Gong

gong.io · facts updated 2 days ago

Privacy facts at a glance

Jurisdictions: US · EU · IL · IE
Subprocessors: 9
Retention: The DPA states Gong processes Customer's Personal Data for the duration under the Agreement, but no specific retention period in days is stated.
Breach notification: The trust center references data breach notifications as a feature but no specific notification hour SLA is stated in the excerpts.
Transfer mechanism: Standard Contractual Clauses (EU SCCs, UK Addendum, and Switzerland Addendum), plus EU-US Data Privacy Framework
SCC modules: Module 2 · Module 3
DPA available: Yes
Certifications: CSA STAR Level 1 · EU-US DPF · ISO/IEC 27001 · ISO/IEC 27017:2015 · ISO/IEC 27018:2019 · ISO/IEC 27701 · ISO/IEC 42001:2023 · PCI DSS · SOC 2
GDPR addressed: Yes
CCPA addressed: Yes

Named subprocessors

Gong.io Ltd. Amazon Web Services, Inc. MongoDB, Inc. Mailgun Technologies, Inc. Twilio, Inc. Gongio Ireland Limited Google Cloud EMEA Limited Snowflake Inc. Microsoft Ireland Operations Limited

Tracked documents

https://www.gong.io/legal/privacy-policy checked 10 hours ago

https://www.gong.io/legal/terms-and-conditions checked 10 hours ago

Data processing agreement

https://www.gong.io/legal/data-processing-addendum checked 9 hours ago

Subprocessor list

https://www.gong.io/legal/sub-processors checked 9 hours ago

Security / trust page

https://trust.gong.io/ checked 10 hours ago

Recent changes

Subprocessor list 2 days ago

Document updated.

Data processing agreement 2 days ago

Document updated.

moderate Security / trust page 1 week ago

Gong's trust center page was migrated to a new SafeBase template, removing sections for Infrastructure (Status Monitoring, Amazon Web Services), Endpoint Security (Disk Encryption, Endpoint Detection & Response, Mobile Device Management), Network Security (Data Loss Prevention, SIEM), Policies, and Training (Phishing, Role-Based, Security Awareness) from the visible page structure.

Subprocessor list 1 week ago

Document updated.

Security / trust page 1 week ago

Document updated.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track Gong in your workspace.

Get notified when Gong adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial

No card required.