# GitLab GitLab declares [51 subprocessors](https://thirdpartyindex.com/vendors/gitlab#subprocessors), plus 12 of its own affiliates, in [its subprocessor list](https://about.gitlab.com/privacy/subprocessors/), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/255906)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). No published changes since we first read it on 2026-09-21. [39 tracked vendors](https://thirdpartyindex.com/vendors/gitlab#used-by) name GitLab as a subprocessor, including [Tinybird](https://thirdpartyindex.com/vendors/tinybird), [Checkr](https://thirdpartyindex.com/vendors/checkr) and [WorkRamp](https://thirdpartyindex.com/vendors/workramp). GitLab (gitlab.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/gitlab - Documents last verified: 2026-11-11 - Transparency rating: 95/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 18 tracked vendors directly, 140 within two hops, 376 within three; 39 tracked vendors rely on it directly, 99 within two hops, 666 within three - Cite as: GitLab, Third Party Index, https://thirdpartyindex.com/vendors/gitlab (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://about.gitlab.com/security/ | 2026-11-11 | 2026-11-04 | | Subprocessor list | https://about.gitlab.com/privacy/subprocessors/ | 2026-11-11 | 2026-11-11 | | Data processing addendum | https://handbook.gitlab.com/handbook/legal/data-processing-agreement/ | 2026-11-11 | 2026-09-21 | | Privacy policy | https://about.gitlab.com/privacy/ | 2026-11-11 | 2026-11-04 | | Terms | https://about.gitlab.com/terms/ | 2026-11-11 | 2026-11-04 | | Security page | https://about.gitlab.com/blog/categories/security/ | 2026-11-11 | 2026-11-04 | | security.txt | https://gitlab.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 | | Status page | https://status.gitlab.com/ | 2026-11-11 | 2026-10-24 | ## Subprocessors (51) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Adaptavist](https://thirdpartyindex.com/vendors/adaptavist.md) | Professional Services | United States, European Economic Area, Canada, Malaysia, and Australia | 2026-09-22 | | Adfinis | Professional Services | European Economic Area, North Africa, Middle East, and Australia | 2026-09-22 | | [Amazon Web Services Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud Hosting and AI-Powered Product Features | United States\* | 2026-09-22 | | [Anthropic, PBC](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | AI-Powered Product Features and Customer Support | United States | 2026-09-22 | | Ascend Integrated Technology Solutions, Inc. | Professional Services | United States and Canada | 2026-09-22 | | Black Diamond Development, LLC | Professional Services | United States | 2026-09-22 | | cc cloud GmbH | Professional Services | Germany | 2026-09-22 | | CHARA-WEB Co., Ltd | Professional Services | Japan | 2026-11-11 | | [ClickHouse, Inc.](https://thirdpartyindex.com/vendors/clickhouse.md) | Database Hosting | United States | 2026-09-22 | | Cloud Ace, Inc. | Professional Services | Japan | 2026-09-22 | | [Cloudflare Inc.](https://thirdpartyindex.com/vendors/cloudflare.md) | Content Delivery Network | United States and European Union | 2026-09-22 | | Corewire GmbH | Professional Services | Germany | 2026-09-22 | | CPrime | Professional Services | United States | 2026-09-22 | | CyberChange | Professional Services | Middle East, Turkey, and Africa | 2026-09-22 | | Datamato Technologies Private Limited | Professional Services | India and United Arab Emirates | 2026-09-22 | | [Decagon AI, Inc.](https://thirdpartyindex.com/vendors/decagon.md) | First-Line Customer Support Agent | United States | 2026-09-22 | | demicon GmbH | Professional Services | Germany, Austria, and Switzerland | 2026-09-22 | | DevOps Enabler & Co. | Professional Services | India | 2026-09-22 | | Devoteam SAS | Professional Services | France | 2026-09-22 | | DF Tech FZ-LLC | Professional Services | United Arab Emirates and Saudi Arabia | 2026-09-22 | | [Eficode](https://thirdpartyindex.com/vendors/eficode.md) | Professional Services | United States, United Kingdom, and European Economic Area | 2026-09-22 | | [Elasticsearch Inc.](https://thirdpartyindex.com/vendors/elasticsearch.md) | Search Functionality and Application Logging and Debugging | United States | 2026-09-22 | | [Fireworks.ai, Inc.](https://thirdpartyindex.com/vendors/fireworks.md) (AI model provider: Fireworks) | AI-Powered Product Features | United States and European Union | 2026-09-22 | | [Fivetran, Inc.](https://thirdpartyindex.com/vendors/fivetran.md) | ELT Pipeline for Customer Support Ticketing | United States | 2026-09-22 | | GitSimple, LLC | Professional Services | United States | 2026-09-22 | | [Glean Technologies, Inc.](https://thirdpartyindex.com/vendors/glean.md) | AI-Powered Knowledge Base for Support Services | United States | 2026-09-22 | | [Google LLC](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud Hosting, Customer Support, and AI-Powered Product Features | United States | 2026-09-22 | | HCS Company B.V. | Professional Services | European Economic Area | 2026-09-22 | | [HiddenLayer, Inc.](https://thirdpartyindex.com/vendors/hiddenlayer.md) | Prompt