Content protected by Customer Managed Key

Each organization can decide what types of assets get encrypted with its key when stored permanently in the cloud. The list of potential assets depends on what Zoom services the organization uses. For example, if cloud meeting recordings are enabled and the meeting organizer is a licensed CMK user and records the meeting, the associated files are encrypted, even if some of the meeting attendees are not CMK users. While most services follow the same approach, there are some specifics that apply to certain services, as described in the following list (with their Service ID as it appears in the encryption context).

If you enable an AI Companion feature and enable CMK encryption for a related type of asset, then Zoom will encrypt all related assets, including the AI-generated ones, but if the feature uses a third-party model provider, that provider may only encrypt the data they receive with regular encryption.

For more information about Advanced CMK Chat Encryption (ACCE) and client-side encryption (CSE), click here. 

Limitations for content protected by Customer Managed Key (CMK)

Table of Contents

Content that can be protected by Customer Managed Key

 
AssetService IDDescription
Internal assets
Meeting/webinar recordings0001Cloud meeting and webinar recordings, including transcripts, summaries, and next steps, can be encrypted along with in-chat text messages. Polls (Q&A, surveys, and reports) and in-meeting file transfers are not encrypted.
Clips0010The video clip and associated comments (but not the custom avatar) can be encrypted.
Whiteboards0011Whiteboards (drawings, text, images, and comments) created by licensed users can be encrypted.
Phone recordings 0002Phone recordings, transcripts, and summaries can be encrypted not only for individual (licensed) users but also for all call queues.
Phone voicemails 0003Voicemail recordings, transcripts, and summaries can be encrypted not only for individual (licensed) users but also for all call queues.
Compliance archives0006 If compliance archival is enabled, meetings, webinars, phone recordings, and in-chat messages can be encrypted.
Phone MMS messages0009MMS (multimedia messaging service), including text, pictures, and video, can be encrypted.
User calendar access0004The token or password the Zoom client uses to access Google or Microsoft calendaring can be encrypted.
Zoom Room calendar access0005 The token or password Zoom Room uses to access Google or Microsoft calendaring is encrypted.
Other access0007 Other access tokens, such as for Microsoft Teams, can be encrypted.
Team Chat0008All messages, files, emojis, and attachments can be encrypted if any member of the channel or chat is a CMK-licensed user, unless Advanced Chat Encryption is enabled. Reaction emojis and giphys (and the associated URLs) will not be encrypted, as they are static resources. Code snippets are encrypted if the creator is a CMK-licensed user. Chats between two users of different organizations will be encrypted with both organizations' keys if both users have licensed CMK. If only one person is a CMK-licensed user, a Zoom-provided key will be used for the non-licensed user. An encrypted channel is encrypted using the owner's key, even if external participation is allowed.
Revenue Accelerator0012Analytical data such as thumbnails, OCR data, transcripts, meeting highlights, and certain AI-generated data.
Events0013Meetings/Webinar, Uploads to Content Library
Notes0017Content generated using Zoom Notes.
Note: This does not include content from My Notes.
Docs0018Content generated using Zoom Docs. 
Personal identifiers 9999Pictures used for Smart Name Tags in Zoom Rooms, as well as other personal identifiers.
Note: This category does not need to be enabled; the data is CMK-encrypted for the whole account regardless of whether a user has licensed CMK or not.
Zoom Contact Center
Recording and transcripts0014Call recordings and recording transcripts for calls made through Zoom Contact Center. 
Voicemails and voicemail transcripts0015Voicemail and voicemail transcripts for calls made through Zoom Contact Center. 
Messaging transcripts0016Transcripts for SMS messages sent through Zoom Contact Center.  
Note: Does not include attachments from social channels and SMS.
Email transcripts and files0025Transcripts and attachments for emails sent through Zoom Contact Center.
AI Companion
Conversations in the AI Companion panel*0019 Prompt and responses in the AI Companion side panel. 
File history*0020Files uploaded to AI Companion.
Email history*0021Emails generated in Zoom Mail utilizing the AI Companion Email compose feature. 
Custom AI Companion
Custom AI files*0022 Files uploaded to Custom AI Companion.
Connector credentials*0023Credentials are utilized for third-party connectors with Custom AI Companion.
CMK Hybrid
Hybrid chat data1001Client-side encrypted chat messages managed via Team Chat hybrid. 

 *Note: Large organizations can also enable the encryption of certain log and index data used for searching and AI when it is stored at rest.