Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
CSA STAR evidence
Split.io feature flags connects critical impact data and alerts you whether your software changes are making things better or
Split states it holds a CSA STAR Level 1 self-assessment. CertReports captured this on 21 Sep 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.
Level 1 is a self-assessment (CAIQ). Level 2 is a third-party certification or attestation built on ISO 27001 or a SOC 2 examination plus the Cloud Controls Matrix.
Read the CSA STAR guide and browse all vendors with evidenceSplit states it holds a CSA STAR Level 1 self-assessment. CertReports captured this on 21 Sep 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Similar vendors (shared product tags or the Developer tools category) whose CSA STAR row is verified or vendor-stated, ranked by similarity.
No Developer tools vendor has CSA STAR evidence in the index yet.
Solomon Amos · 26 Sep 2026 · 8 min read
Solomon Amos · 2 Nov 2026 · 10 min read