registry
CSA STAR evidence across 400 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 400
- Vendor-stated
- 2
- Expired
- 0
- Last verified
- 17 Sep 2026
Donnelley Financial Solutions
Compliance and GRC
DuoCircle
Security
eShare
Security
eFileCabinet
Productivity
Epsagon
DevOps and observability
Espressive
Customer support
Green Cloud Technologies
Cloud and hosting
Guidebook
No-code and automation
Hawk Search
E-commerce
Highspot
Sales tools
Innovative Business Software
DevOps and observability
IBS Software
Travel and hospitality
Introhive
CRM
Iron.io
Cloud and hosting
SaaS.group
Developer tools
Kapiche
Analytics
Kenna Security
Security
Kizen Technologies
No-code and automation
Kognitiv
Business services
Lettuce Financial Labs
Finance and accounting
Liaison Technologies
liaison.com
LoginRadius
Identity and access
Midaxo
Business services
Mirakl
E-commerce
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.