What is CSA STAR? Which SaaS Vendors Are Certified? | Compliance Posture

What is CSA STAR?

The Cloud Security Alliance Security, Trust, Assurance and Risk registry. Entries are either self-assessments (Level 1) or third-party audits (Level 2) against the Cloud Controls Matrix.

CSA STAR (Cloud Security Alliance) is tracked across the 422 vendors in our directory. Buyers frequently require it from vendors during procurement, and compliance is typically demonstrated through independent audits, official registries, or formal certifications. Timeframes vary. Most organizations plan months, not weeks, to prepare, be audited, and certify. For exact requirements, refer to the official CSA STAR program ↗.

Vendors with CSA STAR

85

Analytics

Adobe Analytics 9/32

Artificial Intelligence

Communication

Cisco Webex 18/32

Microsoft Teams 21/32

Customer Support

Freshdesk 10/32

Zoho Desk 10/32

Data Engineering

Informatica 10/32

Snowflake 19/32

Design & Creative

Adobe Creative Cloud 11/32

DevOps & Monitoring

Freshservice 10/32

Grafana Cloud 3/32

MongoDB Atlas 17/32

ServiceNow 17/32

E-Commerce

BigCommerce 14/32

ERP & Operations

Microsoft Dynamics 365 15/32

Governance, Risk & Compliance

HR & People Ops

Cornerstone OnDemand 12/32

Culture Amp 7/32

Remote.com 4/32

Infrastructure & Cloud

Amazon Web Services 21/32

Cloudflare 20/32

DigitalOcean 10/32

Google Cloud Platform 23/32

Microsoft Azure 23/32

Redis Cloud 12/32

Marketing

Optimizely 7/32

Productivity & Docs

Adobe Acrobat 12/32

Confluence 16/32

Google Workspace 16/32

Microsoft 365 21/32

Microsoft OneNote 15/32

Project Management

Monday.com 17/32

Sales & CRM

Freshsales 10/32

Salesforce 27/32

Security

CrowdStrike 17/32

Cybereason 9/32

Orca Security 10/32

Palo Alto Networks 10/32

Proofpoint 10/32

Websites & CMS

Drupal (Acquia) 13/32

Partial or conditional

8

These vendors meet it under specific conditions. Hover a card for the condition, or see their profiles.

Apollo CAIQ self-assessment published on trust center 7/32

Canva CAIQ Lite self-assessment published 7/32

Salesloft CSA badge shown on the trust center. The specific STAR level is not detailed there 4/32

Clari CSA badge shown on the trust center. The specific STAR level is not detailed there 4/32

Dialpad CSA STAR membership referenced, level not specified 5/32

TaxJar Listed as a security certification, level not specified 2/32

ThoughtSpot CSA STAR Level 1 self-assessment (CAIQ v4.0.3) for ThoughtSpot Cloud, not a Level 2 certification 6/32

ConnectWise CSA STAR Level 2 for specific offerings 2/32

Not certified

11

Finance & Payments

HR & People Ops

Infrastructure & Cloud

Productivity & Docs

Project Management

Sales & CRM

318 unverified

For these vendors, CSA STAR status is not publicly documented. That does not mean they lack the certification.

