Snapshot 3910

Document
Data processing addendum
URL
https://trustcenter.cornerstoneondemand.com/
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
1237254 bytes
SHA-256 (raw)
2e3ca408aded8cfcb966bc87fe4e42a2839042d3aa1c8664552e40c8660df8e9
SHA-256 (normalized text)
c427bd03a5ade6499237d9fb12bb6cc08cbed6b333b2de0a2ade3cc4471e50bd

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Trust Center
Start your security review
View & download sensitive information
Overview
Customer Security and Privacy is of Paramount importance to Cornerstone.
This Trust Center provides you with resources demonstrating Cornerstone’s continuous commitment to protecting customer data. We prioritize our customers' security, quality and privacy and embed these and other operational controls in our platform using best practices for highly available, scalable, and secure cloud applications.
This page contains security documentation for Cornerstone solutions which include products and capabilities within Cornerstone Learn™ and Cornerstone Elevate™ - the single-architecture platform formerly known as CSX/Cornerstone Galaxy™. Cornerstone solutions are part of the Cornerstone Workforce AI™ platform. The major products in scope are included below.
Product Name	Products Included
Learn	Learning Management, Learning Experience, Extended Enterprise, Guide, Content
Elevate	Performance, Succession, Talent Marketplace, Recruiting, Compensation
For all other product lines please select the product using the drop-down arrow at the top of this page.
Cornerstone reserves the right to update documents as necessary per internal processes and internal Policies are provided as View only based on Cornerstone's internal Information Classification & Handling Policy.
If you are interested in learning more about Cornerstone and how our products and services can help transform your organization, please visit our https://www.cornerstoneondemand.com/contact-us/ page.
Compliance
SOC 2 Type 2
ISO/IEC 27001:2022
ISO/IEC 27017:2015
ISO/IEC 27018:2019
ISO/IEC 27701:2019
ISO/IEC 42001:2023
DORA
GDPR
CCPA
CPRA
Cyber Essentials
Cyber Essentials Plus
FedRAMP Moderate
DoD IL4
21 CFR Part 11
EU-US DPF
Swiss-US DPF
UK Extension to EU-US DPF
CSA STAR Level 1
VPAT
Documents
Featured Documents
DOCUMENTSCornerstone Workforce AI™ Platform Technology Overview
COMPLIANCESOC 2 Type 2
COMPLIANCEISO/IEC 27001:2022
COMPLIANCEISO/IEC 42001:2023
REPORTSISO 27001 SoA and Scope Statement
REPORTSISO 42001 SoA and Scope Statement
POLICIESIT Security Policy
POLICIESAI Policy
POLICIESPrivacy Policy
REPORTSDisaster Recovery Reports
REPORTSPentest Reports
Self-Assessments
CAIQ
Risk Profile
Recovery Time Objective
Recovery Point Objective
Hosting
Reports
ISO 27001 SoA and Scope Statement
ISO 42001 SoA and Scope Statement
Disaster Recovery Reports
View more
Access Control
Automated Account Management
Bring Your Own Device (BYOD)
Data Access
View more
AI
Cornerstone Elevate+ AI Capabilities Overview
White Paper - Cornerstone’s Security Readiness in the Age of AI
Artificial Intelligence Management System (AIMS)
View more
App Security
Application Penetration Testing
Code Analysis
Credential Management
View more
Asset Management
Asset Classification
Asset Inventories (Hardware/Software)
Asset Tracking
View more
BC/DR
Business Continuity Management System (BCMS)
Disaster Recovery Plans and Tests
Change Management
Change Control Board (CCB)
Change Management Program
Change Notification
View more
Continuous Monitoring
Automated Alert Response
Data Loss Prevention System (DLP)
File Integrity Monitoring (FIM)
View more
Corporate Security
Email Protection
Employee Training
HR Security
Data Privacy
Cookies
Data Breach Notifications
Data Privacy Officer
View more
Data Security
Access Monitoring
Certificates of Destruction
Data Asset Classification
View more
Endpoint Security
Anti-Malware
Disk Encryption
DNS Filtering
View more
ESG
Anti-Modern Slavery
Code of Business Conduct and Ethics
Community Involvement
View more
Incident Response
Designated Response Personnel
Forensic Retainer
Incident Reporting Process
View more
Infrastructure
Status Monitoring
Hosting Regions
Amazon Web Services
View more
Legal
Cyber Insurance
Data Processing Agreement
Privacy Policy - Client Portal
View more
Network Security
Bot Detection
Data Loss Prevention
Distributed Denial of Service Protection (Anti-DDoS)
View more
Physical & Environment
Access Monitoring
Delivery & Loading Zones
Fire Protection
View more
Policies
Acceptable Use Policy
Acceptable Use Policy for Generative Artificial Intelligence Tools
Access Control Policy
View more
Product Security
Integrations
Multi-Factor Authentication
Product Architecture
View more
Risk Management
Data Access/Impact Levels
Risk Assessments
Supply Chain Risk Management
Training
Employee Privacy Training
Security Awareness Training
Training Program
Knowledge Base (FAQ)
General: Does Cornerstone have a dedicated Data Privacy Organization and Chief Data Protection Officer?
General: What are the number of Employees and Contractors at Cornerstone?
General: Where is Cornerstone Corporate Headquarters?
General: Does Cornerstone conduct internal security audits?
General: Is Cornerstone ISO 9001 certified? Does your company have a Quality Management System in place that ensures compliance with applicable GxP standards?
View more
Trust Center Updates
New White Paper: Cornerstone’s Security Readiness in the Age of AI
General
We are pleased to a publish a new White Paper: Cornerstone's Security Readiness in the Age of AI.
As cyber threats move at machine speed, so do we.
Learn how Cornerstone is accelerating security, governance, and resilience to protect what matters most.
Read the White Paper now in the Cornerstone Trust Center.
Cornerstone Workforce AI™ Platform Technology Overview and Cornerstone Elevate+ AI Capabilities Overview
General
Please note that the Cornerstone Galaxy Technology Overview has been updated to: Cornerstone Workforce AI™ Platform Technology Overview.
In addition, a new Overview: Cornerstone Elevate+ AI Capabilities Overview has been published.
Coming Soon: The Cornerstone Learn+ AI Capabilities Overview and Cornerstone Intelligence+ and Readiness Agents Technology Overview.
Cornerstone 2025 Impact Report
General
We're proud to share Cornerstone's 2025 Impact Report which can be found in the ESG card in the applicable Product pages or on the Cornerstone Corporate website: https://www.cornerstoneondemand.com/resources/article/impact-report-2025/.
Bridge Letters Added
Compliance
SOC Bridge Letters have been updated in the following Product pages: *Cornerstone Galaxy, *Saba, *SumTotal, TalentLink, TalentSpace, SkyHive
Product Pages
General
Please note: Cornerstone and Cornerstone Learning Experience pages have been consolidated into the Cornerstone Galaxy page. In addition, a new product page called "Cornerstone's intelligence solutions" has been added.