Skip to main content
GitLab logo

GitLab

CSA STAR evidence

A complete DevOps platform delivered as a single application.

gitlab.comDeveloper toolsLast verified 2 Nov 2026
Request the report Are you GitLab?
CSA STAR mark, CertReports state Verified as of 26 Oct 2026Verified

GitLab and CSA STAR

GitLab is listed in the CSA STAR registry for CSA STAR (STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider), dated 13 Apr 2020. CertReports last verified this on 26 Oct 2026 from the registry.

Evidence

VerifiedSTAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
as of 26 Oct 2026 · confidence 100%
Kind
Self-assessment
Issued or listed
13 Apr 2020
Products in scope
gitlab.com gitlab dedicated
SourceCapturedQuoteLinks
CSA STAR registry
Official registry · HTTP 200
26 Oct 2026gitlab: STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
Live pagesha256 0c3d16dcbd
CSA STAR registry
Official registry · HTTP 200
19 Oct 2026gitlab: STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
Live pagesha256 6ebb015031
CSA STAR registry
Official registry · HTTP 200
12 Oct 2026gitlab: STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
Live pagesha256 be2cb50e52
CSA STAR registry
Official registry · HTTP 200
5 Oct 2026gitlab: STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
Live pagesha256 3b3fda577e
CSA STAR registry
Official registry · HTTP 200
29 Sep 2026gitlab: STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
Live pagesha256 aadfa82b54
CSA STAR registry
Official registry · HTTP 200
17 Sep 2026gitlab: STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
Live pagesha256 e7f124247f
This is wrong
Vendor-statedVendor states CSA STAR on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
1 Nov 2026CSA STAR
Live page Snapshotsha256 4b6c1028e9
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026CSA STAR
Live page Snapshotsha256 0a1f26bba8
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026CSA STAR
Live page Snapshotsha256 5bb088ae7d
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026CSA STAR
Live page Snapshotsha256 77b60d0bd0
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026CSA STAR
Live page Snapshotsha256 08aac54470
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026CSA STAR
Live page Snapshotsha256 79bd48fa73
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026CSA STAR
Live page Snapshotsha256 ffb3d34701
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026CSA STAR
Live page Snapshotsha256 fb95fe195a
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026CSA STAR
Live page Snapshotsha256 ee11be7d48
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026CSA STAR
Live page Snapshotsha256 b73291aae7
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026CSA STAR
Live page Snapshotsha256 e7fab66c8c
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026CSA STAR
Live page Snapshotsha256 3b9dd897e3
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026CSA STAR
Live page Snapshotsha256 4ab652d50a
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026CSA STAR
Live page Snapshotsha256 ce7f184e8a
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026CSA STAR
Live page Snapshotsha256 d197046552
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026CSA STAR
Live page Snapshotsha256 e44e827c26
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026CSA STAR
Live page Snapshotsha256 93edb79d80
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026CSA STAR
Live page Snapshotsha256 d63f9c02bf
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026CSA STAR
Live page Snapshotsha256 f736c4d295
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026CSA STAR
Live page Snapshotsha256 154d466f03
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026CSA STAR
Live page Snapshotsha256 1e1d1f98ee
GitLab trust centre (Drata)
Vendor trust centre · HTTP 200
17 Sep 2026CSA STAR
Live page Snapshotsha256 525b8d6a9f
This is wrong
What CSA STAR means, and what it does not

Level 1 is a self-assessment (CAIQ). Level 2 is a third-party certification or attestation built on ISO 27001 or a SOC 2 examination plus the Cloud Controls Matrix.

Read the CSA STAR guide and browse all vendors with evidence

Questions buyers ask

Does GitLab have CSA STAR?

GitLab is listed in the CSA STAR registry for CSA STAR (STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider), dated 13 Apr 2020. CertReports last verified this on 26 Oct 2026 from the registry.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Alternatives with CSA STAR evidence

Similar vendors (shared product tags or the Developer tools category) whose CSA STAR row is verified or vendor-stated, ranked by similarity.

GitHub logo

GitHub

Developer tools

GitHub is a proprietary developer platform that allows developers to create, store, manage, and share their code

FedRAMP mark, CertReports state VerifiedISO 27001 mark, CertReports state ReportedCSA STAR mark, CertReports state VerifiedDPF mark, CertReports state Verified
3 verified2 Nov 2026
Sauce Labs logo

Sauce Labs

Developer tools

What is Sauce Labs? Sauce Labs makes software work for everyone, when they want it

SOC 2 mark, CertReports state VerifiedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedISO 27701 mark, CertReports state Vendor-statedISO 42001 mark, CertReports state Vendor-stated
4 verified · 5 stated2 Nov 2026
CircleCI logo

CircleCI

Developer tools

CircleCI provides a CI/CD cloud environment for software engineers to test their code and deploy

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedFedRAMP mark, CertReports state VerifiedPCI DSS mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedDPF mark, CertReports state Verified
3 verified · 4 stated2 Nov 2026
Appian logo

Appian

Developer tools

Appian provides a leading low-code software development platform that enables organizations to rapidly develop powerful and unique

FedRAMP mark, CertReports state VerifiedCSA STAR mark, CertReports state VerifiedDPF mark, CertReports state Expired
2 verified2 Nov 2026
SaaS.group logo

SaaS.group

Developer tools

SaaS Labs is a global SaaS product company powered by experimentation and first principles thinking, building a complete platform for high

CSA STAR mark, CertReports state VerifiedDPF mark, CertReports state Expired
1 verified2 Nov 2026

Understand CSA STAR evidence

All articles