How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 434 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
ExtraHop Networks
Security
Explore cutting-edge technology solutions for your business
Fieldguide
Compliance and GRC
Vertical AI for Audit & Advisory Firms
Fleetio
Automotive and mobility
We provide the comprehensive solutions and resources needed to run, repair and optimize vehicles and assets, so fleets gain control of
Flipsnack
Media and content
Flipsnack is a one-stop shop for creating, publishing, and distributing all kinds of publications across all
Fuel50
E-commerce
Fuel50 is the only AI Talent Marketplace that has delivered talent retention and workforce mobility impact to 80+ industry-leading
Grafana Labs
DevOps and observability
Grafana has become the world’s most popular technology used to compose observability dashboards with everything from Prometheus & Graphite
BMC Helix
IT management
BMC is a global leader in innovative software solutions that enable businesses to transform into digital enterprises for the ultimate
HID Global
Identity and access
HID Global is the trusted leader in products, services, and solutions related to the creation, management, and use of trusted identities
HqO
Collaboration
HqO is the leading workplace experience operating system for commercial real
Hyland Software
Cloud storage
Hyland provides industry-leading technology foundations that empower its customers to create better human
Incsub
Cloud and hosting
CampusPress, a division of Incsub, LLC, provides enterprise WordPress hosting solutions purpose-built for educational
Innovid
Logistics and supply chain
Innovid is an independent software platform for the creation, delivery, measurement, and optimization of
Introhive
Research and data providers
Introhive is a Relationship Intelligence Platform that empowers firms to automate CRM data entry, enrich and maintain CRM data quality, and
IXOPAY
Payments
IXOPAY is a leading provider of enterprise-grade payment orchestration, providing a fully integrated platform and flexible payment
JAMF Software
IT management
Jamf is a global provider of organization cloud-based mobile device management (MDM) hosting services that allow organizations to off-load
JupiterOne
Security
JupiterOne is a cyber asset analysis platform every modern security team needs to collect and transform asset data into actionable insights
Kahua
Project management
Kahua, Inc. provides an industry-leading cloud-based collaborative platform specifically designed to transform and elevate project management across the c...
Kyriba
Finance and accounting
Kyriba empowers CFOs, Treasurers, and their IT counterparts to transform how they optimize financial technology solutions, de-risk ERP
Learnosity
Education
We power assessment excellence. Change happens quickly in the digital age. Behaviors change and expectations change—but for many, assessment has ...
Lettuce Financial Labs
Finance and accounting
Specialized tax and accounting strategies for
Localize
Translation and localization
Localize is a cloud-based translation management system that enables companies to bring their products to multilingual international
LogicGate
Compliance and GRC
The LogicGate Risk Cloud™ is an agile GRC cloud solution that combines powerful functionality with intuitive design to enhance enterprise
LumApps
Collaboration
LumApps is a social and collaborative intranet platform designed to connect, inform and engage
MacStadium
Cloud and hosting
As the industry-leading Mac private cloud and software-as-a-service provider enabling macOS workloads, MacStadium has been solely focused
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.