Fourteen subject-linked assurance records. Download the original files and follow the primary-source context for each area.
GitLab publicly states that it maintains ISO/IEC 27001:2022 certification for GitLab.com, its SaaS subscriptions and GitLab Dedicated.
Public statement supports the certification category. The attached record and its printed expiry have not been independently authenticated.
GitLab publicly states that it maintains ISO/IEC 27017:2015 compliance for GitLab.com, SaaS subscriptions and GitLab Dedicated.
Compliance statement is public; the submitted record is not a separately authenticated certificate.
GitLab publicly states that it maintains ISO/IEC 27018:2019 compliance covering protection of personally identifiable information in public-cloud environments.
A public compliance statement is not verification of the attached document or its validity window.
GitLab publicly states that it maintains SOC 2 Type 2 reports for GitLab.com and GitLab Dedicated under the Security, Confidentiality and Availability Trust Services Criteria.
The public statement supports report availability; the attached record is not an authenticated audit report.
GitLab publishes a PCI Charter describing its governance for maintaining service-provider PCI DSS obligations.
A governance charter is not an Attestation of Compliance, and it does not authenticate this particular archive item.
GitLab publishes control-mapping templates for IRAP-related frameworks. A mapping is not evidence of an accredited IRAP assessment.
No official assessor identity or complete assessment scope has been independently confirmed for the attached archive item.
The GitLab assurance directory directs readers to the Trust Center for current certifications; no independent confirmation of the attached 27701 record has been established here.
Do not infer current 27701 certification solely from this document index.
GitLab describes mapping its common controls to the NIST Cybersecurity Framework, including risk governance and security operations.
NIST CSF is a framework; a mapping or self-assessment should not be described as a NIST-issued certification.
GitLab publishes a CIS Critical Security Controls v8.1 compliance framework template for mapping controls.
A template or control mapping is not evidence of independent certification.
GitLab publishes privacy documentation and personal-data handling information under its own domain.
GDPR is a regulation rather than a certificate. Published privacy policy content does not authenticate this attachment.
GitLab describes itself as a Cloud Security Alliance Trusted Cloud Provider; that does not by itself establish a specific CSA STAR Level 2 certificate.
The provided image alone does not establish STAR registry status or independent assurance level.
GitLab publishes templates for CMMC and NIST SP 800-171 mappings.
A control mapping is not proof of a CMMC assessment or certified scope.
GitLab publishes privacy materials; the submitted HIPAA-style assessment has not been independently confirmed against a specific covered service.
HIPAA does not issue a universal compliance certificate for this record.
Business-continuity guidance is related to ISO 22301; the specific archive record and its asserted date are not confirmed by the public references linked here.
This index does not establish an accredited ISO 22301 certificate.
No records match this search.
