# Gong — trust-center changed (urgent) > Source: > Published: 2026-10-12 15:43:18+00:00 # Gong's trust-center changed Trust at Gong Secure by design. Trusted by enterprises With over 5,000 customers, Gong helps revenue organizations drive growth with confidence, backed by an operating system built for scale, trust, and measurable impact. Our commitment to compliance Gong has attained an extensive list of certifications and attestations to comply with global compliance standards. Service Controls Artificial Intelligence Management System Information Security Management System (ISMS) Information security controls for cloud services Protection of PII in public clouds acting as PII processors Privacy Information Management System (PIMS) The Payment Card Industry Data Security Standard Health Information Privacy Cloud Security Alliance Gong is certified with the EU-U.S. Data Privacy Framework (EU-U.S. DPF). Enterprise-grade protection for revenue teams From security to privacy to compliance, the Gong Revenue AI OS is engineered to meet enterprise demands - so you can scale with confidence, accelerate execution, and meet global standards, without compromise. Security and availability Protect revenue-critical data with security that scales Keep your systems resilient, teams productive, and data under control. Gong's security program provides multi-layered protection including encryption, multi-factor authentication, and least privilege access controls, combined with real-time monitoring, threat detection, and built-in redundancy. With over 99.5 percent uptime and backed by a global security team, it's designed to deliver safety, continuity, and peace of mind at scale. Privacy and compliance Address global data privacy needs without slowing down Gong is built to help you meet evolving privacy regulations with flexibility and control. Configure how data is collected, accessed, and retained - while aligning to standards like GDPR and CCPA. Our third-party certifications, backed by independent audits, ensure the platform meets global privacy obligations, while giving you controls to support your own compliance needs. AI governance Empower revenue teams with AI you can trust Drive smarter decisions and better outcomes knowing the Gong Revenue AI OS was built responsibly. Gong is ISO 42001-certified, purpose-built for revenue teams, and guided by a dedicated governance team focused on ethical use, human validation, and clear model oversight. Understand how insights are generated - and trust that your data is never used to train generative models. Configurability Customize privacy and control settings to fit your needs You're in control. Tune the Gong Revenue AI OS to your workflows and securely connect external AI systems via Model Context Protocol (MCP). Manage risk tolerance and compliance needs with granular access permissions, custom retention and redaction settings, and bring-your-own-key encryption. Configure privacy rules by region, role, or use case while maintaining audibility and compliance across the platform. Manage how data is collected, stored, and protected so you can drive your revenue strategy with confidence. Trusted by global enterprises See how leading organizations use Gong to drive growth, stay compliant, and scale securely. Working with Gong is awesome. They're super-responsive to Rapid7 requests and always ensure that we get the most out of our Gong instance. Security leaders choose Gong Rapid7 secured its data and increased sales performance with the Gong Revenue AI Platform. Key resources Explore practical guides, expert insights, and best practices to navigate the evolving world of AI, security, and privacy. Why AI governance is an operating discipline, not a policy Learn four foundational pillars of responsible AI governance - from data access and privacy by design to lifecycle management and ownership. Trust is an enabler of a successful AI strategy, not a hindrance - here's why Discover why trust is the key to successful AI strategy and how governance frameworks enable innovation without compromising security. Security best practices for the Gong Revenue AI OS Let's talk about all the capabilities you can use today to secure the Gong experience and help your team succeed while using secure revenue AI technology. Frequently asked questions FAQ You're just scratching the surface. Explore how Gong keeps your data protected while enabling your team to focus on growing revenue. ADDEDWe take your data protection seriously. Gong implements enterprise-grade security measures, including data encryption in transit and at rest, multi-factor authentication, role-based access controls, and segregated customer data environments hosted on AWS. All access to customer data is logged and auditable. You can find more information about our security features on our help center . Gong AI is developed in-house. It's designed to be transparent, auditable, and is guided by a dedicated governance and oversight team. We show how AI outcomes are created, give you visibility into model training, and include human validation where it matters. We're also ISO 42001 certified - the new gold standard for responsible AI. No. Your data is never used to train generative AI models, and it's never shared with or exposed to the public domain. Gong uses a secure, in-house AI framework that keeps your data fully isolated. We don't co-mingle customer data, and any AI outputs are generated strictly within your own data environment, so you always stay in control of your data. Yes. Gong offers granular configurability for data collection (via redaction, deny lists, and filtering rules), consent management (with support for 70+ languages), and data retention and deletion policies. Administrators can define business logic for recordings and email ingestion and redact sensitive data automatically. Gong is built to help you meet privacy requirements like GDPR and CCPA by implementing measures to support compliance - including tools for recording consent, data export and deletion, and a published list of our subprocessors and data handling practices. Gong is also certified under the EU-U.S., Swiss-U.S., and UK-U.S. Data Privacy Frameworks as well as ISO 27701 (Privacy Information Management System) and ISO 27018 (PII protection for cloud providers). You can find a full list of sub-processors here on our website . By default, Gong retains customer data for up to three years or the duration of your contract - whichever is shorter. You can request a custom retention period, and all data is permanently deleted 30 days after contract termination. While Gong is not a covered entity, we map HIPAA controls in our SOC 2 Type II audit. Yes - Gong delivers 99.5% uptime to customers around the world and offers full transparency through our Status Page . You can monitor system health, subscribe to updates, and get real-time visibility into any scheduled maintenance or service incidents. Gong provides full transparency through its publicly available Trust Center . It's your go-to for security documentation, certifications, policies, and more FAQ. If you're running a review or security assessment, you'll find everything you need there. Discovered a security or privacy issue that you believe we should know about? We would love to hear from you.