Compliance status report

{{< details >}}

• Tier: Ultimate
• Offering: GitLab.com, GitLab Self-Managed, GitLab Dedicated

{{< /details >}}

{{< history >}}

• Introduced in GitLab 17.11 with a flag named enable_standards_adherence_dashboard_v2. Enabled by default.
• Generally available in GitLab 18.3. Feature flag enable_standards_adherence_dashboard_v2 removed.

{{< /history >}}

The compliance status report displays the most recent instances where projects do not adhere to compliance framework requirements. It is part of the compliance center, and helps you quickly identify and remediate gaps in control implementation across your projects.

Scan timing and triggers

Compliance scans that update the status report are automatically triggered in the following situations:

• A framework is added to a project.
• The requirements of an associated framework are modified.
• A scheduled scan runs (every 12 hours).

After a scan is triggered, results can take five to ten minutes to appear in the compliance status report.

To learn more about how requirements and controls are defined in a compliance framework, see Create and manage compliance framework requirements.

View the compliance status report

Prerequisites:

• You must be an administrator or have the Security Manager or Owner role for the group.

To view the compliance status report:

1. In the top bar, select Search or go to and find your group.
2. Select Secure > Compliance center.
3. In the Compliance reports section, select Compliance status report.

Report details

The compliance status report shows the latest instance where a project is adhering or not adhering to a framework control. Each row provides details about the current status of a control in a specific project, helping you monitor compliance across your group.

You can:

• Filter the report by project, framework, or control.
• Navigate directly to a project's compliance detail view.
• Review when the non-adherence was first detected.

The compliance status report has the following columns:

• Project: The project with non-adherence.
• Framework: The compliance framework the control belongs to (for example, GitLab or SOC 2).
• Control: The specific control the project is not adhering to (for example, "At least two approvals").
• Detected on: The date and time the non-adherence was first recorded.
• More info: A link to additional context or related settings for the project.

Export compliance status report

Export the contents of a status report for projects in a group. Reports are truncated at 15 MB to avoid a large email attachment.

Prerequisites:

• You must be an administrator or have the Security Manager or Owner role for the group.

To export the compliance status report for projects in a group:

1. In the top bar, select Search or go to and find your group.
2. Select Secure > Compliance center.
3. In the upper-right corner, select Export.
4. Select Export compliance status report.

A report is compiled and delivered to your email inbox as an attachment.