registry
CSA STAR evidence across 400 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 400
- Vendor-stated
- 2
- Expired
- 0
- Last verified
- 17 Sep 2026
Marketing
Amazon
Cloud and hosting
Confluent
Data platforms
Box
Cloud storage
Vanta
Compliance and GRC
Vanta—the proven leader in automated compliance helping startups…
Tenable
Security
CrowdStrike
Security
Datadog
DevOps and observability
DocuSign
E-signature
Snowflake
Data platforms
Adobe
Design tools
Atlassian
Project management
Armis
Security
Rapid7
Security
Verkada
Security
Zendesk
Customer support
Drata
Compliance and GRC
ServiceNow
IT management
Asana
Project management
Cyera
Security
Qualtrics
Form builders and surveys
Qualys
Compliance and GRC
GitLab
DevOps and observability
A complete DevOps platform delivered as a single application.
Workday
HR and HRIS
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.