registry
CSA STAR evidence across 400 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 400
- Vendor-stated
- 2
- Expired
- 0
- Last verified
- 17 Sep 2026
Accenture
Business services
Splunk
DevOps and observability
KnowBe4
Security
Calendly
Scheduling
Planet
Communications and CPaaS
Axon
Government and public sector
grammarly
Productivity
ZoomInfo
Sales tools
Fivetran
Data platforms
The leader in automated data movement
Strada
Insurance
AI agents that run insurance operations
DigitalOcean
Cloud and hosting
Expel
Security
OneTrust
Compliance and GRC
TeamViewer
IT management
Egnyte
Cloud storage
Postman
Developer tools
Freshworks
CRM
Mixpanel
Analytics
Mixpanel is event analytics for builders that need answers.
Black Kite
Compliance and GRC
Abnormal AI
Security
Claroty
Security
Envoy
Legal tech
OpenText
Legal tech
8x8
Communications and CPaaS
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.