Nabla Copilot

AI medical scribe that turns patient conversations into clinical notes

Zoom AI Companion

AI assistant for smarter meetings, chat, and collaboration in Zoom

Nabla Copilot

Excellent

22/25

Zoom AI Companion

Moderate

16/25

Score Breakdown

DimensionNabla CopilotZoom AI Companion

Data Residency

Where is your data stored and processed?

Nabla Copilot: Choice of US (AWS us-east-1) or EU (AWS eu-west-1) data hosting. French HDS certification for health data in the EU. Strong dual-region residency for healthcare organisations on both sides of the Atlantic.

Zoom AI Companion: Zoom offers data center locations in the US, EU, Asia Pacific, and other regions. Paid account administrators can select preferred data center regions for meeting data in transit.

4/5

Choice of US (AWS us-east-1) or EU (AWS eu-west-1) data hosting. French HDS certification for health data in the EU. Strong dual-region residency for healthcare organisations on both sides of the Atlantic.

3/5

Zoom offers data center locations in the US, EU, Asia Pacific, and other regions. Paid account administrators can select preferred data center regions for meeting data in transit.

Legal Jurisdiction

Which laws govern the company and your data?

Nabla Copilot: Incorporated in France under French and EU law, benefiting from GDPR-native jurisdiction and the French Health Data Hosting (HDS) regulatory framework. US operations covered by HIPAA BAA.

Zoom AI Companion: Incorporated in Delaware, US. Subject to US laws including the CLOUD Act. Zoom has implemented Standard Contractual Clauses and offers a GDPR-compliant Data Processing Agreement.

4/5

Incorporated in France under French and EU law, benefiting from GDPR-native jurisdiction and the French Health Data Hosting (HDS) regulatory framework. US operations covered by HIPAA BAA.

3/5

Incorporated in Delaware, US. Subject to US laws including the CLOUD Act. Zoom has implemented Standard Contractual Clauses and offers a GDPR-compliant Data Processing Agreement.

Data Retention & Training

Is your data used for model training?

Nabla Copilot: Patient audio processed transiently and not stored by default. No use of patient data for model training. Configurable note retention aligned with EHR data governance policies.

Zoom AI Companion: AI Companion summaries are stored in the meeting host's account. Administrators can configure retention policies. Cloud recordings and transcripts can be set to auto-delete after a specified period.

5/5

Patient audio processed transiently and not stored by default. No use of patient data for model training. Configurable note retention aligned with EHR data governance policies.

3/5

AI Companion summaries are stored in the meeting host's account. Administrators can configure retention policies. Cloud recordings and transcripts can be set to auto-delete after a specified period.

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

Nabla Copilot: SOC 2 Type II certified; HIPAA BAA available; HDS certified in France. ISO 27001 in progress. Strong healthcare-specific compliance posture for a company of its size.

Zoom AI Companion: Holds SOC 2 Type II, SOC 3, ISO 27001, ISO 27017, and ISO 27018 certifications. Comprehensive security audit program with regular third-party assessments.

4/5

SOC 2 Type II certified; HIPAA BAA available; HDS certified in France. ISO 27001 in progress. Strong healthcare-specific compliance posture for a company of its size.

4/5

Holds SOC 2 Type II, SOC 3, ISO 27001, ISO 27017, and ISO 27018 certifications. Comprehensive security audit program with regular third-party assessments.

Regulatory Fit

Suitability for regulated industries and professional services

Nabla Copilot: Exceptional fit for healthcare providers. HIPAA BAA, HDS certification, GDPR-native jurisdiction, and no patient data training make it one of the most compliant AI scribing tools available.

Zoom AI Companion: Supports GDPR and HIPAA compliance with BAA available. Suitable for healthcare and education. End-to-end encryption available but disables some AI features when enabled.

5/5

Exceptional fit for healthcare providers. HIPAA BAA, HDS certification, GDPR-native jurisdiction, and no patient data training make it one of the most compliant AI scribing tools available.

3/5

Supports GDPR and HIPAA compliance with BAA available. Suitable for healthcare and education. End-to-end encryption available but disables some AI features when enabled.

Total Score

22/25

16/25

Best For

Nabla Copilot

Best for EU-headquartered organisations needing maximum data sovereignty; organisations requiring broad certification coverage (SOC 2 Type II, HIPAA BAA, HDS); regulated industries (HHS OCR, CNIL); privacy-conscious teams who need strong data retention controls.

