How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 434 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
Automation Anywhere
No-code and automation
Automation Anywhere is a developer of robotic process automation (RPA) software, which employs software bots to complete business
Axcient
Cloud storage
Our mission is to cure data loss, providing Managed Service Providers (MSPs) with tailor-made Business Continuity and Disaster Recovery
Bitglass
Security
Bitglass, the Next-Gen CASB company, is based in Silicon Valley with offices
Bugsnag
DevOps and observability
Bugsnag is the leading crash and error monitoring platform for software teams to improve their code quality and customer
Clari
Analytics
Clari is a predictive sales analytics platform that services the needs of enterprise business-to-business sales
CyberFOX
Identity and access
CyberFOX provides MSPs and IT Pros with identity access management (IAM) solutions in password management and privileged access
Daon
Identity and access
Daon, The Digital Identity Trust company, empowers organizations worldwide to establish customer trust through intelligent identity
HYPR
Identity and access
HYPR’s founders set out to tackle a pervasive and persistent 60-year old problem, security controls built on the weakest of foundations
iland
Cloud and hosting
iland is an award-winning enterprise cloud infrastructure provider with seven datacenters located in Boston, Washington D.C., Houston, Los
Lifesize
Communications and CPaaS
Our leading cloud solutions connect customers, contact center agents and employees with solutions designed for today’s digital
Lob
Marketing
Lob is the only automation platform that transforms direct mail into…
Podium
Finance and accounting
Get more leads. Make more money.
Tableau
Analytics
Tableau Software helps people see and understand their
Aera Technology
AI tools
The cognitive technology for the Self-Driving
Agility Recovery Solutions
Compliance and GRC
Agility Recovery is the most comprehensive provider of end-to-end business continuity solutions for
Agiloft
Government and public sector
Over 2.5 million users at organizations ranging from small enterprises to
Akia
Collaboration
Akia is a text-messaging platform designed to help hotels grow reputation and improve guest
ANSYS
Manufacturing and industrial
If you've ever seen a rocket launch, flown on an airplane, driven a car, used a computer, touched a mobile device, crossed a bridge, or put
Arista Networks
Cloud and hosting
Arista Networks is an industry leader in data-driven, client to cloud networking for large data center, campus and routing
Authomize
DevOps and observability
Authomize is the first automated authorization security management
Ban Transfer
Payments
BAN Transfer is an American technology company, with years of experience in various industries, under a Money Service Business Type II
Benevity International
Collaboration
Benevity, a Canadian-based company, is the global leader in online workplace giving, matching, volunteering, employee engagement, and
Brightly Software
Real estate and property
Brightly, a Siemens company, is the global leader in intelligent asset management solutions – because we know that smarter assets drive
Brivo Systems
Security
Brivo is the original innovator of cloud-based physical security solutions for commercial
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.