registry
CSA STAR evidence across 402 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 400
- Vendor-stated
- 2
- Expired
- 0
- Last verified
- 17 Sep 2026
Grafana Labs
DevOps and observability
BMC Helix
DevOps and observability
HID Global
Identity and access
HqO
Real estate and property
Hyland Software
IT management
Incsub
incsub.com
InEight
Project management
Innovid
Marketing
IXOPAY
Payments
JAMF Software
jamf.com
JupiterOne
Compliance and GRC
Kahua
Project management
Kollective Technology
DevOps and observability
Kyriba
Finance and accounting
Learnosity
Education
Localize
Translation and localization
LogicGate
Compliance and GRC
LumApps
Collaboration
MacStadium
Cloud and hosting
Magnet Forensics
Security
Mark43
Government and public sector
Menlo Security
Security
Mezmo
DevOps and observability
Observability platform to control all of your log data
MindTickle
HR and HRIS
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.