Audit Committee

1. You are here:
2. Audit Committee

Maintained by:

On this page

• Audit Committee Composition
• Audit Committee Charter
  • Audit Committee Agenda Planner
    • Management, Accounting and Reporting
    • People Division
    • Legal, Risk and Compliance
    • Security Compliance
    • Internal Audit
    • External Audit
    • General
  • Audit Committee Meeting Deck Preparation Guidelines

Audit Committee Composition

• Chairperson: Karen Blasing
• Members: Bruce Armstrong, David Hornik
• Management DRI: Chief Financial Officer

Audit Committee Charter

1. Purpose. The purpose of the Audit Committee of the Board of Directors (the “Board”) of GitLab Inc. (the “Company”) is to assist the Board’s oversight of:
   • The integrity of the Company’s financial statements;
   • The performance, qualifications and independence of the Company’s registered public accounting firm (the “external auditors”);
   • The performance of the Company’s internal financial, accounting and reporting controls and other processes.
   • The company's process for monitoring compliance with laws and regulations and the code of conduct.
2. Structure and Membership
   • Members. The Audit Committee shall consist of at least two members of the Board, each of whom shall be independent.
   • Financial Literacy. Each member of the Audit Committee must be financially literate, as such qualification is interpreted by the Board in its business judgment, or must become financially literate within a reasonable period of time after his or her appointment to the Audit Committee.
   • Chair. Unless the Board elects a Chair of the Audit Committee, the Audit Committee shall elect a Chair by majority vote.
   • Selection and Removal. Members of the Audit Committee shall be appointed by the Board.
3. Authority and Responsibilities
   • General. The Audit Committee shall discharge its responsibilities, and shall assess the information provided by the Company’s management and the external auditors, in accordance with its business judgment. Management is responsible for the preparation, presentation, and integrity of the Company’s financial statements and for the appropriateness of the accounting principles and reporting policies that are used by the Company. The external auditors are responsible for auditing the Company’s financial statements. The authority and responsibilities set forth in this Charter do not reflect or create any duty or obligation of the Audit Committee to plan or conduct any audit, to determine or certify that the Company’s financial statements are complete, accurate, fairly presented, or in accordance with generally accepted accounting principles or applicable law, or to guarantee the external auditors’ reports.
   • Oversight of Integrity of Financial Statements
   • Review and Discussion. The Audit Committee shall meet to review and discuss with the Company’s management and external auditors the Company’s audited financial statements.
   • Related-Person Transactions. The Audit Committee shall review related-person transactions under the Company’s Related Person Transaction Policy and applicable accounting standards on an ongoing basis and such transactions shall be approved by the Audit Committee.
   • Oversight of Performance, Qualification and Independence of External Auditors
   • Consider the effectiveness of the company's internal control system, including information technology security and control.
   • Understand the scope of internal and external auditors' review of internal control over financial reporting, and obtain reports on significant findings and recommendations, together with management's responses.
   • Review fraud risk assessment of the entity
   • Approve the internal audit charter
   • Approve the annual audit plan and all major changes to the plan. Review the internal audit activity’s performance relative to its plan.
   • Review the effectiveness of the system for monitoring compliance with laws and regulations and the results of management's investigation and follow-up (including disciplinary action) of any instances of noncompliance.
   • Review the findings of any examinations by regulatory agencies, and any auditor observations.
   • Review the process for communicating the code of conduct to company personnel, and for monitoring compliance therewith.
   • Obtain regular updates from management and company legal counsel regarding compliance matters.
   • Review and assess the adequacy of the audit committee charter annually, requesting board approval for proposed changes, and ensure appropriate disclosure as may be required by law or regulation.
   • Review new accounting standards- impact and implementation plan, code of conduct violations including hotline complaints , cybersecurity risk assessment conducted by management , Key contracts and IT initiatives taken by management
4. Selection. The Audit Committee shall be responsible for appointing, evaluating and, when necessary, terminating the engagement of the external auditors. The Audit Committee may, in its discretion, seek stockholder ratification of the external auditors it appoints.
5. Independence. The Audit Committee shall assist the Board in its assessment of the independence of the external auditors. In connection with this assessment, the Audit Committee shall, at least annually, obtain and review a report from the external auditors describing relationships between the external auditors and the Company, including the disclosures required by the applicable requirements of the Public Company Accounting Oversight Board regarding the external auditors’ independence. The Audit Committee shall actively engage in dialogue with the external auditors concerning any disclosed relationships or services that might impact the objectivity and independence of the external auditors.
6. Compensation. The Audit Committee shall be directly responsible for setting the compensation of the external auditors. The Audit Committee is empowered, without further action by the Board, to cause the Company to pay the compensation of the external auditors established by the Audit Committee.
7. Oversight. The external auditors shall report directly to the Audit Committee and the Audit Committee shall be directly responsible for overseeing the work of the external auditors, including resolution of disagreements between Company management and the external auditors regarding financial reporting.
8. Procedures and Administration
   • Meetings. The Audit Committee shall meet in person or telephonically as often as it deems necessary in order to perform its responsibilities. The Audit Committee may also act by unanimous written consent in lieu of a meeting. The Audit Committee shall periodically meet separately with: (i) the external auditors and (ii) Company management. The Audit Committee shall keep minutes of its meetings and provide those to the Board of Directors.
9. Independent Advisors. The Audit Committee shall have the authority, without further action by the Board, to engage and determine funding for such independent legal, accounting and other advisors as it deems necessary or appropriate to carry out its responsibilities. Such independent advisors may be the regular advisors to the Company. The Audit Committee is empowered, without further action by the Board, to cause the Company to pay the compensation of such advisors as established by the Audit Committee.
10. Investigations. The Audit Committee shall have the authority to conduct or authorize investigations into any matter within the scope of its responsibilities, as it shall deem appropriate, including the authority to request any officer, employee or advisor of the Company to meet with the Audit Committee or any advisors engaged by the Audit Committee.
11. Additional Powers. The Audit Committee shall have such other duties as may be delegated.

