GitLab Inc., the intelligent orchestration platform for DevSecOps, today released its AI Accountability Report. Conducted by The Harris Poll, the survey of 1,528 developers and technology buyers across six countries finds that as AI coding tools become standard infrastructure, the conversation is shifting from how fast teams can generate code to whether they can actually control what they are shipping. The report defines AI accountability as the organizational and technical capability to answer three questions about any line of AI-generated code: where did it come from, what was it meant to do, and who is responsible for it once it's in production. Most organizations cannot answer those questions today.
91% of organizations have two or more AI coding tools in active use; 54% have three or more.
80% say their organization adopted AI tools faster than it developed policies to govern them.
92% report some form of governance challenge with AI-generated code.
43% cannot reliably distinguish AI-generated code from human-written code in their codebase.
82% say AI-generated code risks creating a new form of technical debt.
85% agree the next phase of AI in software will focus less on generating code and more on governing it.
AI coding adoption and ROI are strong across organizations. 91% of organizations have two or more AI coding tools in active use and 78% report that developers are writing and committing code faster since adopting AI tools. 60% say AI coding ROI has exceeded expectations, and 73% say overall code quality has improved. However, speed is running ahead of control, with 43% of respondents reporting that they cannot reliably distinguish AI-generated code from human-written code in their own codebase. 79% agree that individual developer productivity has improved with AI, but the overall software delivery process has not accelerated at the same pace, defined as the "AI Paradox."
Traceability gaps leave organizations exposed to significant risks. While 87% are confident their team could determine within 24 hours whether AI-generated code contributed to a production incident, 34% of organizations that experienced an incident in the past year could not actually make that determination. The top barriers to control and traceability are structural: difficulty distinguishing AI-generated from human-written code (43%), fragmented toolchains (40%), and systems that don't track code origin (39%). Only 28% say their software development lifecycle tools are fully integrated with shared data and workflows.
Governance challenges are widespread, with 92% reporting some form of governance challenge with AI-generated code. 80% agree their organization adopted AI tools faster than it developed policies to govern them. 83% of organizations identify AI-generated code accumulation as a risk to manage now, with 44% calling it a top technology risk. 82% say AI-generated code risks creating a new form of technical debt organizations are not prepared to manage. 85% agree the biggest challenge with AI-generated code is governing what happens to it after it's created.
The report highlights a significant shift in focus. 85% agree the next phase of AI in software will focus less on generating code and more on governing it. 91% are likely to invest in AI code governance tools in the next 12 months, and 98% have already allocated or expect to allocate budget. 84% agree the biggest challenge with AI-generated code is governing what happens to it after it's created. Manav Khurana, Chief Product and Marketing Officer at GitLab, stated, "AI coding tools have delivered on their promise of speed. But the events of the past few months, including supply chain attacks, reliability issues, and regulators tightening expectations around AI traceability and provenance are making clear that speed without control is a liability, not an advantage. The teams thinking ahead are already asking the harder question: can we actually control all the code we're generating? The organizations that will ship trusted software faster are the ones building the foundations of accountability with context, traceability, and governance baked into the platform, not just bolted on after the fact."
73% of respondents are concerned about the maintainability of AI-generated code in their organization's codebase. 85% agree AI has shifted the bottleneck from writing code to reviewing and validating it. These concerns reflect the growing recognition that while AI coding tools deliver significant productivity gains, organizations must simultaneously build the governance frameworks needed to manage the resulting code responsibly and securely.
About GitLab
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and approximately 50% of the Fortune 100 trust GitLab to ship better, more secure software faster.