registry
CSA STAR evidence across 400 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 400
- Vendor-stated
- 2
- Expired
- 0
- Last verified
- 17 Sep 2026
Domo
Data platforms
Liferay
No-code and automation
MicroStrategy
Analytics
Moveworks
Customer support
Neo4j
Data platforms
Paramify
Compliance and GRC
ThoughtSpot
Analytics
WalkMe
No-code and automation
BetterCloud
IT management
Brightcove
Media and content
Conga
Sales tools
iCIMS
Recruiting
Infoblox
Networking
Kaltura
Media and content
Kinsta
Cloud and hosting
Nylas
Developer tools
OneSpan
Security
Sigma Computing
Analytics
ThousandEyes
DevOps and observability
Action1
DevOps and observability
Beamery
Recruiting
Carbyne
Communications and CPaaS
Clari
Sales tools
Daon
Identity and access
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.