How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 434 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
Abnormal AI
AI tools
Abnormal AI is the leading AI-native human behavior security platform, leveraging machine learning to stop sophisticated inbound attacks
Appian
Developer tools
Appian provides a leading low-code software development platform that enables organizations to rapidly develop powerful and unique
Deloitte
Business services
Shape the future faster with our innovation and technology
Envoy
Legal tech
We provide full-scale international legal immigration services and a proprietary online platform related to managing all employment-based
OpenText
Legal tech
OpenText™ Core Legal Hold is a simple, powerful cloud-based litigation hold notification software that helps law departments automate
8x8
Communications and CPaaS
8x8 business VoIP helps you serve your customers better with mobile, flexible solutions that help you do business anywhere
Fountain
Recruiting
High volume hiring made simple
Vonage
Communications and CPaaS
Vonage, a global cloud communications leader, helps businesses accelerate their digital
xAI
AI infrastructure
xAI is an AI company building advanced large language models and generative AI solutions, including Grok, to accelerate human scientific
Axonius
Security
The Axonius Platform gives customers a comprehensive understanding of all assets, their relationships, and business-level
Celonis
Analytics
Celonis has one very simple goal: to analyze today’s processes to make tomorrow’s world more
Druva
Cloud storage
The Druva Data Resiliency Cloud is the only at-scale SaaS platform designed for your multi-cloud
iBoss
Security
iboss enables companies to reduce cyber risk with a Zero Trust Security Service Edge that protects resources across cloud, SaaS and on prem
IDrive
Cloud storage
IDrive provides secure online data backup and recovery, disaster recovery, remote access, and object storage services for individuals and
Nutanix
Cloud and hosting
Nutanix strives to delight customers with a simple, flexible, and cost-efficient cloud platform, one that offers freedom of choice and
Acronis
Cloud storage
Acronis sets the standard for cyber protection through its innovative backup, anti-ransomware, disaster recovery, storage, and enterprise
CrashPlan
Cloud storage
CrashPlan provides secure endpoint backup for enterprise and Small Business
Forcepoint
Security
Forcepoint is a global data security leader headquartered in Austin, Texas, delivering AI-native protection for sensitive data across
Outreach
Sales tools
Outreach provides a Software as a Service (SaaS) sales acceleration
Anaplan
Analytics
Anaplan, headquartered in San Francisco, California, provides a business modelling and planning platform in the
BigCommerce
E-commerce
BigCommerce, founded in 2009, is a leading open software-as-a-service (SaaS) ecommerce platform that empowers merchants of all sizes to
BigID
Research and data providers
BigID’s cloud/SaaS data intelligence platform enables organizations to know their enterprise data and take action for privacy, protection
Domo
Analytics
Domo puts data to work for everyone so they can multiply their impact on the
Liferay
E-commerce
Liferay helps organizations solve digital challenges with omnichannel intranet, portal, commerce, and integration
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.