Non-Disclosure Agreement Process

• Only team members with signature authority can execute agreements on behalf of GitLab, including Non-Disclosure Agreements (NDAs).
  • See the Signatory Matrix to identify individuals that may sign. If you have any questions, contact #legal in Slack.

Customer NDAs

As of 2026-03-27, all customer NDAs should be sent through Ironclad.

To initiate the Ironclad workflow:

1. Click Request Support at the top of your Opportunity in Salesforce.
2. Select Legal from the list of teams, and click Next.
3. Select NDA as the type of request, and click Initiate Workflow.

Follow the step-by-step instructions in the Ironclad NDA Workflow – Process Guide for Requesters to determine which option to use.

For a general overview of the process, review the Ironclad NDA Requester Quick Reference deck.

Vendors or Other Third-Party NDAs

The process above is only related to NDAs with customers. If a team member is engaging a new vendor or third party, GitLab’s NDA must be executed with them first before sharing any type of confidential information.

Note: All confidential information shared with third parties must be reviewed and approved by Security Risk and Privacy teams prior to disclosure. This review ensures the data types and sharing methods comply with GitLab’s security and data protection requirements. For authorized data sharing guidance, refer to GitLab’s Safe Framework Handbook.

To initiate an NDA request with a vendor or third-party:

1. Log into Zip via Okta.
2. Select the Request a Non-Disclosure Agreement (NDA) request type from the +New Request options list and complete the intake form.
3. A Vendor Form will automatically be sent through Zip to the vendor contact you enter and provide them a copy of GitLab’s mutual NDA via a click-through process.
4. If a vendor has questions about the NDA, they can submit them through the Zip Vendor Form for your review. Zip will guide you through the process for review and escalation to the Procurement and Legal teams as needed.

Please note that a vendor’s request to negotiate NDA terms may delay or impact the opportunity and its intended time frame. It is recommended that team members encourage the vendor in initial discussions to accept GitLab’s standard NDA when received to not impact the timing or opportunity to do business with us.