Skip to content
Attested.
VendorsDev tools7h ago
Vendor · Dev tools

GitLabCompliance, certifications and attestations

Certifications held, by family8 held
Status
Public
Headquarters
San Francisco, United States
Founded
2011
Website
gitlab.com
Trust center Company profile
8
Certifications held
3
Backed by a registry
8
Pieces of evidence
Sep 24, 2026
Last captured
Across fru.devEarnings

SOC reports

ISO standards

AI governance

US government

Health

Payments

Privacy

Cloud security

Regional

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

History

Added or renewedUpgradedIn process or ReadyLapsed or removed
  1. AddedData Privacy FrameworkGitLab
  2. AddedFedRAMP ModerateGitLab Dedicated for Government
  3. In processFedRAMP ModerateGitLab Dedicated for Government
  4. AddedCSA STARFirst listed in the CSA STAR Registry

Evidence

Every source, what it says and when it was read.

SOC 21 source

Held · Type IIVendor compliance page
...Documents. Learn more Compliance & Assurance Credentials SOC Certification GitLab maintains a SOC 2 Type 2 report for the Security, Confidentiality and Availability Trust Services Criteria for GitLab.com. GitLab...
Captured Sep 24, 2026Open source

ISO/IEC 270011 source

HeldVendor compliance page
...Confidentiality and Availability Trust Services Criteria for GitLab Dedicated. Learn more ISO/IEC 27001:2022 Certification GitLab maintains ISO/IEC 27001:2022 certification for the information security management system...
Captured Sep 24, 2026Open source

ISO/IEC 270171 source

HeldVendor compliance page
...GitLab software-as-a-service (SaaS) subscriptions, GitLab.com and GitLab Dedicated. Learn more ISO/IEC 27017:2015 Standard ISO/IEC 27017:2015 established guidelines for information security controls applicable to the provision...
Captured Sep 24, 2026Open source

ISO/IEC 270181 source

HeldVendor compliance page
...GitLab software-as-a-service (SaaS) subscriptions, GitLab.com and GitLab Dedicated. Learn more ISO/IEC 27018:2019 Standard ISO/IEC 27018:2019 establishes guidelines for implementing measures to protect Personally Identifiable...
Captured Sep 24, 2026Open source

FedRAMP1 source

Held · ModerateFedRAMP Marketplace

GitLab Dedicated for Government

FedRAMP Authorized, Moderate impact; authorized 2025-05-15 (Agency); assessor Fortreum, LLC; 2 agency authorizations
Captured Sep 23, 2026Since May 15, 2025Open source

Data Privacy Framework1 source

HeldData Privacy Framework List

EU-US, UK extension, Swiss-US; non-HR data. GitLab

EU-US status: Active; certified since 2026-04-29; recertification due 2027-04-29; verification: Self-Assessment
Captured Sep 23, 2026Since Apr 29, 2026Renewal due Apr 29, 2027Open source

CSA STAR1 source

Held · Level 1CSA STAR Registry

CAIQ

Listed as GitLab since 2020-04-13; Level 1 (self-assessment)
Captured Sep 23, 2026Since Apr 13, 2020Open source

Compare with

GitLab vs Atlassian GitLab vs HashiCorp GitLab vs GitHub GitLab vs Postman GitLab vs Vercel GitLab vs Snyk

Weekly: vendors that gained or lost a certification, Wednesdays.