How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 434 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
Moveworks
AI tools
Founded in 2016, the Moveworks AI platform combines advanced machine learning, conversational-AI, and Natural Language Understanding (NLU)
Neo4j
Data platforms
Neo4j is a graph database management system developed by Neo4j
ThoughtSpot
Analytics
ThoughtSpot is the Modern Analytics Cloud
BetterCloud
IT management
BetterCloud is the first SaaS Operations Management platform, empowering IT and security teams to define, remediate, and enforce management
Brightcove
Media and content
Brightcove Inc. (NASDAQ: BCOV) was established in 2004 and is a leading global provider of powerful cloud solutions for delivering and monetizing video ac...
Conga
CRM
Since 2006, Conga has been the go-to application provider for Salesforce® users who want to optimize their CRM investment and accelerate
iCIMS
Recruiting
The iCIMS Talent Cloud is a cloud-based talent acquisition platform that helps organizations to attract, engage, and hire the best
Infoblox
Networking
Infoblox's mission is to dramatically simplify complex distributed networking and security by delivering modern, cloud-first networking and
Kaltura
Media and content
Kaltura is one of the leading vendors of video solutions for the end to end video user
Kinsta
Cloud and hosting
Kinsta is an extension of your
Nylas
Scheduling
Nylas is used by developers around the world to quickly and securely build e-mail, scheduling, and work automation features into their
Rollbar
DevOps and observability
Rollbar is a SaaS application that helps remediate issues in
Sigma Computing
Analytics
Sigma is the next-generation of analytics for cloud data warehouses with a familiar spreadsheet-like interface that gives business experts
ThousandEyes
Logistics and supply chain
ThousandEyes monitors internal and external network performance to improve application delivery and reduce service
Action1
IT management
Action1 reinvents patch management with an infinitely scalable and highly secure platform configurable in 5 minutes that just
Beamery
Recruiting
Beamery’s Talent Operating System Attract, engage, and retain world class talent, power best in class candidate experiences, and manage the
Carbyne
Communications and CPaaS
Carbyne is the #1 provider of cloud-native emergency call handling solutions, featuring patented live caller video, on-demand pinpoint
dotdigital
Marketing
Dotdigital is a Software-as-a-Service (SaaS) marketing platform that enables companies to create, test and send data-driven automated
DXC Technology
Business services
DXC Technology helps clients harness the power of innovation to thrive on
Manychat
Marketing
Manychat is chatbot marketing platform that automate interactive conversations in Instagram, WhatsApp, Facebook Messenger, email and
Plivo
Communications and CPaaS
Voice AI Agents for customer engagement, including WhatsApp, SMS &…
Productboard
Project management
Productboard Productboard is the leading customer-centric product management platform that empowers teams to get the right products to
QAD
Manufacturing and industrial
QAD Cloud Services is engaged in deploying QAD ERP solutions to the customers in a SaaS
Rocketlane
Business services
Rocketlane is an industry-leading SAAS platform that provides Professional Services Automation (PSA) and Collaborative Customer
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.