Gitlab hero border pattern left svg Gitlab hero border pattern right svg

Tactical Priorities - Compliance

  1. You are here:
  2. GitLab Direction
  3. Product Stage Direction - Software Supply Chain Security
  4. Group Direction - Compliance
  5. Tactical Priorities - Compliance

This page captures our priorities at a finer-grained level than the main group direction page. It shows major topics and projects that we are working on and prioritizing. It is stack ranked, which means that items at the top of the list are higher priority than items lower on the list.

This list highlights major initiatives but is not comprehensive. For specific work being done in an inidividual milestone, please refer to the appropriate milestone planning issues.

Priority Name DRI Target release Division
1 Custom compliance frameworks hraghuvanshi, nradina FY26Q1 Product
2 External custom controls huzaifaiftikhar1 FY26Q1 Product
3 Adding key OOTB controls for most requested compliance frameworks andrew.jung FY26Q1 Product
5 Provide an option to add projects in the compliance framework creation workflow nrosandich FY26Q1 Product
6 Compliance Framework upload/download templates nrosandich FY26Q1 Product
7 Consolidation of tables for streaming audit events to various external destinations hraghuvanshi FY26Q1 Engineering
8 Improve Compliance group metrics sam.figueroa FY26Q2 Engineering
Priority Name DRI Target release Division
1 (Size: XXL) Cells 1.0 - Compliance database tables work harsimarsandhu FY26Q2 Engineering
2 Instance Level Compliance and Policy Management TBD FY26Q3 Product
3 Group Compliance overview dashboard harsimarsandhu, xanf FY26Q2 Product
4 Link violations to framework controls TBD FY26Q2 Product
5 OOTB Compliance Templates TBD FY26Q2 Product
6 Compliance Center Improvements xanf FY26Q2 Product
7 Migrate Audit Events to ClickHouse Cloud TBD FY26Q3 Engineering
8 Framework change history TBD FY26Q2 Product
9 Scaling Compliance testing TBD FY26Q2 Engineering
10 Standardise compliance group features components TBD FY26Q3 Engineering
11 Framework Review Date TBD FY26Q3 Product
12 Custom compliance frameworks improvements TBD ongoing Product
Priority Name DRI Target release Division
1 Compliance remediation workflow TBD FY26Q4 Product
2 Continuous Compliance Dashboard TBD FY26Q4 Product
3 Increase test coverage for Compliance features TBD FY26Q3 Engineering
4 Internal custom controls TBD FY26Q4 Product
5 Audit Event data retention settings TBD FY26Q4 Engineering
6 Compliance Center - Group Overview Dashboard Improvements TBD ongoing Product
7 Explore using OPA to evaluate compliance controls TBD FY26Q4 Engineering
8 Apply multiple compliance framework labels as default TBD later Product
9 Ability to create a common compliance framework (CCF) TBD uncategorised Product
Priority Name DRI Target release Division
1 Compliance Pipeline to Security Policy Migration sam.figueroa FY26Q3 TBD
2 Compliance UX improvement/bugs track TBD ongoing Product
Priority Name DRI Target release Division
1 Organization Level Compliance Management TBD uncategorised Product
2 Enforce project settings with compliance frameworks TBD uncategorised TBD
3 Improved discoverability and findability for compliance management and security features TBD uncategorised Product
4 Third party connector to Snowflake TBD uncategorised Product
5 Test Streaming Audit Events configuration and surface connection issues TBD uncategorised Product
6 Framework controls to add TBD uncategorised Product
7 Comprehensive audit log nrosandich ongoing Product
8 Expand audit event report usability TBD uncategorised TBD
9 Add a version field to the audit event schema TBD uncategorised Engineering
10 Apply a requirement from a compliance framework across different groups TBD uncategorised Product
11 Add categories for compliance frameworks TBD uncategorised Product
12 Generate policies from compliance framework requirements TBD uncategorised Product
13 Workflow to review and discuss changes before removing/adding compliance frameworks TBD uncategorised Product
14 Upload or store compliance documentation directly in GitLab alongside the defined requirements TBD uncategorised Product
15 Compliance AI ideas TBD uncategorised Product
16 Update compliance framework project section to use hierarchy TBD uncategorised Product
17 Add event type information for all streaming audit events TBD uncategorised Engineering
18 Compliance frameworks improvements TBD ongoing Product
19 Improved Admin and Group-level branch protection settings TBD ongoing TBD
20 Allow filtering of streamed audit events TBD uncategorised Product
21 Integrate with 3rd-party storage systems TBD uncategorised Product
22 Compliance Violations Report improvements TBD ongoing TBD
23 Support for OCSF TBD uncategorised Product
24 New policy type: overwrite group/project general settings TBD uncategorised TBD
25 Chain of Custody report TBD uncategorised TBD
26 Categorisation of Controls for Compliance Frameworks TBD uncategorised Product
27 Streaming only audit events TBD uncategorised Product
28 Pseudonymize of user data in audit events report TBD uncategorised Product
29 Explore allowing audit events from external services TBD FY26Q4 Engineering
Edit this page View source