registry
CSA STAR evidence across 402 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 400
- Vendor-stated
- 2
- Expired
- 0
- Last verified
- 17 Sep 2026
Bentley Systems
Manufacturing and industrial
CobbleStone Software
Procurement
Cornerstone OnDemand
HR and HRIS
eGain
Customer support
Eptura
AI assistants
Lucid Software
Collaboration
OneStream Software
Finance and accounting
Ontic Technologies
Security
Phenom People Inc. Phenom
phenom.com
Quadient
Business services
QuestionMark
Education
SailPoint Technologies
Identity and access
Sierra Technologies
AI assistants
Persona Identities
Identity and access
Microsoft
Cloud and hosting
OpenAI
AI infrastructure
Wiz
Security
Dropbox
Cloud storage
Backup and share files in the cloud.
Cloudflare
Security
Okta
Identity and access
Indeed
Recruiting
Fortinet
Security
Trend Micro
Security
Proofpoint
Security
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.