Gitlab hero border pattern left svg Gitlab hero border pattern right svg

SO.2.01 - Provisioning Physical Access Control Guidance

SO.2.01 - Provisioning Physical Access

Control Statement

Physical access provisioning to a GitLab datacenter requires management approval and documented specification of:


This control refers to physical access to GitLab datacenters.


This control is not applicable to GitLab's SaaS product since managed hosting is used for all systems relating to this product. GitLab does not use any datacenters to which any GitLab team-members have any physical access. We rely on the audit certifications for the underlying hosting companies for this control.

Additional control information and project tracking

Non-public information relating to this security control as well as links to the work associated with various phases of project work can be found in the Provisioning Physical Access control issue.

Policy Reference

Framework Mapping