Organizations who have the CSA Trusted
Cloud Provider trustmark demonstrate
a commitment to organizational security. They are
a CSA
Corporate Member, volunteer regularly for
CSA, and have at least one staff member who has
earned their CCSK.

This trustmark signifies adherence to the EU Cloud CoC through a dedicated framework and legally demonstrates GDPR compliance. Cloud Service Providers that have successfully passed the EU Cloud CoC’s evaluation process have their Compliance Mark visible in both the Code’s Public Registry as well as here in the CSA STAR Registry.

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about Workday Inc.
Listed Since: 02/26/2024
Last Updated: 05/16/2025
Listed Since: 02/26/2024
Last Updated: 05/16/2025
STAR Level 1
Self-Assessment & Partner-Provided
Cloud Controls Matrix

CAIQ Self-assessment v4.0.2
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
EU Cloud Code of Conduct (CoC)

EU Cloud CoC (Level 2)
This trustmark signifies adherence to the EU Cloud CoC through a dedicated framework and legally demonstrates GDPR compliance. Cloud Service Providers that have successfully passed the EU Cloud CoC’s evaluation process have their Compliance Mark visible in both the Code’s Public Registry as well as here in the CSA STAR Registry.
