GitLab launches managed DevSecOps platform on Google Cloud with Gemini 3.5 Flash

GitLab has launched a fully managed version of its platform on Google Cloud, with Gemini 3.5 Flash and Gemma 4 models integrated. Teams no longer have to choose between data sovereignty and access to modern AI: they now get both in a single managed platform.

Managed GitLab on Google Cloud

GitLab is available as a fully managed service on Google Cloud through certified managed service providers (MSPs) Beyond and Digital Future. Organizations can move to a scalable DevSecOps architecture without giving up control over where their code, pipelines, and security data live.

The launch builds on a partnership from April 2026, when GitLab let customers call Google models through the Duo Agent Platform and count that usage toward their existing Google Cloud commitment. Fully managed hosting and an accelerated model roadmap now come on top of that.

The MSP handles the operational load and SLA compliance, so the customer's team doesn't have to maintain infrastructure. That matters most for organizations with data localization requirements: fintech, the public sector, and healthcare. Data sovereignty and access to the latest AI models no longer pull in opposite directions.

Gemini and Gemma: the right model for the job

GitLab Duo Agent Platform now runs two model families:

• Gemini 3.5 Flash — fast, low-latency tasks: code completion, instant reviews, test generation
• Gemini (higher-tier versions) — deep reasoning for architectural decisions, refactoring large codebases, and complex repository-wide security analysis
• Gemma 4 — an open-weight model for self-hosted environments: all requests and responses stay strictly inside the company's infrastructure

GitLab is part of Google's Gemini early access program, so new model versions land in Duo as soon as they ship, with no extra procurement process on the customer's side.

For regulated environments, Gemma 4 plugs into the Duo Self-Hosted architecture: the team deploys its own AI Gateway, and no request leaves the perimeter, whether on-premises or in a private cloud.

Different tasks call for different models, and the lineup offers a clear choice without forcing teams to stitch together a solution from scattered tools.

Data control, auditing, and a single budget

Three key arguments for enterprise customers:

• Your data, under your control. Code, pipelines, and security data are stored in the infrastructure you choose, even in fully managed mode.
• Auditability out of the box. Compliance teams can see every agent action, merge request, and scanner finding through GitLab's built-in tools. Governance doesn't disappear when an agent takes over part of the workflow.
• One bill. Buying GitLab and the Duo Agent Platform through Google Cloud Marketplace lets companies charge costs against an existing Google Cloud commitment: platform, inference, and infrastructure in one billing stream, with no cross-vendor reconciliation.

"Most teams sacrifice one thing: sovereignty without modern AI, or modern AI without governance.

This partnership is built to deliver both," — from GitLab's announcement.

On top of that, GitLab's own cost controls remain in place: usage dashboards, model selection policies, and GitLab Credits. They give the finance team predictable spending and an answer to the question: "What did we spend on AI this quarter, and what did we get for it?"

What it means

The GitLab + Google Cloud combination resolves the core tension in enterprise software development: powerful AI models and full control over data are no longer mutually exclusive. For fintech, the public sector, and healthcare, with their strict data residency requirements, this opens a path to agentic DevSecOps without compromising on regulatory requirements. And unified billing through Google Cloud Marketplace removes operational complexity for teams already working in the Google ecosystem.