How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
HE
Heroku
CSA STAR evidence
Enabling developers to build and run applications in the cloud.
No public evidenceHeroku and CSA STAR
CertReports found no public CSA STAR evidence for Heroku as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
No evidence records for CSA STAR. CertReports re-checks registries daily to weekly and vendor pages every 30 to 90 days.
What CSA STAR means, and what it does not
Level 1 is a self-assessment (CAIQ). Level 2 is a third-party certification or attestation built on ISO 27001 or a SOC 2 examination plus the Cloud Controls Matrix.
Read the CSA STAR guide and browse all vendors with evidenceQuestions buyers ask
Does Heroku have CSA STAR?
CertReports found no public CSA STAR evidence for Heroku as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 22 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with CSA STAR evidence
Similar vendors (shared product tags or the Cloud and hosting category) whose CSA STAR row is verified or vendor-stated, ranked by similarity.
Boomi
Cloud and hosting
Boomi is the leading cloud-based integration platform as a service (iPaaS) that enables businesses to connect applications, data, and
MacStadium
Cloud and hosting
As the industry-leading Mac private cloud and software-as-a-service provider enabling macOS workloads, MacStadium has been solely focused
Anexia
Cloud and hosting
The IT service provider Anexia is offering high-quality and individual cloud and managed hosting solutions as well as individual software
Incsub
Cloud and hosting
CampusPress, a division of Incsub, LLC, provides enterprise WordPress hosting solutions purpose-built for educational
Microsoft
Cloud and hosting
Microsoft Azure is a cloud computing platform for building, deploying and managing applications through a global network of Microsoft and
DigitalOcean
Cloud and hosting
DigitalOcean provides the easiest cloud platform to deploy, manage, and scale applications of any size, removing infrastructure friction
HashiCorp
Cloud and hosting
HashiCorp, Inc. is an American software company and subsidiary of IBM based in San Francisco, California
Arista Networks
Cloud and hosting
Arista Networks is an industry leader in data-driven, client to cloud networking for large data center, campus and routing
Understand CSA STAR evidence
All articlesExplainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read