Injection Security for AI-Powered Product Features | United States | 2026-09-22 | | INflow LLC | Professional Services | United States | 2026-11-11 | | IntouchCX Disrupt Inc. | Outsourced Customer Support Business Processes | India | 2026-09-22 | | JSaunders Solutions, LLC d/b/a NextLink Labs | Professional Services | United States and Canada | 2026-09-22 | | [LangChain, Inc.](https://thirdpartyindex.com/vendors/langchain.md) | Logging for AI-Powered Product Features | United States | 2026-10-30 | | [Mailgun Technologies, Inc.](https://thirdpartyindex.com/vendors/mailgun.md) | Transactional Email APIs | United States and European Union | 2026-09-22 | | N22 Technologies LLC | Professional Services | Middle East, Turkey, and Africa | 2026-09-22 | | Norwin Technologies LLC | Professional Services | United States, European Economic Area, Asia Pacific, India, and Mexico | 2026-09-22 | | [OpenAI, LLC](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | AI-Powered Product Features | United States | 2026-09-22 | | OTTRA Ltd | Professional Services | United Kingdom and European Economic Area | 2026-09-22 | | Par-Tec S.p.A | Professional Services | European Economic Area | 2026-09-22 | | ReleaseTEAM | Professional Services | United States and Canada | 2026-09-22 | | Sfeir S.A. | Professional Services | France, Belgium, and Luxembourg | 2026-09-22 | | Sirius Federal | Professional Services | United States | 2026-09-22 | | [Snowflake Inc.](https://thirdpartyindex.com/vendors/snowflake.md) | Data Warehouse and Analytics Services for Customer Support Ticketing | United States | 2026-09-22 | | SPK and Associates, LLC | Professional Services | United States | 2026-09-22 | | Successive Technologies | Professional Services | United States, Canada, Middle East, and Japan | 2026-09-22 | | ThunderSnow Industries Corporation | Professional Services | United States | 2026-09-22 | | Trend Solutions Co., Ltd. | Professional Services | Japan | 2026-09-22 | | VivaOps LLC | Professional Services | North America | 2026-09-22 | | X-RD Pty Ltd | Professional Services | Australia | 2026-09-22 | | [Zendesk Inc.](https://thirdpartyindex.com/vendors/zendesk.md) | Support Services Portal | United States | 2026-09-22 | | ZYYX Inc. | Professional Services | Japan | 2026-09-22 | Read from ([evidence](https://thirdpartyindex.com/evidence/843)). CSV: https://thirdpartyindex.com/vendors/gitlab/subprocessors.csv AI model providers (or a cloud provider's AI model service) among these entries: 3. All vendors that list one: https://thirdpartyindex.com/ai ### Its own affiliates (12) - GitLab BV (Australia; Germany; Netherlands) - GitLab Canada Corp. (Canada) - GitLab France SAS (France) - GitLab GK (Japan) - GitLab Iberia, S.L. (Spain) - GitLab India Pvt Ltd (India) - GitLab Ireland Ltd (Ireland) - GitLab IT BV (Netherlands) - GitLab Singapore PTE Ltd (Singapore) - GitLab Singapore Holding PTE Ltd (Singapore) - GitLab South Korea (South Korea) - GitLab UK Ltd (United Kingdom) ## Compliance As its trust center lists them. - FedRAMP Marketplace: Moderate · 3 agency authorizations · since May 15, 2025 ## Security program What Gitlab Inc.'s Form 10-K for fiscal 2026, filed Mar 17, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/1653482/000162828026018731/0001628280-26-018731-index.htm). - Led by: Chief Information Security Officer - Leader's experience: 25+ years - Board oversight: Audit Committee - Practices named: Incident response plan, Tabletop exercises, Penetration testing, Bug bounty - Engages outside assessors or consultants ## Web Technologies GitLab's homepage made 291 requests to 31 domains, 15 services controlled by another company, and 4 domains not identified. Loaded on 2026-10-01 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 15 third parties by category: Analytics 4 (Adobe, Contentsquare, LinkedIn, Cloudflare); Advertising 3 (Google Cloud, MNTN, Inc.; usually detected as Advertising: Xandr); Marketing automation 2 (6Sense Insights, Inc.; usually detected as Marketing automation: PathFactory); Live chat 1 (Qualified.com, Inc.); A/B Testing 1 (Optimizely); Cookie compliance 1 (OneTrust); Digital asset management 1 (reviewed: Cloudinary); Issue trackers 1 (usually detected as Issue trackers: Sentry); Video players 1 (reviewed: Vimeo). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (15) - Qualified.com, Inc.: 34 requests to qualified.com; Qualified - Google Cloud: 24 requests to google.com, doubleclick.net, googletagmanager.com, googleadservices.