GitLab compliance, certifications and attestations

An auditor's report on security, availability, confidentiality, processing integrity and privacy controls.

Type IIVendor page

A certified information security management system.

HeldVendor page

Cloud-specific security controls on top of ISO 27001.

HeldVendor page

Protection of personal data in public clouds acting as processors.

HeldVendor page

Authorization to sell a cloud service to US federal agencies.

ModerateFedRAMP MarketplaceGitLab Dedicated for Government

A security verification for US state and local government cloud buyers.

ModerateGovRAMP product listGitLab Dedicated for Government (Authorized, Moderate)

Accessibility conformance reports (VPAT) for US federal buyers.

HeldVendor page

Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.

HeldData Privacy Framework ListEU-US, UK extension, Swiss-US; non-HR data. GitLab

A listing in the Cloud Security Alliance STAR Registry.

Level 1CSA STAR RegistryCAIQ