// Trust & Security Report
Gong.io Ltd.
Revenue AI OS - AI-powered conversation intelligence platform with sub-products: Gong Engage (sales engagement), Gong Forecast (pipeline forecasting), Gong Enable (sales enablement), Gong Agents (agentic automation), Gong Revenue Graph (data connectivity), and Gong Collective (integrations/services).
Certifications held
11
Maturity
Enterprise
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on gong.io“GDPR Compliance with Standard Contractual Clauses for EEA, UK, and Swiss transfers; EU-U.S. Data Privacy Framework certified”
Verify on gong.io“EU-U.S. Data Privacy Framework (DPF), UK Extension to the EU-U.S. DPF, and Swiss-U.S. Data Privacy Framework”
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
New customers can choose US or EU data centers. Parent company headquartered in Israel; data processing offices in US, Israel, and Ireland. Complies with DPF, UK GDPR, and Swiss data protection frameworks.
Gong explicitly states 'your data is never used to train generative models.' Training is per-customer only; cross-customer training only occurs on safe cases like transcription, not business-specific processes. ISO 42001 certified with dedicated AI governance team focused on ethical use and human validation.
// Security controls
Access control
Role-based access control with four standard roles plus granular permission profiles; workspace segmentation for least privilege
help.gong.ioAuthentication
Single Sign-On support for Google, Microsoft Entra ID, Okta, and other major identity providers
help.gong.ioAudit logging
Comprehensive audit logging accessible via Gong Audit API in JSON format; tracks both user activity and Gong personnel access to customer data
help.gong.ioMonitoring and threat detection
Real-time monitoring and threat detection with built-in redundancy
help.gong.ioPenetration testing
Independent penetration testing conducted regularly with executive summaries available through Trust Center
trust.gong.ioData redaction
Custom redaction capabilities for sensitive sequences; enables regulated industries to safely leverage AI insights
help.gong.io// Products & data scope
data: Processes email, call recordings, transcripts, and communications data. Analyzes customer interactions for insights.
Prioritizes and personalizes sales engagement; uses AI agents for targeted communications
data: Processes pipeline, deal, and forecast data; analyses conversation insights for forecasting accuracy
Provides unbiased insights and centralized analytics for org-wide action
data: Processes customer call recordings, transcripts, and interaction data to create training content
AI Trainer feature allows teams to practice using simulated conversations from real customer interactions within Gong environment
data: Processes pipeline, CRM, and interaction data for automated actions
Automates follow-ups, pipeline edits, enablement triggers, and forecast corrections
data: Central data store capturing interactions across email, calls, CRM, and integrations
Automatically captures and connects every interaction across customer's business
data: Curated third-party integrations and professional services
Robust ecosystem of integrations and expert services
// At a glance
Pricing model
Subscription-based SaaS; usage-based or per-user tiers available; custom enterprise pricing
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Gong.io Ltd.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
trust.gong.io