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager (its subprocessor list names it too) - 6Sense Insights, Inc.: 19 requests to 6sc.co, 6sense.com; 6sense - Cloudinary: 14 requests to cloudinary.com - OneTrust: 13 requests to cookielaw.org, onetrust.com; OneTrust - Adobe: 7 requests to bizible.com, bizibly.com, marketo.net; Adobe Marketo Measure, Marketo - Contentsquare: 4 requests to contentsquare.net; Contentsquare - LinkedIn: 4 requests to licdn.com, linkedin.com; Linkedin Insight Tag - MNTN, Inc.: 4 requests to mountain.com; Mountain - Optimizely: 3 requests to optimizely.com; Optimizely - PathFactory: 2 requests to lookbookhq.com, pathfactory.com - Vimeo: 2 requests to vimeo.com, vimeocdn.com - Cloudflare: 1 request to cloudflareinsights.com; Cloudflare Browser Insights (its subprocessor list names it too) - Sentry: 1 request to sentry.io - Xandr: 1 request to adnxs.com ### Unknown (4) Domains not identified yet: cr-relay.com, 100.20.58.101, cognitivlabs.com, mutinycdn.com ### First party (1) - GitLab: 153 requests to gitlab.com, gitlab.net; Cloudflare, Cloudinary, GitLab, HSTS, HTTP/3, Hotjar, Linkedin Ads, Microsoft Clarity, Mutiny, Nuxt.js, Open Graph, Priority Hints, RSS, Ruby, Ruby on Rails, Sentry, Snowplow Analytics, Vimeo, Vue.js, core-js 3.46.0 10 tracked companies loaded by the homepage are not in GitLab's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (39) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Acquia](https://thirdpartyindex.com/vendors/acquia.md): Facilitate collaborative code writing including the ability to; view, review, and discuss code. - [Apica](https://thirdpartyindex.com/vendors/apica.md): Integrations for script repositories USA - [BlackFog](https://thirdpartyindex.com/vendors/blackfog.md): Source Code Management - [Bluebeam](https://thirdpartyindex.com/vendors/bluebeam.md): Source control and CI platform with embedded configuration and logs that may include identifiers. - [Checkr](https://thirdpartyindex.com/vendors/checkr.md): Issue Management - [Clueso](https://thirdpartyindex.com/vendors/clueso-io.md): Customer-authorised repository access, read-only - [Confirm](https://thirdpartyindex.com/vendors/confirm.md) - [Darktrace](https://thirdpartyindex.com/vendors/darktrace.md): Production issues/incidents tracking and communication - [Darktrace Federal](https://thirdpartyindex.com/vendors/darktrace-federal.md): Production issues/incidents tracking and communication - [Drovio](https://thirdpartyindex.com/vendors/drovio.md): Support ticketing - [Escape](https://thirdpartyindex.com/vendors/escape.md): VCS; Version control - [Filevine](https://thirdpartyindex.com/vendors/filevine.md): Cloud source control repository - [Fluid Attacks](https://thirdpartyindex.com/vendors/fluid-attacks.md): Gitlab is the platform we use for developing our software. It provides essential services like Git repositories, Merge requests, Development planning, CI/CD, am… - [HirePort](https://thirdpartyindex.com/vendors/hireport.md): Provides source code repository hosting, version control, and continuous integration/deployment pipelines for software development. - [Hyperbolic](https://thirdpartyindex.com/vendors/hyperbolic.md) - [Leadbeam](https://thirdpartyindex.com/vendors/leadbeam.md): DevOps platform for source code management to continuous integration, delivery, & security. - [Level AI](https://thirdpartyindex.com/vendors/level-ai.md) - [Maestro AI](https://thirdpartyindex.com/vendors/maestro-ai.md): Collaboration and productivity - [Magnolia](https://thirdpartyindex.com/vendors/magnolia.md): Code Repository - [Mason](https://thirdpartyindex.com/vendors/mason.md) - [memoQ](https://thirdpartyindex.com/vendors/memoq.md): Development software - [MSP360](https://thirdpartyindex.com/vendors/msp360.md): Source code hosting, version control, and software development collaboration - [Noibu](https://thirdpartyindex.com/vendors/noibu.md): source control and CICD pipelines - [OneNotary](https://thirdpartyindex.com/vendors/onenotary.md): Source code management and software development - [Panintelligence](https://thirdpartyindex.com/vendors/panintelligence.md): Gitlab is a software development tool and is used for technical incident response. If a customer utilises salesforce for support offerings and includes Personal… - [Partium](https://thirdpartyindex.com/vendors/partium.md) - [Pharos](https://thirdpartyindex.com/vendors/pharos.md): Hosted in AWS private cloud; Version control - [Ravion](https://thirdpartyindex.com/vendors/ravion.md): Development software - [Reditus](https://thirdpartyindex.com/vendors/reditus.md): Development software - [Second Front Systems](https://thirdpartyindex.com/vendors/second-front-systems.md): A secure platform for managing our software source code and development processes - [SOVRA](https://thirdpartyindex.com/vendors/sovra.md) - [SubscriptionFlow](https://thirdpartyindex.com/vendors/subscriptionflow.md): Collaboration; Collaboration and productivity - [SuccessKPI](https://thirdpartyindex.com/vendors/successkpi.md): Version control - [Tinybird](https://thirdpartyindex.com/vendors/tinybird.md): issue tracking and SDLC orchestration - [tl;dv](https://thirdpartyindex.com/vendors/tl-dv.md): Version control - [Tulip](https://thirdpartyindex.com/vendors/tulip.md): Source code management and CI/CD (software engineering and maintenance) - [WorkRamp](https://thirdpartyindex.com/vendors/workramp.md) - [Yousign](https://thirdpartyindex.com/vendors/yousign.md): DevOps Platform - [Zenvia](https://thirdpartyindex.com/vendors/zenvia.md) ## Security record CISA's Known Exploited Vulnerabilities catalog lists 6 vulnerabilities in its software: - CVE-2026-97229 (Community Edition and Enterprise Edition), listed 