{"id":4555,"date":"2022-12-02T17:20:04","date_gmt":"2022-12-03T01:20:04","guid":{"rendered":"https:\/\/www.gong.io\/?page_id=4555"},"modified":"2024-10-04T13:24:02","modified_gmt":"2024-10-04T20:24:02","slug":"compliance","status":"publish","type":"page","link":"https:\/\/www.gong.io\/trust-center\/compliance\/","title":{"rendered":"Compliance"},"content":{"rendered":"\n
<\/div><\/div>\n\n
\n

COMPLIANCE AT GONG<\/p>\n

WE GET COMPLIANCE,
YOU FOCUS ON BUSINESS<\/mark><\/h1>\n

Gong provides solutions to meet your compliance requirements.<\/p><\/div>\n\n\n\n\n

\n\n\n
\n
\n\n\n
\n
\n\n
<\/div>\n
\n
\n\n\n
\n
\"\"<\/div>\n<\/div>\n<\/block-icon>\n\n

\n\nSOC 2 (Type 2)<\/strong>\n<\/p>\n\n

\n\nTrust Services Principles

\n<\/p>\n\n\n\nSOC 2 Type 2 is an assessment of Gong\u2019s security safeguards for protecting customer data<\/span>\n<\/span>\n\n\n<\/div>\n<\/div>\n<\/block-cards-item>\n\n\n

<\/div>\n
\n
\n\n\n
\n
\"\"<\/div>\n<\/div>\n<\/block-icon>\n\n

\n\nISO\/IEC 27001<\/strong>\n<\/p>\n\n

\n\nInformation Security Management System (ISMS)\n<\/p>\n\n\n\nISO 27001 globally recognized, standards-based approach to security. Valid until Oct 2025<\/span>\n<\/span>\n\n\n<\/div>\n<\/div>\n<\/block-cards-item>\n\n\n

<\/div>\n
\n
\n\n\n
\n
\"\"<\/div>\n<\/div>\n<\/block-icon>\n\n

\n\nISO\/IEC 27017<\/strong>\n<\/p>\n\n

\n\nInformation Security Management System (ISMS)\n<\/p>\n\n\n\nISO 21017 – Certificate (#1122102) – information security controls for cloud service providers<\/span>\n<\/span>\n\n\n<\/div>\n<\/div>\n<\/block-cards-item>\n\n\n

<\/div>\n
\n
\n\n\n
\n
\"\"<\/div>\n<\/div>\n<\/block-icon>\n\n

\n\nISO\/IEC 27018<\/strong>\n<\/p>\n\n

\n\nInformation Security Management System (ISMS)\n<\/p>\n\n\n\nISO 27018 – Certificate (#1122103) protecting PII in cloud<\/span>\n<\/span>\n\n\n<\/div>\n<\/div>\n<\/block-cards-item>\n\n\n

<\/div>\n
\n
\n\n\n
\n
\"\"<\/div>\n<\/div>\n<\/block-icon>\n\n

\n\nISO\/IEC 27701<\/strong>\n<\/p>\n\n

\n\nPrivacy Information Management System (PIMS)\n<\/p>\n\n\n\nISO 27701 is a globally recognized, privacy-based certification. Valid until July 2027<\/span>\n<\/span>\n\n\n<\/div>\n<\/div>\n<\/block-cards-item>\n\n\n

<\/div>\n
\n
\n\n\n
\n
\"\"<\/div>\n<\/div>\n<\/block-icon>\n\n

\n\nPCI DSS<\/strong>\n<\/p>\n\n

\n\nThe Payment Card Industry Data Security Standard\n<\/p>\n\n\n\nPCI compliant mechanism (SAQ-D) to ingest calls from external telephony systems<\/span>\n<\/span>\n\n\n<\/div>\n<\/div>\n<\/block-cards-item>\n\n\n

<\/div>\n
\n
\n\n\n
\n
\"\"<\/div>\n<\/div>\n<\/block-icon>\n\n

\n\nSecurity Requirements<\/strong>\n<\/p>\n\n

\n\nHealth Information Privacy\n<\/p>\n\n\n\nHIPAA Security Requirements to principles and criteria<\/span>\n<\/span>\n\n\n<\/div>\n<\/div>\n<\/block-cards-item>\n\n\n

<\/div>\n
\n
\n\n\n
\n
\"\"<\/div>\n<\/div>\n<\/block-icon>\n\n

\n\nSecurity Trust Assurance and Risk (STAR) Registry<\/strong>\n<\/p>\n\n

\n\nCloud Security Alliance\n<\/p>\n\n\n\nSelf Assessment<\/a> for Gong Reality Platform<\/span>\n<\/span>\n\n\n<\/div>\n<\/div>\n<\/block-cards-item>\n\n\n

<\/div>\n
\n
\n\n\n
\n
\"\"<\/div>\n<\/div>\n<\/block-image>\n\n

\n\nData Privacy Framework (DPF) Program<\/strong>\n<\/p>\n\n\n\nGong is certified with the EU-U.S. Data Privacy Framework <\/a>(EU-U.S. DPF).<\/span>\n<\/span>\n\n\n<\/div>\n<\/div>\n<\/block-cards-item>\n\n\n<\/div>\n<\/div>\n<\/block-cards>\n\n\n<\/div>\n<\/div>\n<\/block-hero-content>\n\n\n<\/div>\n<\/div>\n<\/block-hero>\n\n\n\n\n

<\/div>\n
\n
\n\n
<\/div>\n
\n
\n\n\n
\n
\n\t\n\t\t\t\t\t
\n\n
\n\n\n
\n
\"\"<\/div>\n<\/div>\n<\/block-image>\n\n\n<\/div>\n<\/div>\n\n\t\t\t\t\t
\n\n
\n\n\n
\n

GDPR<\/h2>\n

Gong has implemented measures to ensure you remain GDPR compliant.<\/mark><\/mark><\/p>\n<\/div>\n<\/block-header>\n\n\n\n

\n