Skip to main content
We aim to be exact about our compliance posture — the same standard of evidence we help our customers demand of their vendors. Here’s where we stand today.
Last updated: June 20, 2026.

​
CSA STAR Level 1 (self-assessment)

VendexLabs completes the Cloud Security Alliance’s Consensus Assessments Initiative Questionnaire (CAIQ) as a CSA STAR Level 1 self-assessment: a structured self-review against the CSA’s Cloud Controls Matrix.
A Level 1 entry is a self-assessment, not a third-party audit. No external auditor is involved and no certification is issued. It exists to give prospective customers a consistent, comparable view of our controls.
Our completed CAIQ is available upon request — email security@vendexlabs.com.

​
Audited certifications

VendexLabs does not currently hold SOC 2, ISO 27001, or other third-party-audited certifications. If your procurement process requires one, we’re happy to talk through our roadmap and timelines. Contact security@vendexlabs.com.

​
What we can share today

ItemStatusHow to get it
CAIQ / CSA STAR Level 1 self-assessmentAvailableRequest via security@vendexlabs.com
Security overviewPublishedSecurity overview
Privacy policyPublishedvendexlabs.com/privacy
SOC 2 / ISO 27001Not held todayDiscuss roadmap via security@vendexlabs.com
We update this page as our compliance program evolves. For the current state and timelines, reach out directly rather than relying on a cached copy.