How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 418 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
Alibaba Cloud
Cloud and hosting
Alibaba Cloud offers a integrated suite of cloud products and services that are reliable and secure, to help you build cloud
Amira Learning
Education
Amira Learning is an AI-powered literacy assessment and tutoring platform that supports reading growth through personalized, data-driven
Andesite AI
Security
We spent decades defending our nation against sophisticated adversaries, and founded Andesite to build security products that support and
Anexia
Cloud and hosting
The IT service provider Anexia is offering high-quality and individual cloud and managed hosting solutions as well as individual software
Appspace
Collaboration
The Appspace platform serves as a workplace experience platform for Appspace
Apptio
IT management
We are the leading provider of Technology Business Management, or TBM
Aqua Security Software
Security
Aqua Security Software
Asset Panda
IT management
Asset Panda is a powerful cloud-based asset relationship management platform that helps you keep track of your assets and create
Authentic8
Security
Authentic8 is redefining how enterprises conduct business on the web with the Silo web isolation
BAMKO
E-commerce
BAMKO LLC, a subsidiary of Superior Group of Companies (NASDAQ: SGC), is a global provider of branded merchandise and ecommerce solutions
BitSight Technologies
Research and data providers
AI-powered cyber risk intelligence
Blackthorn.io
Payments
Manage events & collect payments – powered by Salesforce™ Blackthorn’s applications connect natively to Salesforce, so you can harness your
Brightidea
Project management
Brightidea is an Enterprise Innovation Management Software that would become your single system of record for all your innovation
Capcade
Project management
Capcade is a cloud-based B2B collaboration platform for secure document sharing, task management, and data
Check Point Software Technologies
Security
Check Point Software Technologies
Chronus
HR and HRIS
Chronus is a SaaS mentoring solution that allows corporations to automate and scale their mentoring
ControlUp
Analytics
First generation IT analytics and big data forever changed the IT
C&R Software
Finance and accounting
C&R Software delivers solutions across the Debt Collection and Recovery lifecycle, empowering organizations to manage their end-to-end
Deskpro
Customer support
Deskpro provides cloud and on-premise based helpdesk and ticketing
DiligenceVDR.ai
DevOps and observability
DiligenceVDR, LLC is a software company building modern diligence infrastructure for M&A, private equity, venture capital, and enterprise
Discuss.io
Video conferencing
Discuss.io is the leading video conferencing platform designed to help businesses engage with customers and collect live, qualitative
Eleven Software
AI infrastructure
ElevenLabs is an audio AI research & product company and our mission is to build the singular most important audio AI platform in the
Enel X
Automotive and mobility
Enel X Global Retail is a division of the Enel Group operating in the field of energy supply, energy management services, and public and
Evervault
Compliance and GRC
Evervault specializes in data encryption and confidential computing, helping customers address data security and compliance across various
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.