Trust Center

Start your security review

View & download sensitive information

Ask for information

Search items

GitLab's Mission

At GitLab, we're committed to Information Security. It is GitLab’s mission to make it so that everyone can contribute, and it's our Security Division's mission to enable everyone to innovate and succeed on a safe, secure, and trusted DevSecOps platform. To learn more, visit the security section of our handbook.

GitLab's AI Transparency Center can be found here.

Compliance

CCPA

CSA STAR

CSA Trusted Cloud Provider

Documents

Featured Documents

REPORTSPenetration Test Executive Summary (Pentest)

COMPLIANCEISO 27001

COMPLIANCESOC 2

Policies

Acceptable Use Policy

Access Management Policy

Audit Logging Policy

AI

AI Risk Management

AI Transparency Center

Prompt Guardrails

Security Asset Portfolio

Namespace Isolation in GitLab.com

Self-Assessments

CAIQ

SIG Core

Public Sector

U.S. Army DSOP

Product Security

2-Factor Authentication

Audit Logging

Integrations

Data Security

Data Backups

Data Retention

Encryption in-transit

App Security

Bug Bounty Program

Software Bill of Materials (SBOM)

Code Analysis

Access Control

Data Access

Logging

Password Security

Infrastructure

Status Monitoring

Anti-DDoS

Business Continuity & Disaster Recovery Test Report (BC/DR)

Network Security

DMARC

Firewall

Security Information and Event Management

Corporate Security

Email Protection

Employee Training

HR Security

Endpoint Security

Disk Encryption

Endpoint Detection & Response

Mobile Device Management

Risk Profile

Data Access LevelInternal

Impact LevelSubstantial

Critical DependenceNo

Reports

GitLab.com Data Security Overview

Penetration Test Executive Summary (Pentest)

Data Privacy

Data Breach Notifications

Data Privacy Contact

Legal

Subprocessors

Cyber Insurance

Data Processing Agreement

ESG

Anti-Bribery and Corruption

CDP Disclosure

Code of Ethics

Security Grades

Qualys SSL Labs

gitlab.com

A+

Knowledge Base (FAQ)

Are change management baselines established for all relevant authorized changes on organizational assets?

Are business continuity management and operational resilience policies and procedures established, documented, approved, communicated, applied, evaluated, and maintained?

Are baseline requirements to secure different applications established, documented, and maintained?

Are background verification policies and procedures of all new employees (including but not limited to remote employees, contractors, and third parties) established, documented, approved, communicated, applied, evaluated, and maintained?

Are audit records generated, and do they contain relevant security information?

Trust Center Updates

PCI DSS AoC is Now Available

Copy link

Compliance

GitLab's PCI DSS AoC - SAQ D for Service Providers is now available for GitLab.com. Please visit the Trust Center to download the AoC and the Responsibility Matrix.

2024/2025 Bridge Letter is Now Available

Copy link

Compliance

GitLab's 2024/2025 SOC2 Bridge Letter is now available for both GitLab.com and GitLab Dedicated.

Updated SOC Reports and ISO Certificate!

Copy link

Compliance

The 2024 GitLab.com and GitLab Dedicated SOC2 reports are now available on the trust center. GitLab's ISO certificate, which covers ISO 27001, 27017, and 27018 is also available on the trust center in English, French, German, and Japanese.

Updated Penetration Test Executive Summary

Copy link

General

GitLab has published its FY25 Penetration Test Executive Summary report. The report covers both GitLab.com and GitLab Dedicated. Please download the report from the trust center at your convenience.

Documents Updated with Japanese, German, and French Translations

Copy link

General

GitLab has updated the following documents for both GitLab.com and GitLab Dedicated with Japanese, German, and French translations:

Securing Customer Data Report
GitLab Technical Paper - Securing GitLab's Supply Chain
CAIQ
ISO Certificate
ISO 27001 Summary Letter

If you think you may have discovered a vulnerability, please send us a note.

Report issue