15Five 8x8 A-LIGN ActiveCampaign Acumatica Adobe Commerce Adobe XD ADP Adyen Affirm Afterpay Ahrefs Airbyte Airtable Airwallex Akamai Alchemer Amplitude Anthropic AppDynamics Applitools Avalara Backblaze BambooHR Basecamp Bench Accounting Betterworks Betty Blocks Bitbucket Bitdefender Bitwarden Blackboard BlueJeans Box Braintree Braze Brevo BrowserStack Bubble Buffer Bugsnag Campaign Monitor Carbonite Ceridian Dayforce Chargebee Check Point Checkmarx Checkout.com Chorus.ai CircleCI Cisco Duo Clay Clerk Clio Close Coda Cohere Constant Contact Contentful ContractPodAi Copper Coursera for Business Craft Crazy Egg Cypress.io Darktrace Dashlane Databricks Datto RMM dbt Labs Discord Divvy Docebo DocuSign Domo Drata Drift Dropbox Sign Ecwid Elasticsearch Epicor ESET Evernote Expensify Fastly Firebase Fivetran Flexport Fly.io Formstack FourKites Framer FreshBooks Front FullStory GitGuardian GitLab Gladly Glide GoCardless Google Analytics Google Apigee Gorgias GoTo Meeting Grammarly Grasshopper Greenhouse Groove Groq Heap Height Help Scout Heroku HiBob Hootsuite Hotjar HubSpot HubSpot CMS Hugging Face Hyperproof iCIMS IFS Infor Insightly Instapage Instructure Canvas Intercom InVision Iterable Ivanti JazzHR Jenkins Jira Service Management Jotform JumpCloud Juro Justworks Kaseya Kayako Keap Keeper Keeper Security Kentico Kinsta Klarna Klaviyo KnowBe4 Kong Kustomer Lacework Laika LambdaTest LangSmith LastPass Later Lattice LaunchDarkly LawPay Lever LinkedIn Learning Linode LiveChat LogicGate LogRocket Loom Lucidchart Lusha Mailchimp MailerLite Make Malwarebytes ManageEngine Marqeta McAfee Melio MetricStream Mimecast Mistral AI Mixpanel Motive Moz MuleSoft MyCase n8n Namely New Relic Nimble CRM NinjaOne Odoo Omnisend OneLogin Onfleet Oracle Eloqua Oracle ERP Cloud Oracle NetSuite OutSystems PagerDuty PandaDoc Paychex Paylocity PayPal Pendo Perplexity AI Personio Pilot.com Pinecone Ping Identity Plaid PlanetScale Podio PostHog PracticePanther PrestaShop project44 ProofHub Qlik Qualtrics Qualys QuickBooks Online Railway Rapid7 Re:amaze Recharge Recurly Render Resend Retool Revolut Business RingCentral RSA Archer Rubrik Sage Intacct Salesforce Pardot Samsara Sanity.io SAP S/4HANA Sauce Labs Scale AI Scytale Seamless.ai Secureframe Segment Semgrep Semrush SendGrid SentinelOne Sentry SharpSpring ShipBob ShipStation Shopify Shopware Shortcut Sisense Sitecore Sketch Skillsoft SmartRecruiters Smartsheet Snyk Softr SolarWinds SonarQube Sophos Sprinto Sprout Social Square Squarespace Strapi Stripe Supabase SurveyMonkey Symantec Tableau Tailscale Talend TalentLMS Teamwork.com TestRail Thoropass Tidio Tipalti Todoist Together AI Travis CI Trend Micro TriNet TrustArc Twilio Tyk Udemy Business UKG Unbounce Vanta Veracode Vimeo VMware Carbon Black Volusion VWO Wasabi Wave Accounting Weaviate Webflow Weights & Biases Whereby Wire Wise Wix WooCommerce WordPress VIP Workable WorkOS WP Engine Wrike Xero Zapier ZoomInfo Zuora

Browse by category

CSA STAR-compliant analytics

CSA STAR-compliant artificial intelligence

CSA STAR-compliant communication

CSA STAR-compliant data engineering

CSA STAR-compliant design & creative

CSA STAR-compliant devops & monitoring

CSA STAR-compliant e-commerce

CSA STAR-compliant erp & operations

CSA STAR-compliant finance & payments

CSA STAR-compliant governance, risk & compliance

CSA STAR-compliant hr & people ops

CSA STAR-compliant infrastructure & cloud

CSA STAR-compliant marketing

CSA STAR-compliant productivity & docs

CSA STAR-compliant project management

CSA STAR-compliant sales & crm

CSA STAR-compliant security

CSA STAR-compliant customer support

CSA STAR-compliant websites & cms

Don't see a vendor you need? Submit it

Compliance Posture

Check any SaaS vendor's security and compliance posture across 32 frameworks, all in one place.

Categories

Frameworks

Site

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026