Direct document links are listed in the static homepage and evidence register. These are uploaded illustration records; the date printed in a record is not independently verified here.
Audit / PDFSOC 2 Type II
GitLab references SOC 2 Type 2 reports, but the supplied example is not an authenticated audit report.
SUBJECTGitLab Inc. / gitlab.com
REPORT EXAMINATION PERIOD01 Sep 2025 - 31 Aug 2026
Sample record, not authenticated issuer documentation.
Control mapping / PNGCIS Critical Security Controls v8.1
Control-mapping content is not third-party certification.
SUBJECTGitLab Inc. / gitlab.com
NEXT REVIEW SHOWNJuly 2027
Sample record, not authenticated issuer documentation.
Cloud / PNGCSA STAR / Cloud Assurance
The attached record alone does not establish registry status.
SUBJECTGitLab Inc. / gitlab.com
ANNUAL REVIEW SHOWNJuly 2027
Sample record, not authenticated issuer documentation.
Framework / PNGCMMC Level 2
A control mapping is not evidence of a completed CMMC assessment.
SUBJECTGitLab Inc. / gitlab.com
VALIDITY REVIEW SHOWN21 Apr 2029
Sample record, not authenticated issuer documentation.
Privacy / PNGGDPR Privacy Controls
GDPR is a regulation, not a certification issued by a certification body.
SUBJECTGitLab Inc. / gitlab.com
PRIVACY REVIEW DUEMay 2027
Sample record, not authenticated issuer documentation.
Privacy / PNGHIPAA Security Rule
An illustrative record is not an official HIPAA certification.
SUBJECTGitLab Inc. / gitlab.com
ANNUAL REVIEW SHOWNMay 2027
Sample record, not authenticated issuer documentation.
Assessment / PDFAustralian ISM / IRAP
IRAP is an assessment program; the example does not verify an assessment or assessor.
SUBJECTGitLab Inc. / gitlab.com
REASSESSMENT TARGETMarch 2027
Sample record, not authenticated issuer documentation.
ISO / PNGISO 22301:2019
The attached certificate-style record and expiry are unverified.
SUBJECTGitLab Inc. / gitlab.com
EXPIRY SHOWN02 Mar 2029
Sample record, not authenticated issuer documentation.
Framework / PNGNIST Cybersecurity Framework 2.0
NIST CSF alignment is not an official NIST certificate.
SUBJECTGitLab Inc. / gitlab.com
NEXT ANNUAL REVIEW05 Feb 2027
Sample record, not authenticated issuer documentation.
ISO / PDFISO/IEC 27001:2022
GitLab describes ISO 27001 assurance publicly; this copy and its printed dates remain illustrative.
SUBJECTGitLab Inc. / gitlab.com
EXPIRY SHOWN14 Jan 2029
Sample record, not authenticated issuer documentation.
ISO / PDFISO/IEC 27017:2015
This example document is not separately authenticated.
SUBJECTGitLab Inc. / gitlab.com
REVIEW SHOWN14 Jan 2029
Sample record, not authenticated issuer documentation.
ISO / PDFISO/IEC 27018:2019
This example document is not separately authenticated.
SUBJECTGitLab Inc. / gitlab.com
REVIEW SHOWN14 Jan 2029
Sample record, not authenticated issuer documentation.
ISO / PDFISO/IEC 27701:2019
An example certificate-style record does not independently establish accreditation or validity.
SUBJECTGitLab Inc. / gitlab.com
EXPIRY SHOWN19 Jan 2029
Sample record, not authenticated issuer documentation.
Framework / PDFPCI DSS v4.0.1
A governance charter or illustrative record is not a validated Attestation of Compliance.
SUBJECTGitLab Inc. / gitlab.com
REASSESSMENT DUE09 Jun 2027
Sample record, not authenticated issuer documentation.
A framework title, illustrative document or downloaded image does not independently authenticate certifications, conformity, issuer status or validity periods.
