Gong

Gong · Meeting notes · US · www.gong.io

Last verified 2026-09-16
Entry services/gong.yaml
Training on your data (default tier)
Anonymised or pseudonymised data may be used to improve the Services; no explicit statement on training with call content
Retention
As long as reasonably necessary for the relationship, legal obligations, and disputes; period set by sensitivity and purpose
Data residency
Stored and processed in the United States, Europe, Israel, and other locations

Vendor data-handling terms

Training on your data (default tier)
Anonymised or pseudonymised data may be used to improve the Services; no explicit statement on training with call content

The policy permits improvement of the services from de-identified data. Model training on identifiable call content is not separately addressed in the public policy; customer agreements govern it.

To create aggregated statistical data, inferred non-personal data, or anonymized or pseudonymized data (rendered non-personal and non-identifiable), which we or our business partners may use to provide and improve our respective services, or for any other purpose ( Legitimate Interests );
checked 2026-09-16
Gong Privacy Policy
Retention
As long as reasonably necessary for the relationship, legal obligations, and disputes; period set by sensitivity and purpose
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and the applicable legal requirements.
checked 2026-09-16
Gong Privacy Policy, Retention
Data residency
Stored and processed in the United States, Europe, Israel, and other locations
We and our authorized Service Providers (defined below) maintain, store and process personal data in the United States of America, Europe, Israel, and other locations, as reasonably necessary for the proper performance and delivery of our Services, or as may be required by law.
checked 2026-09-16
Gong Privacy Policy, International transfers

Domains and endpoints

observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.

HostRoleSource
api.gong.ioapiobserved

Assessment

All deployments: medium

Reasoning: A revenue-intelligence platform that records and analyses sales calls and emails. It is deployed under enterprise contracts that carry the real data terms; the public policy permits de-identified improvement and multi-region processing including Israel (adequate) and the United States. The exposure is customer conversations, for which the deploying organisation is controller and must handle consent.

Flags: Recorded customer calls (third-party personal data; consent required) · GDPR Chapter V (US processing) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.

Changelog

  • 2026-09-16Documented. Improvement, retention, and multi-region terms verified against the Gong privacy policy.
  • 2026-09-15Listed from the Unseen catalogue with observed domains.

Corrections

Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.

Edit on GitHub