TrustLists
External Registry

Trust Centers in the CSA STAR Registry

39 companies in TrustLists are publicly listed in the Cloud Security Alliance STAR Registry — a free, publicly accessible database of cloud provider security and privacy controls. STAR Level 1 indicates a published CAIQ self-assessment; Level 2 adds third-party certification or attestation.

Axon
Crowdstrike
Dropbox
Druva, Inc.
Aisera
Algolia
Alloy
Appian
Armis
Asana
Asset Panda
Atlassian
Auditboard
Auvik
BigCommerce
Binalyze
Bitso
Branch
Bugcrowd
Bugsnag
Calendly
Calm
Cato Networks
Celonis

About the CSA STAR Registry

What is the CSA STAR Registry?

The Security, Trust, Assurance and Risk (STAR) Registry is a publicly accessible registry maintained by the Cloud Security Alliance. It documents the security and privacy controls provided by cloud computing offerings, helping prospective customers evaluate the security posture of cloud providers.

What's the difference between Level 1 and Level 2?

Level 1 is a self-assessment published using the Consensus Assessments Initiative Questionnaire (CAIQ). It demonstrates the provider has published their security posture. Level 2 adds independent third-party verification — either CSA STAR Certification (ISO/IEC 27001-aligned) or CSA STAR Attestation (SOC 2-aligned).

How does TrustLists use this data?

TrustLists cross-references its registry of 1,463+ trust centers against the public CSA STAR Registry to surface companies with verified, machine-readable security documentation. This page lists every company in TrustLists that also appears on CSA STAR.