How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 418 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
Blackbaud
Nonprofit and fundraising
Blackbaud is the world’s leading cloud software company powering social
Sumo Logic
Analytics
Sumo Logic empowers the people who power modern, digital
Tanium
IT management
Tanium is the only unified endpoint management and security platform that requires zero on-premises infrastructure and provides
UiPath
DevOps and observability
UiPath Inc. is a Romanian-American multinational software company that develops artificial intelligence (AI) and agentic automation and
Acquia
Business services
Acquia, Inc. (Acquia) is a privately held, open-source digital experience company that supports customers using the free and open-source content managemen...
CircleCI
Developer tools
CircleCI provides a CI/CD cloud environment for software engineers to test their code and deploy
Informatica
Data platforms
Informatica (NYSE: INFA), an Enterprise Cloud Data Management leader, brings data to life by empowering businesses to realize the
Boomi
Cloud and hosting
Boomi is the leading cloud-based integration platform as a service (iPaaS) that enables businesses to connect applications, data, and
Chargebee
Finance and accounting
Chargebee is the world’s leading Revenue Growth Management (RGM) platform for subscription
Deltek
Project management
Deltek is a leading global provider of enterprise software and information solutions designed to help project-based businesses optimize
Medallia
Education
Medallia is an American customer and employee experience management company based in Tysons, Virginia
Collibra
Research and data providers
Your system of record for
Talkdesk
Communications and CPaaS
Talkdesk is an easy-to-use, cloud-based call center software solution that helps growing businesses, improve customer interactions, while
Keeper Security
DevOps and observability
Keeper is the leading provider of zero-knowledge security and encryption software covering password management, dark web monitoring
Nexthink
IT management
Nexthink is the leader in digital employee experience management
Sprinklr
Customer support
Sprinklr is a provider of enterprise software solutions that help organizations unify customer-facing functions across digital
WalkMe
Productivity
WalkMe provides a platform for on-boarding and simplifying of user experience in web based
HackerOne
Security
HackerOne Inc. is a cybersecurity operations technology company managed by certified information system security professionals who conduct
Avature
HR and HRIS
Avature is an HCM software company which employs more than 450 employees around the world and operates in six countries (USA, UK, Spain
Bugcrowd
Security
Bugcrowd enables organizations to do everything proactively possible to avoid being blind-sided by
Expedient
DevOps and observability
Expedient combines data centers, network access and managed services to deliver information technology infrastructure as a service (IaaS)
Forter
Networking
The only fraud prevention platform, powered by the largest network of online retailers, that knows which customers to trust, in real-time
HireVue
Recruiting
At HireVue, we exist to connect talent to opportunity and unlock the potential in every candidate—because everyone has
Nintex
No-code and automation
Nintex is the global standard for process management and
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.