How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 418 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
HYPR
Identity and access
HYPR’s founders set out to tackle a pervasive and persistent 60-year old problem, security controls built on the weakest of foundations
iland
Cloud and hosting
iland is an award-winning enterprise cloud infrastructure provider with seven datacenters located in Boston, Washington D.C., Houston, Los
Lifesize
Communications and CPaaS
Our leading cloud solutions connect customers, contact center agents and employees with solutions designed for today’s digital
Lob
Marketing
Lob is the only automation platform that transforms direct mail into…
Podium
Finance and accounting
Get more leads. Make more money.
Tableau
Analytics
Tableau Software helps people see and understand their
Aera Technology
AI tools
The cognitive technology for the Self-Driving
Agility Recovery Solutions
Compliance and GRC
Agility Recovery is the most comprehensive provider of end-to-end business continuity solutions for
Agiloft
Government and public sector
Over 2.5 million users at organizations ranging from small enterprises to
Akia
Collaboration
Akia is a text-messaging platform designed to help hotels grow reputation and improve guest
ANSYS
Manufacturing and industrial
If you've ever seen a rocket launch, flown on an airplane, driven a car, used a computer, touched a mobile device, crossed a bridge, or put
Arista Networks
Cloud and hosting
Arista Networks is an industry leader in data-driven, client to cloud networking for large data center, campus and routing
Authomize
DevOps and observability
Authomize is the first automated authorization security management
Ban Transfer
Payments
BAN Transfer is an American technology company, with years of experience in various industries, under a Money Service Business Type II
Benevity International
Collaboration
Benevity, a Canadian-based company, is the global leader in online workplace giving, matching, volunteering, employee engagement, and
Brightly Software
Real estate and property
Brightly, a Siemens company, is the global leader in intelligent asset management solutions – because we know that smarter assets drive
Brivo Systems
Security
Brivo is the original innovator of cloud-based physical security solutions for commercial
ChannelAdvisor
E-commerce
ChannelAdvisor Corporation is a leading e-commerce cloud platform whose mission is to connect and optimize the world’s
CI
CipherCloud
Security
CipherCloud is a pioneer in delivering cloud information protection and enabling you to overcome risks to data privacy, residency
Cirrus Insight
CRM
Transform your CRM experience with Cirrus
Cleanshelf
IT management
Cleanshelf is the leading enterprise SaaS management platform focused on tracking, controlling, and benchmarking SaaS
Complion
Healthcare
Complion’s mission is to transform the way clinical trial documentation is created and
Concord Worldwide
Legal tech
Concord empowers growing businesses to make smarter operational decisions by unlocking actionable data from all their
Oracle America Inc. CrowdTwist
Compliance and GRC
Whistic enables organizations to assess, publish and share security
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.