Security and trust

Sales call recording: Key considerations and how Gong can support your compliance program

Michael Sinitiere

Michael Sinitiere

Sr. Director of Security

Published on: January 12, 2024

Disclaimer: This article is for general informational purposes only and does not constitute legal advice. It does not describe all legal requirements that may apply to your organization. Laws and regulations change frequently and vary by jurisdiction, industry, and use case. Gong does not guarantee that any configuration, process, or practice described in this article satisfies your legal obligations. You are solely responsible for your compliance decisions and should consult your own legal counsel before recording calls or using Gong in any jurisdiction.

Understanding call recording concepts

Laws and regulations around business call recording vary significantly across locations. In the United States and many other countries, jurisdictions may require notice or consent from some or all call participants (aka dual consent) before a conversation can be recorded. These rules depend on multiple factors, including the type of call, the location of each participant, the purposes of the recording, and the nature of the information being captured.

Because these requirements are complex and subject to change, we recommend that customers obtain dual consent when using Gong to record calls and that they work closely with their own legal counsel to determine when recording is permitted and what type of notice or consent is required.

Gong’s role and recommendations

  • Gong does not restrict where its services can be used, but does not make representations regarding compliance with laws in any jurisdiction.
  • Customers are responsible for evaluating their own legal obligations in every country or region where Gong is deployed.
  • Gong offers strong privacy tools and supporting documentation — including audit logs, access controls, encryption, and Standard Contractual Clauses in the Gong Data Processing Addendum — to support customers' compliance programs.
  • Gong’s Legal and Security teams can assist with customer due diligence by providing information about subprocessors, security certifications, and data-handling practices.
  • Decisions about whether and how to record calls in a particular jurisdiction belong exclusively to the customer and their legal counsel.

US call recording considerations

In the United States, call recording requirements differ by state. Some states permit recording with consent from only one participant, while others require all participants to be informed or to provide consent. Which rules apply can depend on where participants are located, how the call is routed, and what the call concerns.

Because these rules change over time and can be impacted by industry-specific regulations, Gong does not attempt to provide or maintain a legal reference list by state. Instead, customers should work with their legal counsel to determine:

  • Which jurisdictions their callers and customers may be in
  • Whether notice or consent is required
  • How those requirements should be operationalized within their call flows and Gong configuration

International call recording considerations

Call recording laws outside the United States vary widely. Some countries have no explicit call recording laws, while others impose strict notice, consent, or data-handling requirements. Certain jurisdictions or regulated industries may prohibit call recording entirely.

Whether Gong can be deployed in a particular jurisdiction depends on many factors, including the types of personal data collected, the nature of the processing, applicable industry-specific laws, and the customer’s intended use case. Customers are solely responsible for determining whether their use of Gong complies with applicable law and should work closely with their legal counsel before using Gong in any non-U.S. jurisdiction.

Below are general themes — not legal rules — to help frame those discussions with counsel.

Canada
Canadian privacy regulators emphasize informed and meaningful consent for recorded calls. Organizations should work with counsel to determine when recording is permitted and what type of notice or consent is required. If recording is appropriate, Gong’s consent pages, automated notifications, and pre-call email footers can help operationalize your chosen approach.

Europe and the UK
Call recording in the European Union and the United Kingdom is subject to the GDPR, the UK GDPR, and relevant local laws. Customers should consult their legal teams to determine their lawful basis for recording, their transparency obligations, and any notice or consent requirements. Many customers choose to give participants a clear choice around joining a recorded call. The Gong consent landing page can support this practice by offering participants the option to join a recorded or non-recorded session, depending on your organization’s policies.

Australia
Australia has federal and state/territory rules about call monitoring and recording. Some jurisdictions require informing participants at the start of a call and may require offering alternatives. Requirements vary, and customers should confirm the specific rules that apply to their industry and call flows with their legal counsel. Once your approach is defined, Gong’s notification and consent features can help implement it consistently.

How Gong features can support your compliance program

Once your legal and compliance teams define your policies for call recording, Gong provides features that can help you implement those policies in a consistent and auditable way. These tools do not guarantee compliance with any law, but they can support your operational and documentation needs.

1. Gong consent pages

Consent pages allow you to display customized language and your data protection policy — drafted and approved by your legal team — to participants before they join recorded sessions. These pages can be localized in multiple languages and can generate call summary reports that your organization may use for audit or policy-enforcement purposes.

Message pop up saying "Join Alex's meeting"

2. Automatic audio prompts

Gong can play an automated notification when external participants join a recorded meeting. You can configure whether the message plays once (when the first external participant joins) or each time a new external participant joins. Your legal team can define the approved wording to ensure it aligns with your notice or consent requirements.

Menu featuring various Voice and Text options

3. Trackers and email alerts

Trackers can help you identify calls where required notification language may not have been used. You can configure email alerts to notify designated team members when a call is missing the expected compliance language. This supports internal monitoring and helps teams follow your defined policies.

Trackers select box featuring a "consent" label

Once you save your filter criteria, you can optionally set rules so that Gong automatically deletes calls where recording compliance language was not mentioned. This provides an added layer of control over the calls ingested into Gong.

Rule settings

4. Custom legal footers in pre-call emails

Gong can automatically send pre-call emails to attendees a few minutes before a meeting begins. These emails can include legal footers drafted by your counsel to inform participants that a call may be recorded, if that aligns with your organization’s policy.

Email body copy with text and a signature and legal footer

5. Redaction of personal information

If your calls may contain sensitive personal data that you prefer not to store, such as payment card numbers or identification numbers, Gong can automatically redact specified categories of information for call recordings. Redaction is one way to mitigate the risk of data retained in the platform, but it does not guarantee that no regulated information is ever captured. You should work with legal and security teams to evaluate whether recording such calls is appropriate at all.

Information redaction menu with examples

Gong offers customers a set of tools that can help support the compliance processes designed by their legal and privacy teams. Because call recording laws are complex, vary widely, and change frequently, you should rely on your own counsel — not this article or Gong’s configuration options — to determine when and how recording is permitted in each jurisdiction.

To learn more about how Gong’s features can support your compliance program, book a demo today.

This blog was updated on 1/14/26 to reflect the latest information on sales call recording laws and regulations.

Michael
Michael Sinitiere

Sr. Director of Security

Michael Sinitiere is Senior Director of Security at Gong, bringing cross-disciplinary expertise in cybersecurity, risk management, and business strategy.

With prior leadership roles at Invesco, Accenture, IBM, and Towers Watson, he focuses on building trusted, compliant, and resilient systems that strengthen organizational security and safeguard data-driven innovation.

State of Revenue 2026

Loading form...