Skip to main content

Statistics

The index in numbers

Counts come straight from the evidence tables and refresh hourly. No score, no weighting: rows, dates and sources.

Indexable vendors
3,000
Evidence rows
8,341
Change events
418
Last verified
17 Sep 2026

Coverage by framework

Verified (moss), vendor-stated (steel), reported (stone) and expired (clay) rows per framework.

HIPAA mark
HIPAA15 rows · 0 verified
SOC 2 mark
SOC 245 rows · 0 verified
GDPR mark
GDPR21 rows · 0 verified
FedRAMP mark
FedRAMP561 rows · 560 verified
PCI DSS mark
PCI DSS1,567 rows · 1,394 verified
ISO/IEC 27001 mark
ISO/IEC 2700168 rows · 0 verified
CSA STAR mark
CSA STAR402 rows · 400 verified
Cyber Essentials mark
Cyber Essentials6 rows · 0 verified
ISO/IEC 27701 mark
ISO/IEC 277019 rows · 0 verified
ISO/IEC 42001 mark
ISO/IEC 4200113 rows · 0 verified
SOC 1 mark
SOC 15 rows · 0 verified
SOC 3 mark
SOC 38 rows · 0 verified
ISO/IEC 27017 mark
ISO/IEC 2701716 rows · 0 verified
ISO/IEC 27018 mark
ISO/IEC 2701816 rows · 0 verified
ISO 22301 mark
ISO 223012 rows · 0 verified
ISO 9001 mark
ISO 90011 rows · 0 verified
HITRUST mark
HITRUST2 rows · 0 verified
EU-US Data Privacy Framework mark
EU-US Data Privacy Framework4,677 rows · 1,562 verified
CCPA / CPRA mark
CCPA / CPRA17 rows · 0 verified
GovRAMP mark
GovRAMP6 rows · 0 verified
TX-RAMP mark
TX-RAMP8 rows · 0 verified
Cyber Essentials Plus mark
Cyber Essentials Plus3 rows · 0 verified
TISAX mark
TISAX7 rows · 0 verified
BSI C5 mark
BSI C57 rows · 0 verified
ENS mark
ENS7 rows · 0 verified
HDS mark
HDS2 rows · 0 verified
IRAP mark
IRAP7 rows · 0 verified
ISMAP mark
ISMAP2 rows · 0 verified

Freshness of evidence

under 7 days
8,341
7 to 30 days
0
30 to 90 days
0
older
0

Expiry windows

passed
214
next 30 days
241
30 to 90 days
577
later
2,453
See what expires soon

Coverage by category

Payments305 with evidence · 300 verified rowsSecurity174 with evidence · 184 verified rowsCompliance and GRC118 with evidence · 95 verified rowsMarketing98 with evidence · 64 verified rowsCloud and hosting93 with evidence · 86 verified rowsDevOps and observability90 with evidence · 110 verified rowsData platforms87 with evidence · 68 verified rowsIT management86 with evidence · 56 verified rowsAnalytics85 with evidence · 75 verified rowsFinance and accounting83 with evidence · 76 verified rowsBusiness services82 with evidence · 57 verified rowsEducation69 with evidence · 53 verified rowsE-commerce65 with evidence · 53 verified rowsHR and HRIS64 with evidence · 46 verified rowsCustomer support63 with evidence · 54 verified rowsNo-code and automation61 with evidence · 49 verified rowsDeveloper tools55 with evidence · 63 verified rowsRecruiting51 with evidence · 30 verified rowsCommunications and CPaaS49 with evidence · 41 verified rowsSales tools48 with evidence · 29 verified rows

Most-cited auditors, 3PAOs and QSAs

  1. 1Schellman Compliance, LLC.3pao170 vendors
  2. 2A-LIGN Compliance and Security, Inc., dba A-LIGN3pao144 vendors
  3. 3Coalfire Systems, Inc3pao109 vendors
  4. 4VikingCloud, Inc.qsa61 vendors
  5. 5SISAqsa60 vendors
  6. 6ControlCase, LLCqsa57 vendors
  7. 7Fortreum, LLC3pao55 vendors
  8. 8atsec (Beijing) Information Technology Co., Ltdqsa52 vendors
  9. 9Compliance Control Ltd.qsa49 vendors
  10. 10Foregenix Ltd.qsa48 vendors
  11. 11Kratos3pao43 vendors
  12. 12Lunarline, Inc.3pao43 vendors

Registry sync

csa_star2,751 rows · 397 linked · 17 Sep 2026
dpf10,238 rows · 5,044 linked · 17 Sep 2026
fedramp663 rows · 659 linked · 17 Sep 2026
visa_grsp3,626 rows · 1,900 linked · 17 Sep 2026

Events in the last 30 days

attestation added249
subprocessor added165
attestation removed4