registry
CSA STAR evidence across 400 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 400
- Vendor-stated
- 2
- Expired
- 0
- Last verified
- 17 Sep 2026
Monte Carlo Data
DevOps and observability
OCLC
oclc.org
Odaseva
Compliance and GRC
Oktopost Technologies
oktopost.com
Omni Analytics
Analytics
Onspring Technologies
Compliance and GRC
PactSafe
Legal tech
Palantir Technologies
Data platforms
Poll Everywhere
Collaboration
Interactive meetings and presentations
QA USA
Education
Rescale
Cloud and hosting
High Performance Computing Built for the Cloud
Reveal Data
Legal tech
SecureSheet Technologies
HR and HRIS
SecureW2
Identity and access
Securiti
Compliance and GRC
SecurityScorecard
Security
Seismic Software
Sales tools
Sertifi
E-signature
ServiceRocket
Customer support
SHL US
shl.com
Simpplr
Collaboration
Skyhigh Security
Security
Skysnag
Security
SmartDraw Software
Design tools
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.