How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 434 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
Sertifi
E-signature
Sertifi offers an Agreement Platform built for businesses who need a more efficient and secure way to manage the full contract
ServiceRocket
servicerocket.com
ServiceRocket is a trusted partner for fast-growing software companies seeking to enhance software adoption and customer
SHL
Recruiting
As the global leader in talent innovation we help organizations and their leaders address the most pressing talent priorities by providing
Simpplr
Collaboration
Simpplr is a leading provider of modern intranet solutions designed to connect, engage, and empower employees across
Skyhigh Security
Security
At its heart, security is a data protection
Skysnag
Identity and access
Skysnag, Inc. is a cybersecurity SaaS provider specializing in automated email authentication and domain protection. The Skysnag platform enables organiza...
SmartDraw Software
Design tools
Since 1994, SmartDraw Software has been dedicated to writing software that makes creating professional-looking diagrams and
Sybill
Sales tools
Sybill is the AI revenue intelligence platform trusted by 750+ revenue teams to turn every customer conversation into CRM data
Symplicity
Education
Helping higher education institutions prepare students for success in career readiness and the student
Syndio Solutions
HR and HRIS
Truly equitable workplaces get two things right: fair pay and equal access to
Epignosis
Education
Move your training online with TalentLMS, the leading cloud learning
Telefonica Global Solutions
DevOps and observability
Telefónica Global Solutions USA
Internet Testing Systems
Education
At ITS, we craft dynamic web-based solutions that empower educational and certifying organizations to seamlessly manage their
Torii Software
IT management
Torii, a leader in the Gartner® Magic Quadrant™ for SaaS Management Platforms, empowers IT pros to solve modern SaaS challenges at their
TradeCentric
E-commerce
The TradeCentric Platform is a system-agnostic, fully managed solution that integrates with leading eCommerce systems and eProcurement/ERP
UXPin
Design tools
UXPin is the design tool ideal for interactive prototyping, design systems and
Valkit.ai
Life sciences and biotech
Valkit.ai is an AI‑augmented, paperless digital validation platform built specifically for life sciences companies to streamline GxP
Vindicia
Payments
At Vindicia, we offer the industry’s #1 failed payment recovery
Visier
Analytics
Visier, Inc. (Visier) delivers innovative analytic applications to over a hundred customers managing millions of employee records. Visier’s applied big da...
YuJa
Education
YuJa is in Ed-tech solutions. YuJa’s Ed-Tech product portfolio provides organizations of all sizes with the tools to help educate, engage, inspire and col...
Zoom Video Communications
Video conferencing
Zoom unifies cloud video conferencing, simple online meetings, group messaging, webinars and a software-defined conference room solution
Cloudinary
Media and content
Cloudinary is a SaaS company providing cloud media management services for websites and apps
ElevenLabs
AI tools
ElevenLabs Inc. is a software company that specializes in developing natural-sounding speech synthesis software using deep learning
Gong
Sales tools
Gong Revenue AI OS helps your entire GTM organization
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.