Skip to main content
GitLab logo

GitLab

CSA STAR evidence

A complete DevOps platform delivered as a single application.

gitlab.comDevOps and observabilityLast verified 17 Sep 2026
CSA STAR mark, CertReports state Verified as of 17 Sep 2026Verified

GitLab and CSA STAR

GitLab is listed in the CSA STAR registry for CSA STAR (STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider), dated 13 Apr 2020. CertReports last verified this on 17 Sep 2026 from the registry.

Evidence

VerifiedSTAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
as of 17 Sep 2026 · confidence 100%
Kind
self assessment
Issued or listed
13 Apr 2020
Products in scope
gitlab.com gitlab dedicated
SourceCapturedQuoteLinks
CSA STAR registry
Official registry · HTTP 200
17 Sep 2026gitlab: STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
Live pagesha256 e7f124247f
Vendor-statedVendor states CSA STAR on its trust centre
as of 17 Sep 2026 · confidence 90%
SourceCapturedQuoteLinks
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
17 Sep 2026CSA STAR
Live page Snapshotsha256 525b8d6a9f
What CSA STAR means, and what it does not

Level 1 is a self-assessment (CAIQ). Level 2 is a third-party certification or attestation built on ISO 27001 or a SOC 2 examination plus the Cloud Controls Matrix.

Read the CSA STAR guide and browse all vendors with evidence

Questions buyers ask

Does GitLab have CSA STAR?

GitLab is listed in the CSA STAR registry for CSA STAR (STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider), dated 13 Apr 2020. CertReports last verified this on 17 Sep 2026 from the registry.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Alternatives with CSA STAR evidence

Similar vendors (shared product tags or the DevOps and observability category) whose CSA STAR row is verified or vendor-stated, ranked by similarity.