How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 418 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
MoEngage Global
Marketing
MoEngage is an insights-led customer engagement platform that empowers marketers and product owners with AI-driven insights to create
MOLOCO
AI tools
Moloco is a machine learning company that offers performance solutions, assisting global businesses in optimizing their digital strategies
O4IT
o4it.com
O4IT’s CloudNow is an all-in-one platform aimed at service providers that covers every element to create a successful cloud service
OnceHub
Logistics and supply chain
OnceHub’s flagship product of the same name is designed to help businesses fast-track sales and streamline service delivery with
OfficeWork Software
HR and HRIS
OfficeWork Software, a longtime leader and innovator in the org chart software industry, helps organizations fulfill their workforce
PhishingBox
Security
PhishingBox is a security-focused company that provides a suite of cybersecurity tools to minimize phishing threats, including phishing
Planisware
Project management
Planisware is a provider of software solutions for project portfolio
Prismic.io
Developer tools
We're making a non-intrusive CMS that simply works on its own, as well as with other
ProcessMAP
processmap.com
ProcessMAP was created on a simple vision - to help businesses overcome the complexities of managing their Environmental, Health & Safety
Revver
Cloud storage
Since 2001, Revver, Inc. has been perfecting its approach to intelligent organization to create one of the most advanced document management systems on th...
Robin Powered
Collaboration
Robin is accelerating the world's transition to flexible work by connecting companies to the tools and skills needed to adopt a flexible
SearchStax
searchstax.com
SearchStax is a cloud-based SaaS solution that helps organizations improve website search
Shibumi
Project management
Shibumi is a cloud-based application that makes it easier to manage initiatives and deliver
Sign In Solutions
Collaboration
Sign In Solutions, Inc., headquartered in Florida, USA, is a global provider of cloud-based visitor management and workplace risk
Skytap
Cloud and hosting
The cloud for migrating and modernizing your traditional enterprise
The Sourcing
Networking
Sakon application supports the full lifecycle needs of telecom
Spin Technology
spin.ai
Founded in 2017 and Headquartered in Palo Alto, Spin.AI delivers the most innovating last line of cyberdefense, SaaS data management, and
TaxJar
E-commerce
TaxJar is the leading technology solution for busy eCommerce sellers to manage sales tax, and is trusted by more than 20,000
Tempo Software
Project management
Tempo Software is a leading provider of robust project and portfolio management solutions designed to empower organizations to achieve
Theta Lake
Collaboration
Theta Lake’s multi-award-winning product suite provides patented compliance and security for modern collaboration platforms, enabling
TransNexus
Developer tools
TransNexus is a software development company specializing in applications for managing wholesale VoIP
UCloud Technology
Cloud and hosting
UCloud is a neutral cloud computing company in China and has a neutral standpoint and does not engage in customer business
Uncountable
Analytics
Uncountable's all-in-one R&D platform simplifies the process of collecting, managing, and visualizing experiment data, so your researchers
UserTesting
Customer support
UserTesting is a platform for getting rapid customer feedback on almost any customer experience you can imagine, including websites, mobile
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.