Cloud Security Alliance Announces Availability of STAR for AI Level 2 and Valid-AI-ted for AI

Microsoft and Zendesk recognized as first organizations to achieve STAR for AI Level 2 certification

SEATTLE – November 20, 2025 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, today announced the availability of STAR for AI Level 2 and the companion Valid-AI-ted for AI service. These developments mark a major milestone in CSA’s global effort to deliver responsible, auditable, and standards-based assurance for artificial intelligence systems.

Advancing AI Assurance through STAR for AI Level 2

Building on the STAR for AI framework introduced in October, Level 2 is designed for organizations that have achieved third-party certification under ISO/IEC 42001 (the AI Management System standard) and wish to demonstrate deeper AI governance maturity.
Level 2 combines the assurance of independent certification with the intelligence of automated analysis from CSA’s Valid-AI-ted for AI engine. Together, these enable organizations to demonstrate transparent, evidence-based AI governance in alignment with CSA’s AI Controls Matrix (AICM) and related standards.

Introducing Valid-AI-ted for AI

Valid-AI-ted for AI is an AI-driven evaluation service that analyzes an organization’s STAR Level 1 self-assessment and awards a Valid-AI-ted badge when a passing score is achieved. The badge signifies that the organization’s self-assessment has met CSA’s established benchmarks for completeness, clarity, and governance maturity as articulated in the AI Controls Matrix Implementation and Auditing Guidelines.
Organizations receiving the Valid-AI-ted badge are recognized on the CSA STAR Registry as having successfully completed this quality validation process.

Microsoft and Zendesk Lead as First Achievers

CSA is proud to recognize Microsoft and Zendesk as the first two organizations in the world to achieve STAR for AI Level 2 certification, reflecting their leadership in trustworthy AI governance and commitment to transparency.

“As one of the first to achieve CSA STAR for AI Level 2, we’re proud to partner with CSA to turn responsible‑AI principles into verifiable, standards‑based assurance, delivering Trust with Transparency for our customers and the broader ecosystem.”

— Oliver Bell, GM, Microsoft 365 Trusted Platform, Microsoft

"Earning customer confidence requires disciplined and transparent AI governance, and that focus has guided every stage of our AI journey at Zendesk. Achieving STAR for AI Level 2 provides customers with clear, independently validated assurance of how we manage AI responsibly. We value CSA’s leadership in establishing standards that strengthen trust across the industry."

— Vinay Patel, Chief Trust & Security Officer, Zendesk

Their achievements demonstrate the viability of the STAR for AI framework as a model for aligning global standards, industry accountability, and the practical implementation of AI governance principles.

A New Era of Auditable AI

“STAR for AI Level 2 and Valid-AI-ted for AI bring to life the vision of auditable, transparent assurance for artificial intelligence,” said Jim Reavis, CEO and Co-Founder of the Cloud Security Alliance. “We’re proud to see global leaders like Microsoft and Zendesk set the standard for measurable trust in AI. This is the next step toward a secure and responsible agentic future.”

Organizations interested in achieving STAR for AI Level 2 or obtaining a Valid-AI-ted for AI badge can learn more at www.cloudsecurityalliance.org/star.

About Cloud Security Alliance
The Cloud Security Alliance (CSA) is the world’s leading not-for-profit organization committed to awareness, practical implementation, and credentialing of forward-looking cybersecurity topics, including AI, cloud, and Zero Trust. In an era where digital transformation drives business success, CSA stands as the global authority ensuring organizations can operate securely while harnessing cutting-edge technology. Through volunteer-driven research, globally-accepted standards, and award-winning vendor-neutral education programs that unite technical experts, industry practitioners, and varied associations, governments, chapters, and corporate members, CSA bridges the gap between innovation and pragmatic security execution. Visit CSA’s website to learn more.

Media Contact
Kristina Rundquist
ZAG Communications for the CSA
[email protected]