Strongest: AI Training
85/100
GitLab is strongest where it sets guardrails around AI training, with stronger business-data rules.
GitLab is a DevSecOps platform, reviewed for repository data, product telemetry, sharing, tracking, retention, and organization controls.
75
Good
75
Good
GitLab pairs heavy tracking with clearer limits on model training.
GitLab is strongest where it sets guardrails around AI training, with stronger business-data rules.
GitLab is weakest on ads and tracking because tracking, analytics, and ad-related signals still follow how people use the service.
85
Good
GitLab says it does not train generative AI models and restricts model subprocessors from using GitLab Duo input and output to train their models.
Prompt caching, limited vendor retention, Duo chat history, workflow history, and optional extended logging still need admin review.
75
Good
GitLab documents personal data rights, sharing categories, and security practices.
Repositories can be exposed through project visibility, integrations, group members, CI logs, and legal disclosures.
55
Weak
GitLab collects website, account, usage, and telemetry data depending on service use.
Self-managed deployments give organizations more control over product data flows.
70
Mixed
Retention varies by service, account state, legal duties, and customer configuration.
GitLab documents rights and choices for personal data.
85
Good
Admins can manage groups, projects, visibility, SSO, tokens, runners, and integrations.
Sensitive data can leak through public projects, CI logs, variables, and overly broad member access.
About Privacy Page
Open: about.gitlab.comLatest Finding
Open: docs.gitlab.com1. AI Use
GitLab says it does not train generative AI models and restricts model subprocessors from using GitLab Duo input and output to train their models.
2. Retention
Prompt caching, limited vendor retention, Duo chat history, workflow history, and optional extended logging still need admin review.
Founded
Jan 2014
Founder
Dmitriy Zaporozhets and Sytse Sijbrandij
Parent Company
GitLab
Lifecycle
Active
Category
Developer Platforms & Infra
CEO
Bill Staples
Security Team
Security Team
Date Added
06-10-2026
