How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 418 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
Mark43
Government and public sector
Mark43’s product suite is a commercial-of-the-shelf (COTS) cloud-native Software-as-a-Service (SaaS) platform that provides modern CAD and
Menlo Security
Government and public sector
Menlo Security Inc. is a pioneer in cloud-native security, dedicated to making the internet safe for enterprises and government agencies by eliminating th...
Mezmo
DevOps and observability
Observability platform to control all of your log data
MindTickle
Education
MindTickle is a global leader in application technology and services that help companies drive employee effectiveness through gamified
Monte Carlo Data
DevOps and observability
Data breaks. We ensure your team is the first to know and the first to solve with end-to-end data observability.
OCLC
oclc.org
OCLC, a global library cooperative, supports thousands of libraries in making information more accessible and more useful to people around
Odaseva
odaseva.com
Odaseva was born with the idea to provide enterprises running business critical applications in the cloud with a powerful, reliable, and
Oktopost Technologies
Marketing
Oktopost offers social media a social media management platform for the B2B
Omni Analytics
Analytics
Omni redefines analytics for the cloud era — fast, intuitive, and
Onspring Technologies
Compliance and GRC
Onspring makes reporting, analysis, process management and coordination refreshingly
PactSafe
E-signature
PactSafe is a contract acceptance platform for high-velocity
Palantir Technologies
Data platforms
Palantir is a software company that builds the world's leading software for data-driven operations and
Poll Everywhere
Collaboration
Interactive meetings and presentations
QA USA
Education
QA is a leading provider of tech courses, certifications and talent programmes, both in the UK and United
Rescale
Cloud and hosting
High Performance Computing Built for the Cloud
Reveal Data
AI tools
Reveal provides world-class document review technology, underpinned by leading processing, visual analytics, and artificial intelligence
SAP
Finance and accounting
SAP SE, is a German multinational software company based in Walldorf, Baden-Württemberg, that is the world's largest vendor of enterprise
SecureSheet Technologies
securesheet.com
SecureSheet provides patented technology that enables organizations to turn their existing manual compensation spreadsheets into secure
SecureW2
Identity and access
SecureW2 is a cybersecurity company specializing in passwordless, certificate-based authentication for networks and
Securiti
Compliance and GRC
AI Powered Security, PrivacyOps, Governance and Compliance for Multicloud, SaaS and Self Managed Data Systems &
SecurityScorecard
Security
Gain a holistic view of any organization's cybersecurity posture with security
Seismic Software
Sales tools
Seismic Software is a global leader in AI-powered sales enablement, providing a unified enablement platform that equips customer-facing
Sertifi
E-signature
Sertifi offers an Agreement Platform built for businesses who need a more efficient and secure way to manage the full contract
ServiceRocket
servicerocket.com
ServiceRocket is a trusted partner for fast-growing software companies seeking to enhance software adoption and customer
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.