SOC 2 company profile

What SOC 2 provider does Gong use?

See the auditors, compliance platforms, and trust-center services connected to Gong’s SOC 2 program.

SOC 2 statusself attested

Report typeType II

Providers found2

Last checked2026-08-29

Providers

Gong’s SOC 2 stack

trust center

SafeBase

SafeBase is named in Gong's security or compliance materials.

** - PCI DSS: **GRSee Consulting LTD.** - **Compliance Automation Platform**: Not explicitly named as a standalone provider in the main text, but the Trust Center is **'Powered by SafeBase'** and displays the branding **'SafeBase by Drata'**. - **Trust-Center Provider**: **SafeBase** (specifically 'Gong Trust Center | Powered by SafeBase'). - **Frameworks and Named Provider Relationships**: - **CSA STAR** / **CSA STAR Level 1** (Gong STAR Regis

Checked 2026-08-29

View source ↗

compliance platform

Drata

Drata is named in Gong's security or compliance materials.

e Automation Platform**: Not explicitly named as a standalone provider in the main text, but the Trust Center is **'Powered by SafeBase'** and displays the branding **'SafeBase by Drata'**. - **Trust-Center Provider**: **SafeBase** (specifically 'Gong Trust Center | Powered by SafeBase'). - **Frameworks and Named Provider Relationships**: - **CSA STAR** / **CSA STAR Level 1** (Gong STAR Registry Listing) - **EU-US DPF** (Data Privacy Framewo

Checked 2026-08-29

View source ↗

Primary compliance evidence

Gong public statement

Based on the Gong Trust Center (https://trust.gong.io/), here is the exact visible text relevant to your request: - **SOC 2 Status and Report Type**: Gong provides a **'SOC 2 Type 2 + HIPAA Report'**. Additionally, references to a **'SOC 2 Type II Report (2026)'** were observed in Trust Center updates. - **Auditor / CPA Firm**: - SOC 2: **Ernst & Young Global** - ISO/IEC 27001, 27

Classification: self attested · checked 2026-08-29

Open source ↗