gitpod.io

Access Controls
• Single Sign-On (SSO) with OAuth integration for source code repositories
• Role-based access controls (RBAC)

Data Protection
• AES-256 encryption for data at rest
• TLS 1.2+ for data in transit
• Data is retained only as long as necessary to provide the service
• Self-serve user account deletion

Security Programs
• Comprehensive incident response plan with annual testing
• SOC 2 Type 2 and GDPR compliance

For more information and to request a copy of Gitpod's SOC 2 report, please visit Gitpod’s Trust Center