Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
Share your insights on how organizations assess, monitor, and manage third-party risks. Take the short survey →

CSA STAR Registry

Security, Trust, Assurance, and Risk Registry

Listings for Commodity Trade X LLC

Listings for Commodity Trade X LLC

Commodity Trade X LLC (Tampa, Florida) operates CommodityTradeX, a members-only platform for physical commodity trade. Screened buyers, sellers, traders and brokers use it to post offers and requests, find counterparties, follow public tenders and auctions, and manage deals and documents with their counterparties.

Scope of this self-assessment: the CommodityTradeX web application (app.commoditytradex.com), its database, file storage and server functions, and the company website. The service runs on established cloud providers in the United States.

Member data we hold: account and company profiles, identity and company documents submitted for verification, listings, deal records and messages. Card payments are handled by a payment processor; CTX never stores card numbers.

Security and privacy: two-factor sign-in offered to every member and required for administrators, an hourly automated security watch, daily backups with a tested restore, monthly dependency scanning, and a written security program approved by the CEO. Members can download their data or delete their account at any time.

Trust Center: https://www.commoditytradex.com/security Security contact: support@commoditytradex.com

CommodityTradeX

CommodityTradeX is a software-as-a-service platform for physical commodity trade, used in a web browser at app.commoditytradex.com. Screened member compan...

Listed Since: 2026-11-04

CAIQ
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).