---
title: "Gong security and privacy documents"
slug: "access-gong-security-and-privacy-documents"
updated: 2026-07-29T10:17:06Z
published: 2026-07-29T10:17:06Z
canonical: "help.gong.io/access-gong-security-and-privacy-documents"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.gong.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Gong security and privacy documents

> **Available on**: Any Gong plan
> 
> **Ideal for**: Security teams, legal teams, and procurement reviewers

All Gong trust and compliance documents are available through the [Gong Trust Center](https://trust.gong.io). Some legal documents are also published directly on gong.io.

## Compliance reports and assessments

The following reports are available to download from the [Trust Center](https://trust.gong.io):

- **Trust Brochure**: Security, Privacy & AI Whitepaper
- **SOC 2 Type II + HIPAA Report**: Third-party attestation covering security, availability, confidentiality, privacy, and HIPAA security requirements
- **PCI DSS SAQ-D**: Self-Assessment Questionnaire covering Gong's PCI DSS scope
- **Penetration test executive summary**: Summary from Gong's independent penetration testing program
- **CAIQ**: Cloud Security Alliance questionnaire
- **SIG Lite**: Standardized Information Gathering questionnaire

## Certifications

The following ISO certificates are available to download from the [Trust Center](https://trust.gong.io):

- ISO/IEC 27001: Information Security Management
- ISO/IEC 27017:2015: Cloud Security
- ISO/IEC 27018:2019: Cloud Privacy
- ISO/IEC 27701: Privacy Management
- ISO/IEC 42001:2023: AI Management

To learn more about each certification, see [Gong compliance certifications and attestations](/v1/docs/review-gong-compliance-certifications-and-attestations).

## Legal and privacy documents

- [Data Processing Addendum (DPA)](https://www.gong.io/data-processing-addendum/)
- [Privacy policy](https://www.gong.io/privacy-policy/)
- [List of sub-processors](https://www.gong.io/sub-processors/)
- [Terms and conditions](https://www.gong.io/terms-and-conditions/)
- **Data breach notifications**: available in the legal and privacy section of the [Trust Center](https://trust.gong.io)
- **Data Privacy Officer contact**: available in the legal and privacy section of the [Trust Center](https://trust.gong.io)

## Submit a security vulnerability

To report a security vulnerability, use Gong's Vulnerability Disclosure Program at [vdp.gong.io](https://vdp.gong.io/p/Welcome). For general security questions, contact [office.ciso@gong.io](mailto:office.ciso@gong.io).

Access to this feature depends on your [assigned seat](/v1/docs/plans-and-seats).