How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 418 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
Sigma Computing
Analytics
Sigma is the next-generation of analytics for cloud data warehouses with a familiar spreadsheet-like interface that gives business experts
ThousandEyes
Logistics and supply chain
ThousandEyes monitors internal and external network performance to improve application delivery and reduce service
Action1
IT management
Action1 reinvents patch management with an infinitely scalable and highly secure platform configurable in 5 minutes that just
Beamery
Recruiting
Beamery’s Talent Operating System Attract, engage, and retain world class talent, power best in class candidate experiences, and manage the
Carbyne
Communications and CPaaS
Carbyne is the #1 provider of cloud-native emergency call handling solutions, featuring patented live caller video, on-demand pinpoint
dotdigital
Marketing
Dotdigital is a Software-as-a-Service (SaaS) marketing platform that enables companies to create, test and send data-driven automated
DXC Technology
Business services
DXC Technology helps clients harness the power of innovation to thrive on
Ex Libris
No-code and automation
Ex Libris Group, as a ProQuest company, is a leading provider of library automation solutions, offering the only comprehensive product
GE
Geotab
geotab.com
Our GPS fleet tracking & management system equips thousands of fleets worldwide with technology to automate, track and manage a truly
Manychat
Marketing
Manychat is chatbot marketing platform that automate interactive conversations in Instagram, WhatsApp, Facebook Messenger, email and
Orca Security
Security
Orca is a next-generation, comprehensive solution for providing full-stack, context-aware visibility for cloud
Plivo
Communications and CPaaS
Voice AI Agents for customer engagement, including WhatsApp, SMS &…
Productboard
Project management
Productboard Productboard is the leading customer-centric product management platform that empowers teams to get the right products to
QAD
Manufacturing and industrial
QAD Cloud Services is engaged in deploying QAD ERP solutions to the customers in a SaaS
RegScale
DevOps and observability
RegScale is a continuous controls monitoring (CCM) platform that enables rapid GRC
Rocketlane
Business services
Rocketlane is an industry-leading SAAS platform that provides Professional Services Automation (PSA) and Collaborative Customer
Siteimprove
Analytics
Siteimprove's cloud-based software is the foundation you need to improve your website every
Treasure Data
Data platforms
Treasure Data is the only enterprise CDP you need to power exceptional experiences from every part of your customer data
Vectra AI
Security
Vectra AI is the leader in hybrid attack detection, investigation and
Yotpo
Marketing
We're on a mission to provide brands with everything they need to create winning customer experiences, from discovery to
Zello
Communications and CPaaS
Zello is what work sounds
2C2P
Payments
2C2P is a payment service provider that helps companies in emerging markets accept and make payments
Aha Labs
Project management
Aha! is a very different type of high-growth SaaS
Aisera
Customer support
Aisera offers the industry's first proactive, personalized, and predictive AI powered Customer experience solution that automates 65-80% of
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.