Healthcare Specialization0 ↑ 0 vs avg 15
Compliance Transparency0 ↑ 0 vs avg 7
Overall Trust Score5 ↑ 0 vs avg 9
This vendorRegistry average

Ask VNDRIQ About This Vendor

Ask questions about Zoom AI Companion using registry data.

Ask VNDRIQ About Healthcare AI Vendors

Explore healthcare AI vendors, compare capabilities, identify documentation gaps, and understand procurement and governance considerations using information from the VNDRIQ registry.

Suggested prompts

VNDRIQ provides vendor intelligence and educational procurement support. Responses do not constitute legal, medical, cybersecurity, compliance, or procurement advice. Vendor information may be incomplete, vendor-reported, under review, or subject to change.

Do not enter patient information, PHI, passwords, or sensitive data.

VNDRIQ vendor ratings are for operational risk screening and governance support. Final approval should include legal, compliance, security, and contract review before any PHI or regulated data is shared. Risk classifications are based on available public information and internal review at time of last verification.