How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 434 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
Pegasystems
CRM
Pegasystems Inc. (Pega) is a global software company based in Waltham, Massachusetts, in the United States, and founded in 1983
ScienceLogic
IT management
ScienceLogic is a leader in IT Operations Management, providing modern IT operations with actionable insights to predict and resolve
Spreedly
Payments
Tens of thousands of global businesses depend on our robust orchestration platform, diverse ecosystem of services, and unmatched market
Amplifire
Education
We imagine a smarter, safer, more prosperous world in which people learn and perform at their highest
Articulate Global
Education
Articulate Global, LLC. (Articulate) was founded in 2002 to simplify e-learning development and expand access to training globally. The company offers its...
Bentley Systems
Developer tools
At its core, Bentley Systems is a software development company that supports the professional needs of those responsible for creating and
Broadridge Financial Solutions
Analytics
Broadridge Financial Solutions
CobbleStone Software
Procurement
CobbleStone provides contract, vendor, and e-procurement management
Cornerstone OnDemand
HR and HRIS
About Cornerstone: Cornerstone powers the future-ready workforce with a next generation talent experience platform designed to unite
DataBank
Cloud and hosting
DataBank’s Managed Cloud transforms our Standard Cloud (IaaS) service into a comprehensively managed Platform-as-a-Service (PaaS)
eGain
Collaboration
eGain offers a suite of customer engagement solutions technology that supports chatbot, real-time collaboration, virtual customer assistant
Eptura
Collaboration
Eptura AI automates workplace tasks organization-wide with agents for office planning, instant stack plans, maintenance alerts, and
Lucid Software
Collaboration
Lucid Software / Lucid Suite (lucid.co) Lucid Software provides a powerful visual collaboration
OneStream Software
Finance and accounting
OneStream Software provides a revolutionary corporate performance management (CPM) solution that unifies and simplifies financial
Ontic Technologies
Government and public sector
Ontic makes software that corporate and government security professionals use to proactively manage threats, mitigate risks, and make
Phenom People Inc. Phenom
Recruiting
Phenom is a global HR technology company that delivers its AI-powered Talent Experience Management (TXM) platform to enterprises, enabling
Quadient
quadient.com
Quadient is the driving force behind the world’s most meaningful customer
QuestionMark
Education
Questionmark ® provides technologies and services that enable organizations to measure knowledge, skills, and attitudes securely and
SailPoint Technologies
Identity and access
SailPoint is the leader in enterprise cloud identity
Sierra Technologies
AI assistants
Sierra is the conversational AI platform for
Simetrik
Finance and accounting
No code enterprise SaaS for financial control automation.
Persona
Identity and access
Persona is the configurable identity platform built for businesses in a digital-first
GitHub
Developer tools
GitHub is a proprietary developer platform that allows developers to create, store, manage, and share their code
Tenable
Security
Tenable Holdings, Inc. is a cybersecurity company based in Columbia, Maryland
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.