# How GitLab uses Drata

**10 to 14 days**: “shortened average sales cycles by 10 to 14 days”

As published on [drata.com](https://drata.com/customers/gitlab), February 2026. Captured by usedby on 2026-10-07.

- Company: [GitLab](https://www.usedby.ai/companies/gitlab.md)
- Tool: [Drata](https://www.usedby.ai/tools/drata.md)
- Industry: [DevTools & Infrastructure](https://www.usedby.ai/companies/industry/devtools-infrastructure.md)
- Teams: Security Assurance, Sales

## What the story says

GitLab uses SafeBase Trust Center by Drata as a self-serve portal for customer security documentation, with Salesforce matching and Slack-based approvals for trust requests. It also uses AI Questionnaire Automation to draft answers to security questionnaires from its existing knowledge base.

Summary written by usedby from the source page, in English. The figures are those of Drata and GitLab, not ours.

> By removing security reviews as a bottleneck, GitLab shortened average sales cycles by up to two weeks, allowing sales teams to focus on progressing deals.

- **50%**: “GitLab reduced security questionnaires by 50% year over year”
- **90%**: “Automated approvals now handle roughly 90% of incoming requests, reserving manual review only for edge cases such as acquisitions or domain changes.”
- **90%**: “More than 90% of GitLab’s enterprise customers now use the Trust Center, enabling automated approvals for most requests without increasing headcount.”

> Trust Center has enabled GitLab to become a proper security sales enabler.
>
> Ayoub Fandi, Staff Security Assurance Engineer

## What usedby checked

We compared the story with its live page on 2026-10-07.

- Checked: the figure 10 to 14 days is printed word for word on the page, near the name of GitLab.
- Checked: the passage quoted above is copied word for word from the page, near the name of GitLab.
- Checked: the publication date is read from the page’s own metadata, never guessed.
- Checked: GitLab uses Drata. Confirmed line. Latest check across sources: 2026-10-07.
- Not checked: the result itself. We quote it; we did not measure it.

---
Source: https://www.usedby.ai/case-studies/gitlab-drata · How we check: https://www.usedby.ai/methodology