Can you license your company's Zoom recordings to AI companies?

Zoom data rights at a glance

Who owns your Zoom recordings under Zoom's terms?

Your company owns its Zoom content. Section 10.4 of the Zoom Terms of Service says "You retain all ownership rights in your Customer Content," and section 10.1 includes "resulting transcripts, recordings, outputs, visual displays" in Customer Content.

Section 10.2 says Zoom does not use your audio, video, chat or screen sharing "to train Zoom or third-party artificial intelligence models." Section 8(vi) bars using the services to "build or benchmark a competitive product or service," and section 14.5 gives you 30 days after termination to retrieve Customer Content. The terms page shows an effective date of August 11, 2023.

Owning a recording against Zoom is different from having consent from everyone in it. Our guide on whether you can legally sell company data covers that gap.

What can you export from Zoom?

Zoom content leaves the platform as recording files and transcripts.

• Cloud recording audio transcripts need a Pro, Business, Education or Enterprise account with cloud recording enabled
• An account owner or admin turns transcription on at the account or group level
• Each transcript is saved as a separate VTT file with the cloud recording
• Bulk collection across many users usually means the Zoom APIs, which bring in the API terms below

Zoom's audio transcription article sets out the plan and admin requirements.

Do Zoom's terms restrict AI training on recordings?

Zoom's terms restrict AI training on content obtained through its APIs. Section 2.8 of the Zoom API License and Terms of Use (last updated July 16, 2025) says you may not use Customer Content to "train, develop, evaluate, test, improve, or modify artificial intelligence or machine learning models" without Zoom's express written permission.

A narrow exception covers training for a single customer's own use with explicit consent from that Zoom account owner. Section 2.7(12) separately bars using the APIs "To scrape, build databases, or otherwise create copies of any data," and section 6.1 limits unpublished apps to internal business purposes.

Recordings downloaded outside the APIs are not covered by the API terms, and the Terms of Service carry no AI-training restriction on your own use. A collection built on the APIs sits inside section 2.8, so treat that route as restricted unless Zoom agrees in writing.

Which Zoom plan and admin rights do you need?

You need a paid plan with cloud recording, and an owner or admin to turn transcripts on.

• Pro, Business, Education or Enterprise account with cloud recording
• Account owner or admin rights to enable transcripts at account or group level
• A Zoom developer app accepted under the API License and Terms of Use for any API access
• Retrieval within 30 days of termination under section 14.5

Zoom recordings are among the most sensitive exports a company holds. They capture faces, voices, names on screen, chat messages and anything shared, and voiceprints and face geometry can be biometric identifiers under state laws such as Illinois's Biometric Information Privacy Act.

The US position

In the US, start with California. The CCPA defines a sale as making personal information available "for monetary or other valuable consideration" (Cal. Civ. Code § 1798.140(ad)(1)), and a license fee from an AI buyer fits that wording on its face. Employee and business-contact data have been in scope since January 1, 2023, when the temporary exemptions expired.

Data counts as deidentified under § 1798.140(m) only if you take reasonable measures so it "cannot be associated" with a person, publicly commit to keep it that way and contractually bind every recipient. Our de-identification guide explains how to meet that standard, and our guide to the CCPA and state privacy laws covers the other states.

Other comprehensive state privacy laws, including those in Virginia, Colorado and Texas, define sales and exemptions in their own words, and several treat employee data differently from California. Map where the people in your export live before you rely on any one state's rules.

Recording consent is a separate question. Some US states, including California, require every party to consent to a recorded conversation, so check what participants were told when each meeting was recorded. If meetings involved patients or account holders, HIPAA and the Gramm-Leach-Bliley Act may also apply, and HHS recognizes two de-identification methods under 45 CFR 164.514(b).

Your own privacy promises still bind you. FTC staff wrote on February 13, 2024 that adopting more permissive data uses, such as AI training, through a "surreptitious, retroactive amendment" to terms or a privacy policy could be unfair or deceptive. Check the privacy notice, employee handbook and customer contracts in force when the data was collected.

Workplace messages raise a labor law point too. Daniel Goldberg of Frankfurt Kurnit Klein & Selz wrote in October 2026 that staff messages about pay and working conditions can be "protected concerted activity under Section 7 of the National Labor Relations Act," whether or not staff are unionized.

If you hold UK or EU data

UK GDPR and EU GDPR treat names, email addresses and message content about identifiable people as personal data. Licensing it for AI training is a new purpose, so you need a lawful basis under Article 6 and a compatibility assessment under Article 6(4), which the ICO covers in its guidance on compatibility and the reuse of personal information. This page is general information, so confirm your position with your own counsel.

What third-party content is in a Zoom export?

External participants appear in many meetings: clients, candidates, vendors and webinar attendees. Their faces, voices and shared screens are in the recording, and none of them agreed to your license.

Filter out meetings with external participants unless you have their consent. Buyers of speech and audio data will ask for the consent record behind each recording.

How do you prepare a licensable Zoom export?

Preparing a Zoom export for a buyer starts with the extraction route and ends with a manifest. Work through these steps in order.

1. 1

   Inventory recordings by meeting type

   Separate internal meetings from client calls, interviews and webinars, and keep only the categories you can clear.

2. 2

   Check recording consent

   Confirm what notice participants received and which state laws apply where they were located.

3. 3

   Collect without the API, or get permission

   Collect files outside the APIs, or ask Zoom for written permission before you use the APIs for a license.

4. 4

   Remove third-party content

   Take out meetings with external participants, client screen shares and webinar attendee data unless the other party has agreed in writing, and keep privileged legal material out entirely.

5. 5

   De-identify and test

   Replace names, user IDs and email addresses across the Zoom export, then run a re-identification test on a random sample, as our de-identification guide describes.

6. 6

   Write the manifest

   Record record counts, date ranges, systems, exclusions and the export method in a data manifest that matches what you deliver.

7. 7

   Get counsel's sign-off

   Ask your own counsel to review the Zoom terms, your order form and your privacy notices together before any buyer sees a sample.

If you want a view on whether your Zoom data is licensable and what buyers might pay, start with a data valuation. We are a broker, not a law firm, so take independent legal advice before you sign any license.