COMPLIANCE AT GONG
Robust compliance
to meet your needs
Gong has attained an extensive list of certifications and
attestations to comply with global compliance standards.
SOC 2 (Type 2)
Trust Services Principles
ISO/IEC 27001
Information Security Management System (ISMS)
ISO 27001 globally recognized, standards-based approach to security. Valid until Oct 2025ISO/IEC 27017
Information Security Management System (ISMS)
ISO 21017 – Certificate (#1122102) – information security controls for cloud service providersISO/IEC 27018
Information Security Management System (ISMS)
ISO 27018 – Certificate (#1122103) protecting PII in cloud
ISO/IEC 27701
Privacy Information Management System (PIMS)
ISO 27701 is a globally recognized, privacy-based certification. Valid until July 2027
PCI DSS
The Payment Card Industry Data Security Standard
PCI compliant mechanism (SAQ-D) to ingest calls from external telephony systems
Security Requirements
Health Information Privacy
HIPAA Security Requirements to principles and criteria
Security Trust Assurance and Risk (STAR) Registry
Cloud Security Alliance
Self Assessment for Gong Reality Platform
Data Privacy Framework (DPF) Program
Gong is certified with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
