ZoomInfo: security & AI-training scorecard
zoominfo.com ↗ · Data enrichment · Last checked Oct 17, 2026
Does ZoomInfo train AI on customer data?
Unclear“Fine-tune or train LLMs or other Artificial Intelligence models”
Note: Listed in the privacy policy as a purpose for 'collected information' (which the policy says includes information provided by users and customers). No customer-data-specific training statement found; Responsible AI page does not address it.
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Type II
“GTM SOC 2 Type II - 2026”
ISO/IEC 27001
Certified information security management system.
Yes
“ZoomInfo is a SOC II, ISO 27701, and ISO 27001 certified company.”
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
Not verified from vendor-owned sources
Note: No HIPAA/BAA statement found in fetched sources.
No vendor source found as of check date.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
DPA published (controller-to-processor and controller-to-controller)
“ZoomInfo Controller-to-Processor Data Processing Agreement”
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
Unclear
“Fine-tune or train LLMs or other Artificial Intelligence models”
Note: Listed in the privacy policy as a purpose for 'collected information' (which the policy says includes information provided by users and customers). No customer-data-specific training statement found; Responsible AI page does not address it.
Data retention
What the vendor publishes about how long customer data is kept.
Purpose-based; no fixed period published
“We will retain personal information for a period of time consistent with the original purpose(s) for which we collected it”
Subprocessor list
Where the vendor lists third parties that process customer data.
Trust center
The vendor's security/trust portal.
Other notes
Additional context from vendor sources.
Covers Chorus by ZoomInfo (conversation intelligence), which is listed under ZoomInfo's trust center and Responsible AI page.
“within our Chorus offering we are able to generate useful meeting summaries and identify action items based upon the content of a conversation”
All sources checked (7)
Fetched on Oct 17, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect ZoomInfo's published pages as of Oct 17, 2026; verify with the vendor. Methodology & disclaimer.