registry
CSA STAR evidence across 402 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 400
- Vendor-stated
- 2
- Expired
- 0
- Last verified
- 17 Sep 2026
dotdigital
Email marketing
DXC Technology
IT management
Ex Libris
Education
Orca Security
DevOps and observability
Panopto
Education
Plivo
Communications and CPaaS
Voice AI Agents for customer engagement, including WhatsApp, SMS &…
Productboard
productboard.com
QAD
Manufacturing and industrial
RegScale
Compliance and GRC
Rocketlane
Project management
Sauce Labs
DevOps and observability
Siteimprove
Compliance and GRC
Treasure Data
Data platforms
Vectra AI
Security
Yotpo
E-commerce
Zello
Communications and CPaaS
2C2P
Payments
Aha Labs
aha.io
Aisera
Customer support
Alibaba Cloud US
Cloud and hosting
Amira Learning
Education
Andesite AI
Security
Anexia
Cloud and hosting
Appspace
Productivity
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.