registry
CSA STAR evidence across 402 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 400
- Vendor-stated
- 2
- Expired
- 0
- Last verified
- 17 Sep 2026
Alert Logic
Security
Algolia
Developer tools
A developer-friendly and enterprise-grade search API.
Red Canary
Security
Alloy
Productivity
AI prototyping tool for product managers
SEMrush
Marketing
BrowserStack
Developer tools
Candor
Security
Protect your data and stop insider risk
Lacework
DevOps and observability
Moss
AI infrastructure
Real-time semantic search for Conversational AI
Papaya
DevOps and observability
Continuous optimization for AI agents
Enso
Data platforms
Self-Service Data Prep and Blend Built for Data Teams.
Litmus
Email marketing
Evals for humans
Rollbar
DevOps and observability
Surge
Developer tools
Stripe for telephony
Achievers
HR and HRIS
AudioEye
Compliance and GRC
Automation Anywhere
No-code and automation
Axcient
DevOps and observability
Bitglass
Security
Bud
HR and HRIS
Agent with a computer
Bugsnag
DevOps and observability
CyberFOX
Identity and access
Elementary
DevOps and observability
Open-source data observability for data teams
HackerRank
Recruiting
Change the world to value skills over pedigree
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.