Skip to main content

Statistics

The index in numbers

Counts come straight from the evidence tables and refresh hourly. No score, no weighting: rows, dates and sources.

Indexable vendors
8,235
Evidence rows
16,314
Change events
21,014
Last verified
1 Nov 2026

Coverage by framework

Verified (moss), vendor-stated (steel), reported (stone) and expired (clay) rows per framework.

HIPAA mark
HIPAA231 rows · 0 verified
SOC 2 mark
SOC 2774 rows · 21 verified
GDPR mark
GDPR471 rows · 0 verified
FedRAMP mark
FedRAMP582 rows · 563 verified
PCI DSS mark
PCI DSS3,538 rows · 3,225 verified
ISO/IEC 27001 mark
ISO/IEC 27001456 rows · 0 verified
CSA STAR mark
CSA STAR434 rows · 418 verified
Cyber Essentials mark
Cyber Essentials72 rows · 0 verified
ISO/IEC 27701 mark
ISO/IEC 2770198 rows · 0 verified
ISO/IEC 42001 mark
ISO/IEC 4200186 rows · 0 verified
SOC 1 mark
SOC 196 rows · 0 verified
SOC 3 mark
SOC 3100 rows · 21 verified
ISO/IEC 27017 mark
ISO/IEC 2701798 rows · 0 verified
ISO/IEC 27018 mark
ISO/IEC 2701890 rows · 0 verified
ISO 22301 mark
ISO 2230122 rows · 0 verified
ISO 9001 mark
ISO 90017 rows · 0 verified
HITRUST mark
HITRUST20 rows · 0 verified
EU-US Data Privacy Framework mark
EU-US Data Privacy Framework4,701 rows · 1,603 verified
CCPA / CPRA mark
CCPA / CPRA285 rows · 0 verified
GovRAMP mark
GovRAMP26 rows · 0 verified
TX-RAMP mark
TX-RAMP69 rows · 0 verified
Cyber Essentials Plus mark
Cyber Essentials Plus40 rows · 0 verified
TISAX mark
TISAX21 rows · 0 verified
BSI C5 mark
BSI C522 rows · 0 verified
ENS mark
ENS14 rows · 0 verified
HDS mark
HDS3 rows · 0 verified
NHS DSPT mark
NHS DSPT3 rows · 0 verified
IRAP mark
IRAP32 rows · 0 verified
ISMAP mark
ISMAP3 rows · 0 verified
DORA critical ICT provider designation mark
DORA critical ICT provider designation10 rows · 10 verified

Freshness of evidence

under 7 days
10,545
7 to 30 days
3,119
30 to 90 days
2,650
older
0

Expiry windows

passed
1,109
next 30 days
642
30 to 90 days
1,025
later
5,393
See what expires soon

Coverage by category

Payments737 with evidence · 716 verified rowsAnalytics275 with evidence · 131 verified rowsDeveloper tools220 with evidence · 96 verified rowsDevOps and observability193 with evidence · 149 verified rowsMarketing181 with evidence · 86 verified rowsCompliance and GRC179 with evidence · 121 verified rowsFinance and accounting176 with evidence · 141 verified rowsSecurity172 with evidence · 160 verified rowsResearch and data providers147 with evidence · 80 verified rowsBusiness services146 with evidence · 59 verified rowsCloud and hosting145 with evidence · 106 verified rowsEducation135 with evidence · 96 verified rowsE-commerce128 with evidence · 96 verified rowsNo-code and automation113 with evidence · 67 verified rowsCustomer support109 with evidence · 82 verified rowsAI tools96 with evidence · 38 verified rowsCollaboration95 with evidence · 71 verified rowsHR and HRIS94 with evidence · 55 verified rowsHealthcare91 with evidence · 48 verified rowsNetworking87 with evidence · 59 verified rows

Most-cited auditors, 3PAOs and QSAs

  1. 1VikingCloud, Inc.qsa267 vendors
  2. 2Foregenix Ltd.qsa266 vendors
  3. 3A-LIGN Compliance and Security, Inc. dba A-LIGN3pao257 vendors
  4. 4Schellman Compliance, LLC3pao244 vendors
  5. 5Coalfire Systems, Inc.3pao227 vendors
  6. 6ControlCase, LLCqsa200 vendors
  7. 7SISAqsa179 vendors
  8. 8atsec (Beijing) Information Technology Co., Ltdqsa165 vendors
  9. 9Compliance Control Ltd.qsa140 vendors
  10. 10INTEGRITY360 EUROPE LIMITEDqsa140 vendors
  11. 11SecurityMetrics, Inc.qsa120 vendors
  12. 12CIPHERqsa112 vendors

Registry sync

csa_star2,855 rows · 416 linked · 26 Oct 2026
dpf10,285 rows · 5,089 linked · 26 Oct 2026
fedramp664 rows · 662 linked · 1 Nov 2026
visa_grsp8,266 rows · 6,540 linked · 26 Oct 2026

Events in the last 30 days

auditor changed3,813
attestation renewed2,091
vendor indexed946
attestation expired319
subprocessor added89
attestation added47
state changed12
subprocessor removed2
baa availability changed1
dpa changed1