An AI notetaker can join a Zoom call and keep its own processing inside the EU, even though Zoom routes core account data through the US and most Zoom accounts cannot fully disable US data centres. The notetaker is a separate system from Zoom, and it controls where the captured audio goes next.
How an AI notetaker works on Zoom
The notetaker joins your Zoom meeting as a participant, appears in the participant list with a recognisable name, captures the audio, and streams it to a transcription pipeline that becomes a transcript, and then notes, coaching, and analytics. Joining as a visible participant is deliberate, because Zoom and GDPR both expect participants to know a recording is happening.
Where Zoom's own data goes
Zoom lets you choose a storage region, but with a hard limit. Its data-storage documentation lists selectable regions including Germany and Switzerland, and says configurable data includes "Cloud recordings, Cloud recording transcripts, In-meeting chat messages." But it also states plainly that "Account data and operation data will continue to be stored in the US." (Zoom Support, retrieved 2026-07-26.)
Live meeting routing has a similar floor. Zoom's data-centre docs say admins can opt in or out of regions, but "The data centers in the country supporting the region where an account was provisioned will be locked as an opt-in for processing," and since "new accounts are provisioned in the United States," the US data centre usually cannot be disabled. (Zoom Support, retrieved 2026-07-26.)
A GDPR-compliant AI notetaker for Zoom is one whose own data path, capturing, transcription, storage, and analysis, stays inside EU jurisdiction, and which supplies the lawful-basis, consent, and Article 28 tools GDPR requires. Zoom itself keeps account and operation data in the US and often cannot disable US live-meeting routing, so the notetaker's independent EU pipeline is what you can actually control.
Zoom's subprocessors and AI features
Zoom's published subprocessor list names US-based providers, including Amazon Web Services, Google Cloud Platform, Microsoft, Oracle, and, for its AI features, Anthropic (United States) and OpenAI. (Zoom Third-Party Subprocessors, retrieved 2026-07-26.) Zoom is clear that its AI Companion does not train on your content: "Zoom does not use any of your audio, video, chat, screen sharing, attachments, or other communications-like customer content to train Zoom's or its third-party artificial intelligence models." (Zoom Support, retrieved 2026-07-26.) But it also states AI Companion "may use third-party AI-model providers, and we will share relevant data with those third parties when you use the feature," which is a data path an EU notetaker with its own pipeline does not rely on.
What "GDPR-compliant" honestly means
Compliance is not a toggle. As controller you own the lawful basis, the participant notice, data minimisation, and an Article 28 data processing agreement. Zoom positions itself as a processor and, in its Global DPA, states that customers acknowledge "Zoom may transfer and process Customer Personal Data to and in the United States," relying on Standard Contractual Clauses for those transfers. (Zoom Global DPA, retrieved 2026-07-26.) An EU-resident notetaker removes that transfer for the assistant's own processing, which is the part you can change without leaving Zoom.
How Numi does it on Zoom
Numi's meeting bot joins Zoom calls as a visible participant, captures the audio, and streams it to an EU-only pipeline. Transcription runs on self-hosted models in Frankfurt, storage stays in the EU, and coaching and analytics are built on an EU-resident transcript, under an Article 28 AVV, with no training on your data. For consent specifics see Zoom recording consent, for the EU switch see the EU alternative for AI notes on Zoom, and to compare tools on residency see the GDPR-compliant AI meeting assistant comparison.