| Attribute | GitHub Copilot | GitLab | Decision |
|---|---|---|---|
| Public API |
Yes
Verified90
docs.github.com (tier 1), retrieved 2026-09-02 · github.com (tier 1), retrieved 2026-09-02 · github.com (tier 1), retrieved 2026-09-02
|
Not measured
Not measured
Checked 1 address on 2026-09-02: gitlab.com
|
not measured on at least one side |
| Audit log of agent actions |
Yes
Verified90
|
Not measured
Not measured
|
not measured on at least one side |
| Data processing agreement offered |
Not measured
Not measured
|
Not measured
Not measured
Checked 2 addresses on 2026-09-02: about.gitlab.com, gitlab.com
|
not measured on at least one side |
| Entry price per month |
Not measured
Not measured
Checked 1 address on 2026-09-02: github.com
|
Not measured
Not measured
Checked 1 address on 2026-09-02: about.gitlab.com
|
not measured on at least one side |
| FedRAMP authorisation |
Not measured
Not measured
|
Not measured
Not measured
Checked 2 addresses on 2026-09-02: about.gitlab.com, gitlab.com
|
not measured on at least one side |
| Free tier |
Not measured
Not measured
Checked 1 address on 2026-09-02: github.com
|
Yes
Verified90
about.gitlab.com (tier 1), retrieved 2026-09-02
|
not measured on at least one side |
| Free trial length |
Not measured
Not measured
Checked 1 address on 2026-09-02: github.com
|
Not measured
Not measured
Checked 1 address on 2026-09-02: about.gitlab.com
|
no directional preference |
| GDPR compliance stated |
Yes
Verified90
|
Yes
Verified90
about.gitlab.com (tier 1), retrieved 2026-09-02
|
Tie |
| HIPAA compliance stated |
Not measured
Not measured
|
Not measured
Not measured
Checked 2 addresses on 2026-09-02: about.gitlab.com, gitlab.com
|
not measured on at least one side |
| ISO/IEC 27001 |
Not measured
Not measured
|
Yes
Verified90
about.gitlab.com (tier 1), retrieved 2026-09-02
|
not measured on at least one side |
| Mobile app (iOS or Android) |
Not measured
Not measured
Checked 2 addresses on 2026-09-02: github.com, github.com
|
Not measured
Not measured
Checked 1 address on 2026-09-02: gitlab.com
|
no directional preference |
| On-premises or self-hosted option |
Not measured
Not measured
|
Not measured
Not measured
Checked 2 addresses on 2026-09-02: about.gitlab.com, gitlab.com
|
no directional preference |
| PCI DSS stated |
Not measured
Not measured
Checked 1 address on 2026-09-02: github.com
|
Not measured
Not measured
Checked 1 address on 2026-09-02: about.gitlab.com
|
not measured on at least one side |
| Public list price |
Yes
Verified90
|
Yes
Verified90
about.gitlab.com (tier 1), retrieved 2026-09-02
|
Tie |
| SCIM user provisioning |
Not measured
Not measured
|
Not measured
Not measured
|
not measured on at least one side |
| SOC 2 Type II |
Not measured
Not measured
|
Yes
Verified90
about.gitlab.com (tier 1), retrieved 2026-09-02
|
not measured on at least one side |
| Single sign-on |
Not measured
Not measured
|
Not measured
Not measured
|
not measured on at least one side |
| Uptime commitment |
Not measured
Not measured
Checked 2 addresses on 2026-09-02: github.com, github.com
|
Not measured
Not measured
Checked 2 addresses on 2026-09-02: about.gitlab.com, about.gitlab.com
|
not measured on at least one side |
A missing measurement never counts
against a product. If we could not reach a document, that is a fact
about our research and not about the vendor.