registry
CSA STAR evidence across 402 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 400
- Vendor-stated
- 2
- Expired
- 0
- Last verified
- 17 Sep 2026
Checkmarx
DevOps and observability
Fountain
Recruiting
High volume hiring made simple
Hootsuite
Marketing
iManage
Legal tech
Abbott
Healthcare
Vonage
Communications and CPaaS
xAI
AI assistants
Axonius
IT management
Celonis
Data platforms
Druva
Data platforms
iBoss
Security
IDrive
Cloud storage
Nutanix
Cloud and hosting
Acronis
DevOps and observability
CrashPlan
Cloud storage
Forcepoint
Security
LogicMonitor
DevOps and observability
Omnissa
IT management
Outreach
Sales tools
Virtru
Security
Wrike
Project management
Anaplan
Data platforms
BigCommerce
E-commerce
BigID
Data platforms
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.