ISO and SOC references with their stated scopes, record dates and supporting documents.
GitLab's public Trust Center describes ISO/IEC 27001:2022 certification, ISO/IEC 27017:2015 and ISO/IEC 27018:2019 compliance, and SOC 2 Type 2 reports. This independent index links those public statements to associated archive records; the archive does not replace original issuer documents.
See GitLab Trust Center ↗Use the printed expiry or report period only as information from the downloaded record, pending issuer confirmation.
Information security management system covering risk treatment, access controls, operations, and managed cloud service governance.
Public statement supports the certification category. The attached record and its printed expiry have not been independently authenticated.
Cloud security management responsibilities and implementation of controls for hosted services.
Compliance statement is public; the submitted record is not a separately authenticated certificate.
Privacy safeguards for public cloud, data handling and processor responsibilities.
A public compliance statement is not verification of the attached document or its validity window.
Operational effectiveness of security, confidentiality and availability controls over a defined period.
The public statement supports report availability; the attached record is not an authenticated audit report.
Privacy information management framework and personal data processing practices.
Do not infer current 27701 certification solely from this document index.
Business continuity planning, operational resilience and recovery requirements.
This index does not establish an accredited ISO 22301 certificate.
