registry
CSA STAR evidence across 400 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 400
- Vendor-stated
- 2
- Expired
- 0
- Last verified
- 17 Sep 2026
Acquia
Marketing
CircleCI
DevOps and observability
Informatica
Data platforms
Boomi
Cloud and hosting
Chargebee
Finance and accounting
Deltek
Finance and accounting
Medallia
Customer support
Collibra
Data platforms
Talkdesk
Customer support
Keeper Security
Security
Nexthink
IT management
Sprinklr
Customer support
HackerOne
Security
Avature
HR and HRIS
Bugcrowd
Security
Expedient
Cloud and hosting
Forter
Payments
HireVue
Recruiting
Nintex
No-code and automation
Pegasystems
No-code and automation
ScienceLogic
DevOps and observability
Spreedly
Payments
Amplifire
Education
Articulate Global
Education
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.