How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 434 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
Skytap
Cloud and hosting
The cloud for migrating and modernizing your traditional enterprise
The Sourcing
Networking
Sakon application supports the full lifecycle needs of telecom
Spin Technology
spin.ai
Founded in 2017 and Headquartered in Palo Alto, Spin.AI delivers the most innovating last line of cyberdefense, SaaS data management, and
TaxJar
E-commerce
TaxJar is the leading technology solution for busy eCommerce sellers to manage sales tax, and is trusted by more than 20,000
Tempo Software
Project management
Tempo Software is a leading provider of robust project and portfolio management solutions designed to empower organizations to achieve
Theta Lake
Collaboration
Theta Lake’s multi-award-winning product suite provides patented compliance and security for modern collaboration platforms, enabling
TransNexus
Developer tools
TransNexus is a software development company specializing in applications for managing wholesale VoIP
UCloud Technology
Cloud and hosting
UCloud is a neutral cloud computing company in China and has a neutral standpoint and does not engage in customer business
Uncountable
Analytics
Uncountable's all-in-one R&D platform simplifies the process of collecting, managing, and visualizing experiment data, so your researchers
UserTesting
Customer support
UserTesting is a platform for getting rapid customer feedback on almost any customer experience you can imagine, including websites, mobile
UXCam
uxcam.com
We, UXCam Inc. (“UXCam”) are a global team, driven by a common vision with our mission, Enable Businesses to deliver the best experience. Ensuring an outs...
xMatters
DevOps and observability
Introducing adaptive incident management for a changing world Automate on-call management: Replace inaccurate, high-maintenance
Yorktel
Collaboration
Founded in 1985, Yorktel is a global leader in video collaboration, systems integration, and managed
Yorosis Technologies
Business services
YOROSIS Technologies
Zinrelo
Marketing
Zinrelo is an enterprise-grade, SaaS-based loyalty technology platform that helps brands and businesses launch holistic rewards
Titan
Finance and accounting
Titan is an award-winning wealth manager with a mission to increase…
FU
Fulcrum
Analytics
The agentic debugger for AI systems
SafeBase
Compliance and GRC
Trust Center platform that scales customer security reviews
Mosaic
AI infrastructure
Defining the frontier of multiplayer AI.
Algolia
Developer tools
A developer-friendly and enterprise-grade search API.
Alloy
Identity and access
AI prototyping tool for product managers
CA
Candor
Security
Protect your data and stop insider risk
Moss
AI infrastructure
Real-time semantic search for Conversational AI
PA
Papaya
DevOps and observability
Continuously improve the quality of your AI agents.
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.