registry
CSA STAR evidence across 402 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 400
- Vendor-stated
- 2
- Expired
- 0
- Last verified
- 17 Sep 2026
Lookout
Security
Figma
Design tools
MongoDB
Data platforms
Zscaler
Security
Varonis
varonis.com
F5
DevOps and observability
Mimecast
Security
SentinelOne
Security
Ironclad
Legal tech
AI-powered contract management
PagerDuty
DevOps and observability
Real-time visibility into critical apps and services all in one place.
Dynatrace
DevOps and observability
New Relic
DevOps and observability
Rubrik
Security
UKG
HR and HRIS
CVENT
Project management
Netskope
Security
Red Hat
Cloud and hosting
Appian
No-code and automation
AvePoint
Cloud and hosting
Blackbaud
Nonprofit and fundraising
Deloitte
Business services
Sumo Logic
DevOps and observability
Tanium
DevOps and observability
UiPath
DevOps and observability
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.