2026-10-29: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability - CVE-2026-85706 (Community Edition and Enterprise Edition), listed 2026-09-11: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability - CVE-2021-22175 (GitLab), listed 2026-02-18: GitLab Server-Side Request Forgery (SSRF) Vulnerability - CVE-2021-39935 (Community and Enterprise Editions), listed 2026-02-03: GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability - CVE-2023-7028 (GitLab CE/EE), listed 2024-05-01: GitLab Community and Enterprise Editions Improper Access Control Vulnerability - CVE-2021-22205 (Community and Enterprise Editions), listed 2021-11-03: GitLab Community and Enterprise Editions Remote Code Execution Vulnerability (known ransomware use) ## Service status Incidents it reported on its own status page. - Last 43 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated) - Status page last read: 2026-11-12 - No incidents reported since Sep 30, 2026 ## Incidents reported by GitLab's subprocessors Incidents reported in the last 30 days on their own status pages by 9 vendors GitLab lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-12: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which GitLab lists as a subprocessor, reported INC20000347 (minor) - 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical) - 2026-11-11: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3.1 Pro (minor) - 2026-11-11: [Decagon](https://thirdpartyindex.com/vendors/decagon#status), which GitLab lists as a subprocessor, reported Investigating Issue with Voice Conversation Closure (minor) - 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor) - 2026-11-11: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which GitLab lists as a subprocessor, reported Provisioning and scaling operations may take longer in AWS ap-northeast-1 Tokyo (minor) - 2026-11-11: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor) - 2026-11-11: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for DeepSeek V4.1 Flash 1017 (minor) - 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which GitLab lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated) - 2026-11-10: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 (minor) - 2026-11-10: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor) - 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated) - 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Elevated Errors On API (minor) - 2026-11-09: [Decagon](https://thirdpartyindex.com/vendors/decagon#status), which GitLab lists as a subprocessor, reported API Instability — Resolved (no impact stated) - 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor) - 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Elevated errors with image generation (minor) - 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which GitLab lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor) - 2026-11-08: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor) - 2026-11-07: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor) - 2026-11-07: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which GitLab lists as a subprocessor, reported INC20000337 (minor) - 2026-11-07: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor) - 2026-11-07: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash US (minor) - 2026-11-07: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor) - 2026-11-07: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor) - 2026-11-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which GitLab lists as a subprocessor, reported INC20000336 (minor) - 2026-11-06: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor) - 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated) - 2026-11-06: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor) - 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor) - 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor) - 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor) - 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor) - 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for MiniMax M3.1 Flash (minor) - 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash US (minor) - 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor) - 2026-11-05: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor) - 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor) - 2026-11-04: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor) - 2026-11-04: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which GitLab lists as a subprocessor, reported mOLTP PrivateLink connectivity issue (major) - 2026-11-04: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor) - 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor) - 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor) - 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor) - 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor) - 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor) - 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor) - 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 US (minor) - 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 (minor) - 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor) - 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported File upload errors in ChatGPT (minor) - 2026-11-03: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor) - 2026-11-02: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which GitLab lists as a subprocessor, reported SQL Console database connection outage (minor) - 2026-11-02: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor) - 2026-10-31: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Muse Spark Open US (minor) - 2026-10-31: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 (minor) - 2026-10-30: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which GitLab lists as a subprocessor, reported Increased latency and 500 rate (major) - 2026-10-30: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service degradation (no impact stated) - 2026-10-30: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which GitLab lists as a subprocessor, reported INC20000321 (minor) - 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor) - 2026-10-30: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor) - 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor) - 2026-10-30: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor) - 2026-10-29: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which GitLab lists as a subprocessor, reported INC20000319 (minor) - 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which GitLab lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor) - 2026-10-28: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor) - 2026-10-28: [Mailgun](https://thirdpartyindex.com/vendors/mailgun#status), which GitLab lists as a subprocessor, reported Route delays in EU Region (minor) - 2026-10-28: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor) - 2026-10-28: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for MiniMax M3.1 Flash (minor) - 2026-10-28: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for MiniMax M3.1 Flash (minor) - 2026-10-28: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for MiniMax M3.1 Flash (minor) - 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which GitLab lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor) - 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which GitLab lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major) - 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor) - 2026-10-27: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor) - 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which GitLab lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major) - 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated) - 2026-10-27: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 (minor) - 2026-10-26: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 (minor) - 2026-10-26: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor) - 2026-10-26: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 (minor) - 2026-10-26: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for MiniMax M3.1 Flash (minor) - 2026-10-26: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 (minor) - 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor) - 2026-10-26: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 (minor) - 2026-10-25: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor) - 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which GitLab lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major) - 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which GitLab lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major) - 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which GitLab lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major) - 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which GitLab lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major) - 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which GitLab lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated) - 2026-10-23: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor) - 2026-10-23: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which GitLab lists as a subprocessor, reported Degraded support ticket submission and response (minor) - 2026-10-23: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which GitLab lists as a subprocessor, reported Elastic Support Portal is unavailable (major) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Delays in customer support responses (no impact stated) - 2026-10-22: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for DeepSeek V4.1 Flash 1017 (minor) - 2026-10-22: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for DeepSeek V4.1 Flash 1017 (minor) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor) - 2026-10-22: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for DeepSeek V4.1 Flash 1017 (minor) - 2026-10-22: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which GitLab lists as a subprocessor, reported 403 error when trying to access Autoops in newly created serverless projects (major) - 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which