Vendors / Communications and meetings

Zoom

Zoom provides meeting APIs and customer OAuth grants. Public distribution adds a review gate, and meeting records do not constitute a recording archive.

Overall controlB6.9*/10
Assessment checked 2026-10-22Public documentation · No live account test

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

OVERALL CONTROL / 0.6-customer-control

Grades and scoring

Overall B / 6.9*/10, with 13 of 16 applicable scoring inputs verified. Missing evidence discounts the supported score (unknown answers remain unknown).

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Data access and planned exit carry the most weight. Known commercial barriers cap access; an unpublished price applies a bounded discount. Post-cancellation retrieval is a separate disclosure. Open each dimension to inspect its inputs and sources.

A8.3/10

Data access

25% of the overall score before applicability adjustment.

Scored answers and evidence

Read interface 7.5/10

Structured API for the declared product scope

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Meeting lists return structured metadata for authorized hosts.

Zoom Meetings API ↗
List meetings · Checked 2026-10-22

Answer-to-score anchors ↗

Bulk delivery 8.8/10

Batched or iterable API requests

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Traverse meeting pages for each selected host and meeting type.

Zoom Meetings API ↗
List meetings: pagination · Checked 2026-10-22

Answer-to-score anchors ↗

Query expressiveness 8.8/10

Documented structured API filters

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Host and meeting-type selection bound the collection.

Zoom Meetings API ↗
List meetings: userId and type · Checked 2026-10-22

Answer-to-score anchors ↗

Access cost barrier 10.0/10

Access is free, or included in the lowest paid plan with no fixed access fee; published usage-only charges are eligible

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Free accounts receive API budgets; paid plans increase capacity.

Zoom API rate limits ↗
Rate limits by account type · Checked 2026-10-22

Answer-to-score anchors ↗
B6.6*/10

Third-party accessibility

20% of the overall score before applicability adjustment.

Scored answers and evidence

Third-party eligibility 7.5/10

Open registration under published review criteria

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Public apps require functional and security review; internal apps stay within their account.

Zoom application distribution and review ↗
Audience and App submission, review, and testing process · Checked 2026-10-22

Answer-to-score anchors ↗

Downstream permission -

-

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Applicable processing, AI-use and redistribution terms remain unresolved.

Zoom General OAuth application setup ↗
Access route; downstream rights unresolved · Checked 2026-10-22

Answer-to-score anchors ↗
B6.5/10

External action

15% of the overall score before applicability adjustment.

Scored answers and evidence

Write interface 7.5/10

Create and update in one business domain

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Meeting create and update operations require matching scopes.

Zoom Meetings API ↗
Create a meeting and Update a meeting · Checked 2026-10-22

Answer-to-score anchors ↗

Custom application path 5.0/10

Approved third-party applications using fixed interfaces

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

A reviewed public OAuth app can access each authorizing customer’s permitted data.

Zoom application distribution and review ↗
External Zoom users · Checked 2026-10-22

Answer-to-score anchors ↗
B6.4*/10

Continuity

15% of the overall score before applicability adjustment.

Scored answers and evidence

Refresh mechanism 7.5/10

Documented updated-since filters or webhooks

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Apps subscribe to meeting notifications through event subscriptions.

Zoom webhook delivery ↗
Configure webhooks via build flow · Checked 2026-10-22

Answer-to-score anchors ↗

Limit visibility 10.0/10

Published numeric quotas and recovery instructions

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Account quotas vary by plan and endpoint; meeting create/update has a separate 100/day/user cap.

Zoom API rate limits ↗
Rate limits by account type and User-level rate limits · Checked 2026-10-22

Answer-to-score anchors ↗

CDC and deletion capture -

-

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

The reviewed delivery guide alone does not establish every meeting deletion event and payload.

Zoom webhook delivery ↗
Event subscriptions; deletion coverage unresolved · Checked 2026-10-22

Answer-to-score anchors ↗

Replay and gap recovery 5.0/10

Bounded redelivery or overlapping queries; no durable consumer checkpoint

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Eligible failures receive retries after 5, 20 and 60 minutes; client errors are not retried.

Zoom webhook delivery ↗
Unsuccessful delivery · Checked 2026-10-22

Answer-to-score anchors ↗
B7.5/10

Data exit

20% of the overall score before applicability adjustment.

Scored answers and evidence

Export custody 7.5/10

Customer-held structured files or API records

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Scoped API records can be held outside the provider.