Zoom AI Companion

Best for organisations requiring broad certification coverage (SOC 2 Type II, ISO 27001, ISO 27017).

Detailed Comparison

Nabla Copilot vs Zoom AI Companion: Trust & Compliance Comparison

Nabla Copilot (Nabla, FR) scores 22/25 overall with a Gold (Excellent) trust badge. AI medical scribe that turns patient conversations into clinical notes. Zoom AI Companion (Zoom, US) scores 16/25 with a Bronze (Moderate) trust badge. AI assistant for smarter meetings, chat, and collaboration in Zoom.

Dimension-by-Dimension Breakdown

#### Data Residency

Nabla Copilot leads with 4/5 vs 3/5.

●Nabla Copilot (4/5): Choice of US (AWS us-east-1) or EU (AWS eu-west-1) data hosting. French HDS certification for health data in the EU. Strong dual-region residency for healthcare organisations on both sides of the Atlantic.

●Zoom AI Companion (3/5): Zoom offers data center locations in the US, EU, Asia Pacific, and other regions. Paid account administrators can select preferred data center regions for meeting data in transit.

#### Legal Jurisdiction

Nabla Copilot leads with 4/5 vs 3/5.

●Nabla Copilot (4/5): Incorporated in France under French and EU law, benefiting from GDPR-native jurisdiction and the French Health Data Hosting (HDS) regulatory framework. US operations covered by HIPAA BAA.

●Zoom AI Companion (3/5): Incorporated in Delaware, US. Subject to US laws including the CLOUD Act. Zoom has implemented Standard Contractual Clauses and offers a GDPR-compliant Data Processing Agreement.

#### Data Retention & Training

Nabla Copilot leads with 5/5 vs 3/5.

●Nabla Copilot (5/5): Patient audio processed transiently and not stored by default. No use of patient data for model training. Configurable note retention aligned with EHR data governance policies.

●Zoom AI Companion (3/5): AI Companion summaries are stored in the meeting host's account. Administrators can configure retention policies. Cloud recordings and transcripts can be set to auto-delete after a specified period.

#### Certifications

Both score equally at 4/5.

●Nabla Copilot (4/5): SOC 2 Type II certified; HIPAA BAA available; HDS certified in France. ISO 27001 in progress. Strong healthcare-specific compliance posture for a company of its size.

●Zoom AI Companion (4/5): Holds SOC 2 Type II, SOC 3, ISO 27001, ISO 27017, and ISO 27018 certifications. Comprehensive security audit program with regular third-party assessments.

#### Regulatory Fit

Nabla Copilot leads with 5/5 vs 3/5.

●Nabla Copilot (5/5): Exceptional fit for healthcare providers. HIPAA BAA, HDS certification, GDPR-native jurisdiction, and no patient data training make it one of the most compliant AI scribing tools available.

●Zoom AI Companion (3/5): Supports GDPR and HIPAA compliance with BAA available. Suitable for healthcare and education. End-to-end encryption available but disables some AI features when enabled.

Certifications at a Glance

Certification	Nabla Copilot	Zoom AI Companion
HDS	Yes	No
HIPAA BAA	Yes	No
ISO 27001	No	Yes
ISO 27017	No	Yes
ISO 27018	No	Yes
SOC 2 Type II	Yes	Yes

Overall Verdict

Nabla Copilot has a clear trust advantage, scoring 22/25 compared to Zoom AI Companion's 16/25. Nabla Copilot particularly excels in data residency, legal jurisdiction, data retention & training, regulatory fit.

Frequently Asked Questions

Which is better for EU compliance, Nabla Copilot or Zoom AI Companion?

Nabla Copilot has a TrustKit score of 22/25 while Zoom AI Companion scores 16/25. Nabla Copilot currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do Nabla Copilot and Zoom AI Companion compare on data residency?

Nabla Copilot scores 4/5 for data residency (Choice of US (AWS us-east-1) or EU (AWS eu-west-1) data hosting. French HDS certification for health data in the EU. Strong dual-region residency for healthcare organisations on both sides of the Atlantic.), while Zoom AI Companion scores 3/5 (Zoom offers data center locations in the US, EU, Asia Pacific, and other regions. Paid account administrators can select preferred data center regions for meeting data in transit.).

Are Nabla Copilot and Zoom AI Companion GDPR compliant?

Both tools are assessed across five compliance dimensions. Nabla Copilot has a regulatory fit score of 5/5 and Zoom AI Companion scores 3/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool