How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 434 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
Kenna Security
Security
Kenna Security is the enterprise leader in risk-based vulnerability
Kizen Technologies
No-code and automation
Kizen provides the first no-code and enterprise-grade CRM, Insights, and Operations
Kognitiv
Business services
We are a dedicated Workday services partner consultancy who offers a flexible, pay-as-you-use consulting model that perfectly complements
Kollective Technology
Cloud and hosting
Kollective ECDN offers organizations a solution to eliminate bandwidth constraints across corporate networks when delivering Live Events
Laurel AI
Finance and accounting
Laurel is the AI timekeeping platform for law, accounting & consulting firms—auto-capturing billable work and turning time into
Liaison Technologies
Education
Liaison helps higher education institutions identify, recruit and enroll students with admissions management and marketing automation
LoginRadius
Identity and access
LoginRadius is a leading provider of cloud-based Customer Identity and Access Management solutions for mid-to-large sized
Midaxo
No-code and automation
Midaxo is the leader in software solutions for corporate
Mirakl
E-commerce
Mirakl offers the industry’s first and most advanced enterprise marketplace SaaS
Model N
Manufacturing and industrial
Model N supports the complex business needs of the world’s leading brands in pharmaceutical, medical device, high tech, manufacturing and
MoEngage Global
Marketing
MoEngage is an insights-led customer engagement platform that empowers marketers and product owners with AI-driven insights to create
MOLOCO
AI tools
Moloco is a machine learning company that offers performance solutions, assisting global businesses in optimizing their digital strategies
O4IT
o4it.com
O4IT’s CloudNow is an all-in-one platform aimed at service providers that covers every element to create a successful cloud service
OnceHub
Logistics and supply chain
OnceHub’s flagship product of the same name is designed to help businesses fast-track sales and streamline service delivery with
OfficeWork Software
HR and HRIS
OfficeWork Software, a longtime leader and innovator in the org chart software industry, helps organizations fulfill their workforce
PhishingBox
Security
PhishingBox is a security-focused company that provides a suite of cybersecurity tools to minimize phishing threats, including phishing
Planisware
Project management
Planisware is a provider of software solutions for project portfolio
Prismic.io
Developer tools
We're making a non-intrusive CMS that simply works on its own, as well as with other
ProcessMAP
processmap.com
ProcessMAP was created on a simple vision - to help businesses overcome the complexities of managing their Environmental, Health & Safety
Revver
Cloud storage
Since 2001, Revver, Inc. has been perfecting its approach to intelligent organization to create one of the most advanced document management systems on th...
Robin Powered
Collaboration
Robin is accelerating the world's transition to flexible work by connecting companies to the tools and skills needed to adopt a flexible
SearchStax
searchstax.com
SearchStax is a cloud-based SaaS solution that helps organizations improve website search
Shibumi
Project management
Shibumi is a cloud-based application that makes it easier to manage initiatives and deliver
Sign In Solutions
Collaboration
Sign In Solutions, Inc., headquartered in Florida, USA, is a global provider of cloud-based visitor management and workplace risk
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.