Zoom Meetings API ↗
Documented structured read response · Checked 2026-10-22

Answer-to-score anchors ↗

Post-cancellation access Disclosure

-

Disclosure only; does not reduce planned-exit credit.

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

The reviewed access docs do not establish contractual retrieval rights after cancellation.

Zoom General OAuth application setup ↗
Access route; termination rights unresolved · Checked 2026-10-22

Answer-to-score anchors ↗

Planned migration fidelity 7.5/10

Portable structured records on documented routes; whole-product completeness unverified

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Portable records are documented; complete native restore and history remain unverified.

Zoom Meetings API ↗
Read response and declared object scope · Checked 2026-10-22

Answer-to-score anchors ↗
D2.1*/10

Business logic and customization

5% of the overall score before applicability adjustment.

Scored answers and evidence

Logic authoring 2.5/10

External integration code; native business logic portability not established

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

External code can use the scoped API; native workflow portability is not established.

Zoom General OAuth application setup ↗
Application authentication · Checked 2026-10-22

Answer-to-score anchors ↗

Rights to custom logic -

-

Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Native workflow ownership and reusable export rights require a separate contractual review.

Zoom General OAuth application setup ↗
Access route; native artifact rights unresolved · Checked 2026-10-22

Answer-to-score anchors ↗

Scores are out of 10. * Incomplete evidence discounts verified capabilities (unknown answers stay unknown). Planned migration drives data exit. Scoring method ↗

CUSTOMER CHOICE

Third-party accessibility

Public apps pass Marketplace review before external users install them. Internal account apps and server-to-server credentials have different distribution boundaries.

Third-party eligibilityOpen registration under published review criteriaSource & scope ↗
Access cost barrierAccess is free, or included in the lowest paid plan with no fixed access fee; published usage-only charges are eligibleSource & scope ↗
Downstream permission-Source & scope ↗

Confirm who can connect, who owns the credentials and which uses are permitted. Customer consent and provider approval can be separate requirements; the selected plan and contract still matter.

READ / INTEGRATE

API and export routes

List meetings for each permitted host and traverse returned pages. The selected meeting types define coverage; past reports and recording downloads need separate APIs and grants.

Access routeAuthenticationCredential ownerProvider approvalAccess requirementLast checked
Reviewed public General OAuth meeting appoauth2partnerYespublished review2026-10-22

Availability depends on your product, plan and agreement. See the documentation below for the requirements of each route.

ECONOMIC ACCESS

Cost, authentication and limits

Free accounts have published API budgets, with higher limits on paid accounts. Recording and report entitlements are outside this meeting-metadata assessment.

Check API entitlement, credential ownership and rate limits for the route you intend to use. Include review fees, customer-plan upgrades and ongoing access charges in the total.

ACT FROM OUTSIDE

External action

Create and update scheduled meetings with the required scopes. Special host-level create/update limits apply in addition to account quotas.

Validate the supported operation, acting identity and permission scope (read access does not imply write permission). Ambiguous retries and revoked credentials also affect whether an external workflow can run safely.

KEEP ACCESS USEFUL

Continuity

Meeting events notify subscribed apps. Eligible delivery failures receive bounded retries; missed historical payloads are not guaranteed recoverable.

CDC, deletions and recovery

QuestionAnswer / applicable routeEvidence
Can ongoing extraction identify updates and deleted records on the declared route?-Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

The reviewed delivery guide alone does not establish every meeting deletion event and payload.

Zoom webhook delivery ↗Event subscriptions; deletion coverage unresolvedChecked 2026-10-22
How can extraction recover after missed events or an interrupted consumer?Bounded redelivery or overlapping queries; no durable consumer checkpointZoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Eligible failures receive retries after 5, 20 and 60 minutes; client errors are not retried.

Zoom webhook delivery ↗Unsuccessful deliveryChecked 2026-10-22

Useful ongoing access includes corrections and deletions, not only the first export. A failed request, changed filter or lost resource permission should not be interpreted as a deleted record.

LEAVE WITH YOUR DATA

Data exit and portability

Scheduled-meeting JSON can be held outside Zoom. This does not establish usable recording files, transcripts or complete past meeting history.

Test the output against the destination’s required fields and history. Check stable identifiers, relationships, attachments and extraction time; a sample file proves only the coverage of that sample.

BUILD / INSPECT / REUSE

Business logic and customization

Customers can write external integration code against the assessed API. Native workflow rights and independent execution remain unresolved (record access does not establish portable business logic).

