STAR Registry Listing for
Zoom Video Communications, Inc.

Provides guidelines for CPAs to conduct SOC 2 engagements using
criteria from the AICPA (Trust Service Principles, AT 101) and the CSA Cloud Controls Matrix.

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about Zoom Video Communications, Inc.
Listed Since: 01/23/2017
Last Updated: 04/29/2025
Listed Since: 01/23/2017
Last Updated: 04/29/2025
STAR Level 1
Self-Assessment & Partner-Provided
Cloud Controls Matrix

CAIQ Self-assessment v4.0.2
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
(Deprecated)
Deprecated assessments do not necessarily indicate
non-compliance. In this case, the self-assessment
has not been updated in more than one year. We suggest
contacting this organization directly to request that
they submit an updated self-assessment.
STAR Level 2
Third-Party Audit
Organizations looking for a third-party audit can choose from one or more of the security and privacy audits and certifications.
Cloud Controls Matrix

STAR Attestation (CCMv4)
Provides guidelines for CPAs to conduct SOC 2 engagements using criteria from the AICPA (Trust Service Principles, AT 101) and the CSA Cloud Controls Matrix.