GitLab lists as a subprocessor, reported Elevated errors affecting Connectors (minor) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor) - 2026-10-22: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash (minor) - 2026-10-22: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash (minor) - 2026-10-22: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Authentication errors for some users (major) - 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which GitLab lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor) - 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which GitLab lists as a subprocessor, reported INC20000301 (critical) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor) - 2026-10-21: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for DeepSeek V4.1 Flash 1017 (minor) - 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which GitLab lists as a subprocessor, reported INC20000299 (minor) - 2026-10-21: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor) - 2026-10-21: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Flash (minor) - 2026-10-20: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which GitLab lists as a subprocessor, reported Elastic Cloud scaling issues in Azure (major) - 2026-10-20: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor) - 2026-10-20: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash (minor) - 2026-10-20: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 (minor) - 2026-10-20: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which GitLab lists as a subprocessor, reported Google Cloud Outage (minor) - 2026-10-20: [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch#status), which GitLab lists as a subprocessor, reported Degraded availability for some Elastic Cloud Hosted and Serverless deployments in GCP europe-west2 (London) (major) - 2026-10-20: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which GitLab lists as a subprocessor, reported INC20000294 (critical) - 2026-10-20: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Elevated latency on some serverless models (no impact stated) - 2026-10-19: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor) - 2026-10-19: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor) - 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported File Download errors (minor) - 2026-10-19: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 (minor) - 2026-10-19: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which GitLab lists as a subprocessor, reported INC20000290 (minor) - 2026-10-18: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor) - 2026-10-18: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor) - 2026-10-17: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor) - 2026-10-17: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor) - 2026-10-16: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which GitLab lists as a subprocessor, reported INC20000287 (critical) - 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Widespread feature degradation (major) - 2026-10-15: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 (minor) - 2026-10-15: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Qwen 3.8 Max (minor) - 2026-10-15: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Kimi K3 (minor) - 2026-10-14: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported CSP outage affecting multiple serverless models (minor) - 2026-10-14: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for Deepseek V4.1 Flash (minor) - 2026-10-14: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 Fast (minor) - 2026-10-14: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which GitLab lists as a subprocessor, reported Sandbox Performance Degraded (minor) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor) - 2026-10-14: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor) - 2026-10-13: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which GitLab lists as a subprocessor, reported INC20000277 (minor) - 2026-10-13: [Fireworks](https://thirdpartyindex.com/vendors/fireworks#status), which GitLab lists as a subprocessor, reported Service Degradation for GLM 5.3 (minor) - 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which GitLab lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor) ## Recent changes Changes to its documents and subprocessor list since monitoring began. - 2026-09-30: Changed registry listing: fedramp:FR2411959145 ([evidence](https://thirdpartyindex.com/evidence/25653)) Feed: https://thirdpartyindex.com/vendors/gitlab/changes.atom The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/gitlab ## Security contact From its security.txt (https://gitlab.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/833)): - Contact: https://hackerone.com/gitlab/ - Contact: https://about.gitlab.com/security/disclosure/ - Disclosure policy: https://hackerone.com/gitlab/ - Acknowledgments: https://hackerone.com/gitlab/thanks - Security jobs: https://about.gitlab.com/jobs/ - Languages: en - Valid until 2027-01-31 - Signed --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api