Black Snow IntelligenceBlack Snow Intelligence
Black Snow Report

Zoom

Method v1.6As At 2026-08-0719 Surfaces Read1 Offering Assessed

Your own published record, as at 2026-08-07.

Your Details

The Macro Picture17

Red · Adverse
1
of 17 banded observations across 1 offering band Adverse. 2 were never measured.

1 conditional row (Hosting Locality = EU-Hosted) sit outside these counts. A Variant is a stated deployment mode, not a published offering, and the Grid Standard holds it to its own band.

What Is Published8

Your Own Words3

Where personal data of users in the EEA, Switzerland, or the UK is being transferred to a recipient located in a country outside the EEA, Switzerland, or the UK which has not been recognized as having an adequate level of data protection, we ensure that the transfer is governed by the European Commission's standard contractual clauses or other lawful mechanisms.
International Data Transfers. Three mechanisms are named across the instrument set and each is separately evidenced: the Data Privacy Framework, Standard Contractual Clauses, and Binding Corporate Rules against exactly one recipient. · Source
Under certain laws, residents may also be permitted to opt out of certain profiling relating to automated processing analyzing certain categories of an individual's information that would produce a legal or similarly significant effect. Zoom does not engage in this type of profiling of individuals.
Sensitive personal information / profiling. An explicit published position rather than a silence. · Source
With respect to third-party generative AI model providers used as part of Zoom AI's federated approach, Zoom has zero data retention policies in place, which provide that they do not retain customer content, with limited exceptions for trust and safety purposes, such as to detect and report CSAM.
Data Retention. A customer-operable zero-retention control for meeting summary transcripts is published alongside it, and customers may set custom retention periods. No fixed vendor-side period is published for AI inputs and outputs generally. · Source

Parties You Name22

See which of these are assessed in this register

Register Check3

AI Role By Offering1

Assessment Basis

Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.

Read from 19 first-party surface(s) across 1 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.

Fact Record
Version 1.0, dated 2026-08-07
Standards Commit
3fc7d3917a4d
Register Control Quality
Both Views

Verification And Challenge

Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-07. Correspondence route as recorded on this card input: ror@blacksnowintel.com.

What A Machine Could Not Establish1

1 question is open and 7 are established, read as at 2026-08-07 under method v1.6.

The One Thing To Publish First

Publish it: publish a retention period.

Amber · PartialData Retention

Disclosed, but incompletely.

Where To Put It

This was read on your own page at https://www.zoom.com/en/trust/privacy/privacy-statement/. That is the page a reader already reaches for and does not find it on, so it is the page to correct first.

Where Others Stand

21 organisations in the register publish a retention period. You publish on it, but not completely.

What A Published Answer Looks Like

Messages: 1 Year live, 7 years archive. Contacts, Distribution Lists, Events, Assets: Ongoing live, 7 years archive. Activity Stream, Activity Logs, Database: 1 year live, 7 years archive. Detailed Message Logs, Message Logs, Web Logs, Application Logs, Database Logs: 7 years archive.

A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on published terms. Claim tier Quoted. The organisation that published it is not named.

One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.

Still Open

Deep Dive

The full assessment, plus consulting on what to fix.

Reviewing your record is free.