# GitLab compliance frameworks: Adhere to SOC 2 in minutes

DevFeed: [GitLab compliance frameworks: Adhere to SOC 2 in minutes](<https://devfeed.tech/articles/gitlab-compliance-frameworks-adhere-to-soc-2-in-minutes-100.md>)

Original publisher: [Read original article](<https://about.gitlab.com/blog/quick-compliance-with-compliance-framework-templates/>)

Author: Fernando Diaz

Published: 2026-08-27T00:00:00Z

Content type: article

Language: en

Sources: [GitLab](<https://devfeed.tech/sources/gitlab.md>)

Topics: [GitLab](<https://devfeed.tech/topics/gitlab.md>), [Template](<https://devfeed.tech/topics/template.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Security](<https://devfeed.tech/topics/security.md>), [Software](<https://devfeed.tech/topics/software.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [article](<https://devfeed.tech/tags/article.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [framework](<https://devfeed.tech/tags/framework.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [platform](<https://devfeed.tech/tags/platform.md>), [security](<https://devfeed.tech/tags/security.md>), [soc](<https://devfeed.tech/tags/soc.md>), [software](<https://devfeed.tech/tags/software.md>), [software-delivery](<https://devfeed.tech/tags/software-delivery.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>)

## AI overview

This article explains how GitLab custom compliance framework templates help teams define controls, continuously monitor adherence, and prepare for audits. It uses SOC 2 as a central example and covers templates, policies, compliance requirements, and automated checks across GitLab deployment options.

## Source excerpt

Compliance is the part of software delivery that everyone agrees is important, yet nobody enjoys. It often lives in spreadsheets, screenshots, and the quiet dread of an upcoming audit. GitLab's custom compliance frameworks work differently. Instead of documenting what should be true about your projects, you define the controls once and let the platform continuously verify what is true. In this article, you'll learn why compliance adherence matters, how to stand up a SOC 2 framework in minutes using a template, how to monitor adherence on an ongoing basis, how to enforce compliance with policies, and which standards already ship as ready-to-use templates. You'll also get a look at where AI-specific compliance templates are heading. You can watch the video below to see it in action: Tier note: Compliance frameworks are available in Premium and Ultimate. Framework requirements and controls, the checks that power adherence reporting and the compliance status report, require Ultimate. Everything here applies to GitLab.com, GitLab Self-Managed, and GitLab Dedicated. Why compliance adherence matters and how custom frameworks help Regulatory and contractual obligations like SOC 2, ISO 27001, PCI DSS, and FedRAMP exist because customers, partners, and regulators need assurance that your software is built and shipped responsibly. Falling short isn't just a paperwork problem. It can block deals, trigger fines, delay product launches, and erode trust. Compliance also isn't a one-time event. A project that was compliant at audit time can drift the moment someone disables a scanner, removes branch protection, or merges without the required approvals. Custom compliance frameworks are designed to close that gap. A compliance framework in GitLab is a label you create on a top-level group to identify projects that carry specific compliance obligations or need extra oversight. On its own that label provides organization and visibility. In Ultimate, a framework can also carry requireme