Audit Committee Agenda Planner

We review the below topics no less frequently than the following schedule:

Management, Accounting and Reporting

People Division

Legal, Risk and Compliance

Security Compliance

Internal Audit

External Audit

General

Audit Committee Meeting Deck Preparation Guidelines

Responsibility: Internal Audit

1. All the audit committee decks should be saved in google drive.
2. Refer to GitLab Board Calendar and identify Audit Committee Meeting Date.
3. Copy the Format of the Audit Committee meeting deck and rename the deck as Audit Committee Meeting Month,MM, Day

4. Update the agenda slide of the deck by
   a) Referring to the master calendar -> Audit Committee calendar tab
   b) Handbookfor Audit Committee meeting agenda items
   c) Audit Committee meeting notes

5. Set up a meeting with Principal Accounting Officer to review and update all the agenda items.
6. Once the agenda is finalized, create slides for each agenda item and assign to respective DRI’s with a due date for completion; at least 10 days before the meeting.
7. Tag all the DRI’s on # Audit Committee slack channel, linking the Deck and communicating the due date for completion of the deck.
8. Follow up with all the DRI's at least a week before the due date.
9. Once respective DRI's update their slides, review the format, update slides to ensure format is consistent across all the slides.
10. Set up a call with the Principal Accounting officer on the due date of the deck/ next immediate day to review the deck. Make necessary changes based on the review.
11. Set up a call for CFO's review along with Principal Accounting Officer. Make necessary changes to the deck based on CFO's review.
12. Principal Accounting Officer to send the deck to all Audit Committee members (cc DRI's) at least a week before the meeting.
13. Update Audit Committee meeting notes with agenda items and DRI’s.
14. On the meeting day
    • Make note of the follow-up items, add them to the agenda under ask from the Audit Committee section in in the AC calendar along with the due date.
    • Schedule a call after the day of the Audit Committee meeting with the Principal Accounting Officer to review the agenda for the next meeting.