Gong
Gong · Meeting notes · US · www.gong.io
services/gong.yamlVendor data-handling terms
The policy permits improvement of the services from de-identified data. Model training on identifiable call content is not separately addressed in the public policy; customer agreements govern it.
“To create aggregated statistical data, inferred non-personal data, or anonymized or pseudonymized data (rendered non-personal and non-identifiable), which we or our business partners may use to provide and improve our respective services, or for any other purpose ( Legitimate Interests );”
“To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and the applicable legal requirements.”
“We and our authorized Service Providers (defined below) maintain, store and process personal data in the United States of America, Europe, Israel, and other locations, as reasonably necessary for the proper performance and delivery of our Services, or as may be required by law.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| api.gong.io | api | observed |
Assessment
Reasoning: A revenue-intelligence platform that records and analyses sales calls and emails. It is deployed under enterprise contracts that carry the real data terms; the public policy permits de-identified improvement and multi-region processing including Israel (adequate) and the United States. The exposure is customer conversations, for which the deploying organisation is controller and must handle consent.
Flags: Recorded customer calls (third-party personal data; consent required) · GDPR Chapter V (US processing) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Improvement, retention, and multi-region terms verified against the Gong privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.