At GitLab, we're committed to Information Security. It is GitLab’s mission to make it so that everyone can contribute, and it's our Security Division's mission to enable everyone to innovate and succeed on a safe, secure, and trusted DevSecOps platform. To learn more, visit the security section of our handbook.
GitLab's AI Transparency Center can be found here.
Is an inventory of all endpoints used and maintained to store and access company data?
Is access to audit logs restricted to authorized personnel, and are records maintained to provide unique access accountability?
Are processes, procedures, and defense-in-depth techniques defined, implemented, and evaluated for protection, detection, and timely response to network-based attacks?
Is GitLab PCI- DSS compliant?
Is the ownership and stewardship of all relevant personal and sensitive data documented?
View more
Compliance
GitLab's 2025-2026 SOC 2 Bridge Letter is now available for both GitLab.com and GitLab Dedicated.
Compliance
The 2025 GitLab.com and GitLab Dedicated SOC 2 reports are now available on the Trust Center. GitLab's ISO certificate, which covers ISO 27001, 27017, and 27018, is also available on the Trust Center in English, French, German, and Japanese.
The 2024 GitLab.com and GitLab Dedicated SOC2 reports are now available on the trust center. GitLab's ISO certificate, which covers ISO 27001, 27017, and 27018 is also available on the trust center in English, French, German, and Japanese.
Compliance
GitLab's PCI DSS AoC - SAQ D for Service Providers is now available for GitLab.com. Please visit the Trust Center to download the Attestation of Compliance (AoC), Responsibility Matrix, and Pentest Letter of Attestation.
GitLab's PCI DSS AoC - SAQ D for Service Providers is now available for GitLab.com. Please visit the Trust Center to download the AoC and the Responsibility Matrix.
Compliance
GitLab has achieved ISO/IEC 42001 certification for AI governance. You can access the certificate on our trust center.
General
GitLab has published its FY26 Penetration Test Executive Summary reports. The reports cover both GitLab.com and GitLab Dedicated. Please download the reports from the trust center at your convenience.
GitLab has published its FY25 Penetration Test Executive Summary report. The report covers both GitLab.com and GitLab Dedicated. Please download the report from the trust center at your convenience.
If you think you may have discovered a vulnerability, please send us a note.
Report issue