registry
CSA STAR evidence across 402 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 400
- Vendor-stated
- 2
- Expired
- 0
- Last verified
- 17 Sep 2026
Apptio
IT management
Aqua Security Software
Security
Asset Panda
IT management
Authentic8
Security
BAMKO
E-commerce
Benevity International
Benefits and insurance
BitSight Technologies
Security
Blackthorn.io
E-commerce
Brightidea
No-code and automation
Broadridge Financial Solutions
Finance and accounting
Capcade
Collaboration
Chronus
HR and HRIS
ControlUp
DevOps and observability
C&R Software
Finance and accounting
DataBank
Cloud and hosting
Deskpro
Customer support
DiligenceVDR.ai
Compliance and GRC
Discuss.io
Customer support
Eleven Software
AI infrastructure
Evervault
Security
Fieldguide
Compliance and GRC
Vertical AI for Audit & Advisory Firms
Fleetio
Logistics and supply chain
Flipsnack
Design tools
Fuel50
HR and HRIS
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.