Custom API access, ownership of workflows and the right to export their definitions are separate questions. A custom-app capability alone does not establish that business rules can move to another system.

AGREEMENTS / API DOCS / PROGRAM REQUIREMENTS

Documented conditions

Answers below come from public provider materials. Every answer retains its source check date, scope (a partner agreement does not describe every customer route). Customer contracts and live behavior still need verification.

QuestionAnswer / applicable routeEvidence
What structured read interface is documented?Structured API for the declared product scopeZoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Meeting lists return structured metadata for authorized hosts.

Zoom Meetings API ↗List meetingsChecked 2026-10-22
How can customers retrieve data in bulk?Batched or iterable API requestsZoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Traverse meeting pages for each selected host and meeting type.

Zoom Meetings API ↗List meetings: paginationChecked 2026-10-22
What queries can a customer issue outside the provider UI?Documented structured API filtersZoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Host and meeting-type selection bound the collection.

Zoom Meetings API ↗List meetings: userId and typeChecked 2026-10-22
Who decides whether a chosen third party may connect?Open registration under published review criteriaZoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Public apps require functional and security review; internal apps stay within their account.

Zoom application distribution and review ↗Audience and App submission, review, and testing processChecked 2026-10-22
What extra commercial condition applies to the routes supplying the assessed read capability, relative to the lowest paid plan?Access is free, or included in the lowest paid plan with no fixed access fee; published usage-only charges are eligibleZoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Free accounts receive API budgets; paid plans increase capacity.

Zoom API rate limits ↗Rate limits by account typeChecked 2026-10-22
Which external write operations are documented?Create and update in one business domainZoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Meeting create and update operations require matching scopes.

Zoom Meetings API ↗Create a meeting and Update a meetingChecked 2026-10-22
How can customers connect an application they build or choose?Approved third-party applications using fixed interfacesZoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

A reviewed public OAuth app can access each authorizing customer’s permitted data.

Zoom application distribution and review ↗External Zoom usersChecked 2026-10-22
What mechanism supports repeatable extraction of changes?Documented updated-since filters or webhooksZoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Apps subscribe to meeting notifications through event subscriptions.

Zoom webhook delivery ↗Configure webhooks via build flowChecked 2026-10-22
How are integration limits disclosed?Published numeric quotas and recovery instructionsZoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Account quotas vary by plan and endpoint; meeting create/update has a separate 100/day/user cap.

Zoom API rate limits ↗Rate limits by account type and User-level rate limitsChecked 2026-10-22
Where can a usable data copy be delivered?Customer-held structured files or API recordsZoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Scoped API records can be held outside the provider.

Zoom Meetings API ↗Documented structured read responseChecked 2026-10-22
What usable data or native definitions can leave before cancellation?Portable structured records on documented routes; whole-product completeness unverifiedZoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Portable records are documented; complete native restore and history remain unverified.

Zoom Meetings API ↗Read response and declared object scopeChecked 2026-10-22
What retrieval rights are documented at cancellation?-Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

The reviewed access docs do not establish contractual retrieval rights after cancellation.

Zoom General OAuth application setup ↗Access route; termination rights unresolvedChecked 2026-10-22
How can customers define their own business logic?External integration code; native business logic portability not establishedZoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

External code can use the scoped API; native workflow portability is not established.

Zoom General OAuth application setup ↗Application authenticationChecked 2026-10-22
What rights or portability are documented for custom workflow artifacts?-Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Native workflow ownership and reusable export rights require a separate contractual review.

Zoom General OAuth application setup ↗Access route; native artifact rights unresolvedChecked 2026-10-22
What permission is needed for the documented downstream use?-Zoom Meetings / user-authorized General OAuth scheduled-meeting collection, meeting create/update and meeting events through a publicly distributed app. Recordings, transcripts, past-attendance reports and other Zoom products are excluded.

Applicable processing, AI-use and redistribution terms remain unresolved.

Zoom General OAuth application setup ↗Access route; downstream rights unresolvedChecked 2026-10-22

SOURCES / SCOPE / HISTORY

Sources and open questions

This review is based on the documentation below. Live account behavior and customer-specific agreements haven’t been tested.

Still to confirm

  • Complete meeting deletion coverage
  • Recording, transcript and past-report extraction on separate grants
  • Applicable downstream terms where not established above
  • Contractual post-cancellation retrieval rights
  • Native workflow ownership, reusable definitions and complete product migration

Documentation

Assessment checked 2026-10-22. Each answer retains its source and applicable route; the check date does not establish live account behavior.