Welcome to Gong's Trust Center, your central resource for information about the security, privacy, compliance, and AI governance of the Gong Revenue AI platform. Gong helps thousands of organizations transform customer interactions into actionable revenue insights, and protecting customer data is foundational to everything we do.
If there is documentation or information you are looking for but can't find here, please reach out directly to our Office of the CISO team at office.ciso@gong.io.
Search
Use the search bar at the top of the page to quickly find documentation, security resources, and content cards covering the key aspects of Gong's security, privacy, compliance, and AI programs.
Documentation
Download documentation, including certifications, audit reports, policies, and other security artifacts available through the Trust Center.
Trust Center Updates
Gong's Response to PHP2Shell Vulnerabilities
Gong is aware of the reported PHP vulnerabilities, known as PHP2Shell, and took immediate action to assess the threat and related advisory notices. As of this time, there is no evidence of any exploitation, impact to the platform or customer data.
We have implemented proactive mitigations (e.g. additional run time protection rules, blocking policies) and enhanced monitoring. We will continue to monitor the situation and we’ll apply remediation in accordance with our standard process for critical threats.
Gong Trust Center Collateral Updates
We’ve updated the Gong Trust Center with our latest security and compliance documentation.
Newly available:
- SOC 2 Type II Report (2026)
- ISO/IEC 27017 and ISO/IEC 27018 certificates, covering cloud security and the protection of PII in cloud environments
- Architecture diagram
- Security packet zip files





