What GitLab Inc. told the SEC could break it.

GitLab's freely-downloadable software is subject to U.S. export controls/sanctions (EAR, OFAC); Russia/Belarus controls require export licenses, and GitLab previously self-disclosed apparent violations resulting in BIS and OFAC letters.

“For example, Trade Controls targeting Russia and Belarus, impose a license requirement for the export of our product to those countries, and have sanctioned various entities and individuals located there, while recent sanctions restrict the provision of certain cloud services to Russia.”

Many of GitLab's AI features (incl. the GitLab Duo Agent Platform) rely on third-party vendors for the underlying AI models; vendor service disruption, adverse term changes, or regulatory/national-security actions against them could impair these features.

“We rely on third-party vendors for the provision of the AI models which power many of our AI features.”

GitLab operates in China through its JiHu VIE, exposed to PIPL/cross-border data rules, limited IP enforcement, and uncertainty in Chinese law and policy that could adversely affect that business.

“Accordingly, any adverse change in the Chinese economy, the Chinese legal system or Chinese governmental, economic or other policies could have a material adverse effect on our business and operations in China and our prospects generally.”