Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
Join AI Trust Talks on October 21 and December 9 for 20-minute webinars exploring AI, identity, and data security risks →

STAR Registry Listing for

Talking Tree

Talking Tree

Talking Tree is a 501(c)(3) nonprofit founded by lawyers, engineers, and NLP experts to give founders and small businesses free legal education and low-cost resources. It delivers industry-leading Legal AI technology at true operational cost, providing affordable alternatives to expensive brand-name legal tech companies. From incorporation and fundraising to contracts and dispute resolution, Talking Tree cuts legal work from hours to minutes. Committed to accessibility, it also offers voice mode, free educational resources, and a curated attorney directory. Sign-up is free.

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about Talking Tree
Listed Since: 09/30/2025

STAR Level 1

Cloud Controls Matrix

CAIQ Self-assessment v4.0.3

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

Created or renewed about 1 year ago, on September 30, 2025.

(Deprecated)
Deprecated assessments do not necessarily indicate non-compliance. In this case, the assessment has not been updated within its validity period. We suggest contacting this organization directly to request that they submit an updated assessment.