Gitpod has achieved Service Organization Control (SOC) 2 Type II compliance. This achievement reflects the company's commitment to maintaining appropriate security controls and continuously improving its security posture. The SOC 2 framework, based on Trust Services Criteria maintained by AICPA, is a widely recognized standard for managing customer data. Gitpod's security program goes beyond SOC 2 compliance, offering features such as open-source code, cloud-based infrastructure, isolated workspaces, integration with best-in-class solutions, passwordless authentication, encrypted data transmission and storage, artifact provenance, vulnerability disclosure, and continuous security monitoring. For more information on Gitpod's security program, visit their Security Website or reach out to them directly.