How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 434 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
Treasure Data
Data platforms
Treasure Data is the only enterprise CDP you need to power exceptional experiences from every part of your customer data
Vectra AI
Security
Vectra AI is the leader in hybrid attack detection, investigation and
Yotpo
Marketing
We're on a mission to provide brands with everything they need to create winning customer experiences, from discovery to
Zello
Communications and CPaaS
Zello is what work sounds
2C2P
Payments
2C2P is a payment service provider that helps companies in emerging markets accept and make payments
Aha Labs
Project management
Aha! is a very different type of high-growth SaaS
Aisera
Customer support
Aisera offers the industry's first proactive, personalized, and predictive AI powered Customer experience solution that automates 65-80% of
Alibaba Cloud
Cloud and hosting
Alibaba Cloud offers a integrated suite of cloud products and services that are reliable and secure, to help you build cloud
Amira Learning
Education
Amira Learning is an AI-powered literacy assessment and tutoring platform that supports reading growth through personalized, data-driven
Anexia
Cloud and hosting
The IT service provider Anexia is offering high-quality and individual cloud and managed hosting solutions as well as individual software
Appspace
Collaboration
The Appspace platform serves as a workplace experience platform for Appspace
Apptio
IT management
We are the leading provider of Technology Business Management, or TBM
Asset Panda
IT management
Asset Panda is a powerful cloud-based asset relationship management platform that helps you keep track of your assets and create
Authentic8
Security
Authentic8 is redefining how enterprises conduct business on the web with the Silo web isolation
BAMKO
E-commerce
BAMKO LLC, a subsidiary of Superior Group of Companies (NASDAQ: SGC), is a global provider of branded merchandise and ecommerce solutions
BitSight Technologies
Research and data providers
AI-powered cyber risk intelligence
Blackthorn.io
Payments
Manage events & collect payments – powered by Salesforce™ Blackthorn’s applications connect natively to Salesforce, so you can harness your
Brightidea
Project management
Brightidea is an Enterprise Innovation Management Software that would become your single system of record for all your innovation
Capcade
Project management
Capcade is a cloud-based B2B collaboration platform for secure document sharing, task management, and data
Check Point Software Technologies
Security
Check Point Software Technologies
Chronus
HR and HRIS
Chronus is a SaaS mentoring solution that allows corporations to automate and scale their mentoring
ControlUp
Analytics
First generation IT analytics and big data forever changed the IT
C&R Software
Finance and accounting
C&R Software delivers solutions across the Debt Collection and Recovery lifecycle, empowering organizations to manage their end-to-end
Deskpro
Customer support
Deskpro provides cloud and on-premise based helpdesk and ticketing
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.