How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 434 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
DiligenceVDR.ai
DevOps and observability
DiligenceVDR, LLC is a software company building modern diligence infrastructure for M&A, private equity, venture capital, and enterprise
Discuss.io
Video conferencing
Discuss.io is the leading video conferencing platform designed to help businesses engage with customers and collect live, qualitative
Eleven Software
AI infrastructure
ElevenLabs is an audio AI research & product company and our mission is to build the singular most important audio AI platform in the
Enel X
Automotive and mobility
Enel X Global Retail is a division of the Enel Group operating in the field of energy supply, energy management services, and public and
Evervault
Compliance and GRC
Evervault specializes in data encryption and confidential computing, helping customers address data security and compliance across various
ExtraHop Networks
Security
Explore cutting-edge technology solutions for your business
Fieldguide
Compliance and GRC
Vertical AI for Audit & Advisory Firms
Fleetio
Automotive and mobility
We provide the comprehensive solutions and resources needed to run, repair and optimize vehicles and assets, so fleets gain control of
Flipsnack
Media and content
Flipsnack is a one-stop shop for creating, publishing, and distributing all kinds of publications across all
Fuel50
E-commerce
Fuel50 is the only AI Talent Marketplace that has delivered talent retention and workforce mobility impact to 80+ industry-leading
Grafana Labs
DevOps and observability
Grafana has become the world’s most popular technology used to compose observability dashboards with everything from Prometheus & Graphite
HID Global
Identity and access
HID Global is the trusted leader in products, services, and solutions related to the creation, management, and use of trusted identities
HqO
Collaboration
HqO is the leading workplace experience operating system for commercial real
Hyland Software
Cloud storage
Hyland provides industry-leading technology foundations that empower its customers to create better human
Incsub
Cloud and hosting
CampusPress, a division of Incsub, LLC, provides enterprise WordPress hosting solutions purpose-built for educational
Innovid
Logistics and supply chain
Innovid is an independent software platform for the creation, delivery, measurement, and optimization of
Introhive
Research and data providers
Introhive is a Relationship Intelligence Platform that empowers firms to automate CRM data entry, enrich and maintain CRM data quality, and
IXOPAY
Payments
IXOPAY is a leading provider of enterprise-grade payment orchestration, providing a fully integrated platform and flexible payment
JAMF Software
IT management
Jamf is a global provider of organization cloud-based mobile device management (MDM) hosting services that allow organizations to off-load
JupiterOne
Security
JupiterOne is a cyber asset analysis platform every modern security team needs to collect and transform asset data into actionable insights
Kahua
Project management
Kahua, Inc. provides an industry-leading cloud-based collaborative platform specifically designed to transform and elevate project management across the c...
Kyriba
Finance and accounting
Kyriba empowers CFOs, Treasurers, and their IT counterparts to transform how they optimize financial technology solutions, de-risk ERP
Learnosity
Education
We power assessment excellence. Change happens quickly in the digital age. Behaviors change and expectations change—but for many, assessment has ...
Lettuce Financial Labs
Finance and accounting
Specialized tax and accounting strategies for
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.