GitLab

Developer Tools United States Website Reviewed Sept. 2, 2026

End-to-end DevSecOps platform: source control, CI/CD, security scanning and release management.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 Accredited third-party certification body GitLab.com SaaS and supporting ISMS — — Current
SOC 2 Type II and SOC 3 Independent third-party auditor GitLab.com SaaS. SOC 3 published publicly; SOC 2 available to customers under NDA — — Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
Processor under its DPA; GitLab Dedicated offers regional data residency
NIST Cybersecurity Framework
Partial
Pipeline security scanning supports NIST CSF protect and detect outcomes

Assess GitLab in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register