Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
Share your insights on how organizations assess, monitor, and manage third-party risks. Take the short survey →

STAR Registry Listing for

CommodityTradeX

CommodityTradeX

CommodityTradeX is a software-as-a-service platform for physical commodity trade, used in a web browser at app.commoditytradex.com. Screened member companies use it to:

  • post offers and requests (RFQs) and find counterparties in a company directory
  • follow public tenders, sales and auctions
  • run deals in shared workspaces with documents, messages and milestones
  • complete identity and company verification (KYC)

Service model: multi-tenant SaaS, run and secured by Commodity Trade X LLC on established cloud providers in the United States. Each member company manages its own users, passwords and two-factor sign-in.

Covered by this self-assessment: the web application, its database, file storage and server functions, its AI features, and the company website.

Security details and the shared responsibility model: https://www.commoditytradex.com/security

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about CommodityTradeX
Listed Since: 11/04/2026

STAR Level 1

Cloud Controls Matrix

CAIQ Self-assessment v4.1.0

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

Created or renewed 4 days ago, on November 04, 2026.