Gainsight CS Quarterly Patch Release Notes: Q2 2026 May to July

Secure Credentials with Automatic Masking Across Connectors

Gainsight CS protects connection credentials stored in connectors using Key Management Service (KMS) encryption. This security upgrade has been extended to 13 connectors, ensuring that sensitive fields such as API keys, client secrets, and passwords are encrypted at rest and never re-displayed after being saved.

What's Changed

The following changes apply across all affected connectors:

• Credential Fields Are Masked: After you save a connection, Gainsight displays a masked placeholder in secret fields. The system does not retrieve or reveal saved credentials when you edit the connector card.
• Update Credentials by Overwriting: To update a saved secret, type a new value directly over the masked placeholder. Gainsight replaces the stored credentials when you save the connection.

The following additional behavior applies only to REST API connectors:

When you create a new connection or rotate an existing secret, the generated secret is shown once with a Copy option. Gainsight recommends copying and saving this key.

Affected Connectors

The following lists the 13 connectors that now include credential masking and KMS encryption:

• Freshdesk
• Zuora (V2)
• Zendesk
• Intercom (V2)
• ServiceNow
• Pipedrive (V2)
• Jira
• Zoho (V2)
• Gong.io
• Ecosystem
• Aha!
• Productboard
• REST API (Custom Connector)