How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 434 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
HashiCorp
Cloud and hosting
HashiCorp, Inc. is an American software company and subsidiary of IBM based in San Francisco, California
monday.com
Project management
Monday.com Ltd. is an Israeli software company based in Tel Aviv
Navan
Travel and hospitality
Streamline your corporate travel management and expense processes in one
Remote
HR and HRIS
The intelligent infrastructure for global
Sentry
DevOps and observability
Application performance monitoring for developers & software teams to see errors clearer, solve issues faster & continue learning
Data Zoo
Identity and access
Data Zoo is a leading identity solutions provider and one of the fastest-growing tech companies in Australia (Deloitte Fast 50
InEight
Project management
InEight is a leading developer of construction project management software, combining proven technology with a unified vision, delivering
FT
Fusion Telecom
Payments
Telecommunications and Payments
SAI
AI tools
Sai Technologies is a platform for universities to adapt and integrate generative artificial intelligence into their
Intercom
Customer support
Intercom is the only helpdesk with a natively integrated AI Agent, Fin, meaning every customer conversation improves the next one, enabling
Zoom
Collaboration
Modernize workflows with Zoom's trusted collaboration tools: including video meetings, Zoom Chat, VoIP phone, webinars, whiteboard, contact
Palo Alto Networks
Identity and access
Protect your organization with
Deel
HR and HRIS
The all-in-one HR and payroll platform for global teams
Dialpad
Communications and CPaaS
The only AI-driven, cloud-native business communications
ConnectWise
Security
Empower your MSP with all-in-one tools: RMM, UMM, SOC, NOC, and
Quickbase
No-code and automation
Quickbase is a cloud-based platform that allows businesses to create custom applications and workflows to streamline their processes and
Alert Logic
Security
Alert Logic is the only managed detection and response (MDR) provider that delivers comprehensive coverage for public clouds, SaaS
Five9
Communications and CPaaS
Five9 delivers reliable cloud contact centre and AI services that empower organisations to deliver extraordinary customer
Red Canary
Security
Red Canary, a leader in managed detection and response (MDR), provides comprehensive protection across cloud workloads, identities, SaaS
SEMrush
Research and data providers
Semrush Holdings, Inc. is an American software company and wholly owned subsidiary of Adobe Inc
BrowserStack
Developer tools
BrowserStack’s mission is to empower developers to build amazing
Lacework
Security
Lacework is the data-driven cloud security company delivering end-to-end visibility and automated insight into risk across multicloud
Achievers
HR and HRIS
Achievers is the leading provider of cloud-based Employee Rewards and Recognition software and
AudioEye
Compliance and GRC
AudioEye, Inc. (AudioEye) is an industry-leading platform delivering website accessibility compliance at all price points to businesses of all sizes. Audi...
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.