Products · Data residency & privacy
Data Residency & Privacy Compliance

Customer Managed Keypaid

Your own encryption keys for Zoom data stored in the cloud: you hold the key, not the platform.

What it is

Customer Managed Key inverts the usual arrangement: the data is stored in the Zoom cloud, but the key it is encrypted with is generated and held by you. Without your key there is nothing to decrypt.

The key can be stored in AWS KMS, Azure Key Vault, OCI Vault or on your own premises. Generation and decryption requests go through the Zoom key broker, and access to the data can be tracked and audited.

Protection covers meeting recordings, transcripts, AI Companion summaries, voicemail, messages, search metadata and a number of other assets.

This is exactly what your own cryptographic perimeter means: you do not simply trust the vendor, you technically limit its access.

Your keyAWS, Azure, OCI or your own premises
Zoom Key Brokerdecryption request
Data in the cloudencrypted with your key
What the

What you get

You hold the key

The key is generated and stored on your side, not in the platform's cloud.

Your own vault

Support for AWS KMS, Azure Key Vault, OCI Vault and on-premises hosting.

Many data types

Recordings, transcripts, AI Companion summaries, voicemail, messages, metadata.

Access auditing

You can see who accessed the encrypted data and when.

Your own perimeter

Technical rather than contractual control over the vendor's access.

From the portal

Keys are connected and managed through the Zoom admin portal.

How it worked for others

An example deployment

An Israeli insurance company

Health insurance

They needed stronger data protection in a difficult geopolitical environment.

  • End-to-end encryption was enabled for meetings: keys are known only to participants' devices
  • Customer Managed Key secured the data stored in the cloud with the company's own key
  • Not even Zoom's servers have access to the contents of protected meetings

What you need for deployment

Requirements
  • A key store: AWS KMS, Azure Key Vault, OCI Vault or your own
  • A separate paid license
  • A key rotation and recovery policy

Try Zoom today

We'll give you a remote demo Monday to Friday, 10:00–16:00 Moscow time, answer all your questions and provide trial access so you can explore the system yourself.

Please note: we work with legal entities only.

Leave a request

Our specialists will find the right solution for your needs.

We reply within one business day By sending this form you agree that we may contact you at the phone number and email you provided. See our privacy policy for how we handle your data.
Made on
Tilda