How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 418 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
UXCam
uxcam.com
We, UXCam Inc. (“UXCam”) are a global team, driven by a common vision with our mission, Enable Businesses to deliver the best experience. Ensuring an outs...
xMatters
DevOps and observability
Introducing adaptive incident management for a changing world Automate on-call management: Replace inaccurate, high-maintenance
Yorktel
Collaboration
Founded in 1985, Yorktel is a global leader in video collaboration, systems integration, and managed
Yorosis Technologies
Business services
YOROSIS Technologies
Zinrelo
Marketing
Zinrelo is an enterprise-grade, SaaS-based loyalty technology platform that helps brands and businesses launch holistic rewards
Titan
Finance and accounting
Titan is an award-winning wealth manager with a mission to increase…
FU
Fulcrum
Analytics
The agentic debugger for AI systems
SafeBase
Compliance and GRC
Trust Center platform that scales customer security reviews
Mosaic
AI infrastructure
Defining the frontier of multiplayer AI.
Algolia
Developer tools
A developer-friendly and enterprise-grade search API.
Alloy
Identity and access
AI prototyping tool for product managers
CA
Candor
Security
Protect your data and stop insider risk
Moss
AI infrastructure
Real-time semantic search for Conversational AI
PA
Papaya
DevOps and observability
Continuously improve the quality of your AI agents.
Enso
Data platforms
Self-Service Data Prep and Blend Built for Data Teams.
Litmus
Email marketing
Litmus is an email Design, Testing, and Analytics
SU
Surge
Developer tools
Stripe for telephony
Bud
HR and HRIS
Agent with a computer
Elementary
DevOps and observability
Open-source data observability for data teams
HackerRank
Recruiting
Change the world to value skills over pedigree
Flo
Automotive and mobility
The talent platform for legal
Cactus
AI tools
All-In-One AI Growth Partner. Built for Trades.
Miru
Security
Config Management for Robotics
People.ai
Sales tools
Harnesses business activity to unlock growth.
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.