{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"cornerstone-ondemand","name":"Cornerstone OnDemand","domain":"cornerstoneondemand.com","category":"HR and HRIS","one_liner":"About Cornerstone: Cornerstone powers the future-ready workforce with a next generation talent experience platform designed to unite","trust_center_url":"https://trustcenter.cornerstoneondemand.com/","security_page_url":null,"url":"https://certreports.com/vendors/cornerstone-ondemand/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Drata) as of 18 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/cornerstone-ondemand/soc-2","evidence":[{"source_type":"trust_center","source_name":"Cornerstone OnDemand trust centre (Drata)","url":"https://trustcenter.cornerstoneondemand.com/","fetched_at":"2026-09-18 22:45:09.823982+00","content_hash":"f8c5501d6eb480016467d77698993b0b3d6b2beb2bdda888c76a9ad6e866cfd6","wayback_url":null,"quote":"SOC 2 Type 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/cornerstone-ondemand/gdpr","evidence":[{"source_type":"trust_center","source_name":"Cornerstone OnDemand trust centre (Drata)","url":"https://trustcenter.cornerstoneondemand.com/","fetched_at":"2026-09-18 22:45:09.823982+00","content_hash":"f8c5501d6eb480016467d77698993b0b3d6b2beb2bdda888c76a9ad6e866cfd6","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 18 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2016-02-02","expires_at":null,"period_start":null,"period_end":null,"auditor":"Schellman Compliance, LLC","impact_level":"Moderate","as_of":"2026-09-18","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/cornerstone-ondemand/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/F1509217359","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Cornerstone OnDemand - Cornerstone Galaxy: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/F1509217359","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Cornerstone OnDemand - Cornerstone Galaxy: FedRAMP Authorized","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27001:2022 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/cornerstone-ondemand/iso-27001","evidence":[{"source_type":"trust_center","source_name":"Cornerstone OnDemand trust centre (Drata)","url":"https://trustcenter.cornerstoneondemand.com/","fetched_at":"2026-09-18 22:45:09.823982+00","content_hash":"f8c5501d6eb480016467d77698993b0b3d6b2beb2bdda888c76a9ad6e866cfd6","wayback_url":null,"quote":"ISO/IEC 27001:2022","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ)","issued_at":"2018-04-10","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/cornerstone-ondemand/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/cornerstone-ondemand","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"cornerstone ondemand: STAR Level 1 self-assessment (CAIQ)","confidence":1}]},{"framework":"cyber-essentials","framework_name":"Cyber Essentials","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an Cyber Essentials certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states Cyber Essentials on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/cornerstone-ondemand/cyber-essentials","evidence":[{"source_type":"trust_center","source_name":"Cornerstone OnDemand trust centre (Drata)","url":"https://trustcenter.cornerstoneondemand.com/","fetched_at":"2026-09-18 22:45:09.823982+00","content_hash":"f8c5501d6eb480016467d77698993b0b3d6b2beb2bdda888c76a9ad6e866cfd6","wayback_url":null,"quote":"Cyber Essentials","confidence":1}]},{"framework":"iso-27701","framework_name":"ISO/IEC 27701","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27701 certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27701:2019 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/cornerstone-ondemand/iso-27701","evidence":[{"source_type":"trust_center","source_name":"Cornerstone OnDemand trust centre (Drata)","url":"https://trustcenter.cornerstoneondemand.com/","fetched_at":"2026-09-18 22:45:09.823982+00","content_hash":"f8c5501d6eb480016467d77698993b0b3d6b2beb2bdda888c76a9ad6e866cfd6","wayback_url":null,"quote":"ISO/IEC 27701:2019","confidence":1}]},{"framework":"iso-42001","framework_name":"ISO/IEC 42001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 42001 certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 42001:2023 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/cornerstone-ondemand/iso-42001","evidence":[{"source_type":"trust_center","source_name":"Cornerstone OnDemand trust centre (Drata)","url":"https://trustcenter.cornerstoneondemand.com/","fetched_at":"2026-09-18 22:45:09.823982+00","content_hash":"f8c5501d6eb480016467d77698993b0b3d6b2beb2bdda888c76a9ad6e866cfd6","wayback_url":null,"quote":"ISO/IEC 42001:2023","confidence":1}]},{"framework":"iso-27017","framework_name":"ISO/IEC 27017","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27017 certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27017:2015 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/cornerstone-ondemand/security","evidence":[{"source_type":"trust_center","source_name":"Cornerstone OnDemand trust centre (Drata)","url":"https://trustcenter.cornerstoneondemand.com/","fetched_at":"2026-09-18 22:45:09.823982+00","content_hash":"f8c5501d6eb480016467d77698993b0b3d6b2beb2bdda888c76a9ad6e866cfd6","wayback_url":null,"quote":"ISO/IEC 27017:2015","confidence":1}]},{"framework":"iso-27018","framework_name":"ISO/IEC 27018","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27018 certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27018:2019 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/cornerstone-ondemand/security","evidence":[{"source_type":"trust_center","source_name":"Cornerstone OnDemand trust centre (Drata)","url":"https://trustcenter.cornerstoneondemand.com/","fetched_at":"2026-09-18 22:45:09.823982+00","content_hash":"f8c5501d6eb480016467d77698993b0b3d6b2beb2bdda888c76a9ad6e866cfd6","wayback_url":null,"quote":"ISO/IEC 27018:2019","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, UK Extension Certification, SW-US Certification","issued_at":"2016-09-26","expires_at":"2027-07-20","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/cornerstone-ondemand/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4792","fetched_at":"2026-09-17 15:48:39.970577+00","content_hash":"f1de2b41121e43d82a378e5c64e192e84af4bfd7f3e1daa529d6d6970a808b5b","wayback_url":null,"quote":"Cornerstone OnDemand: Active: EU-US Certification, UK Extension Certification, SW-US Certification","confidence":1}]},{"framework":"ccpa","framework_name":"CCPA / CPRA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an CCPA / CPRA privacy notice on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states CCPA on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/cornerstone-ondemand/security","evidence":[{"source_type":"trust_center","source_name":"Cornerstone OnDemand trust centre (Drata)","url":"https://trustcenter.cornerstoneondemand.com/","fetched_at":"2026-09-18 22:45:09.823982+00","content_hash":"f8c5501d6eb480016467d77698993b0b3d6b2beb2bdda888c76a9ad6e866cfd6","wayback_url":null,"quote":"CCPA","confidence":1}]},{"framework":"cyber-essentials-plus","framework_name":"Cyber Essentials Plus","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an Cyber Essentials Plus certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states Cyber Essentials Plus on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/cornerstone-ondemand/security","evidence":[{"source_type":"trust_center","source_name":"Cornerstone OnDemand trust centre (Drata)","url":"https://trustcenter.cornerstoneondemand.com/","fetched_at":"2026-09-18 22:45:09.823982+00","content_hash":"f8c5501d6eb480016467d77698993b0b3d6b2beb2bdda888c76a9ad6e866cfd6","wayback_url":null,"quote":"Cyber Essentials Plus","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Cornerstone OnDemand is listed in the FedRAMP registry as FedRAMP Authorized, with authorization originally issued 02 Feb 2016 and audited by Schellman Compliance, LLC. As of 17 Sep 2026, Cornerstone OnDemand is listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ) submitted 10 Apr 2018. As of 17 Sep 2026, Cornerstone OnDemand is listed in the EU-US Data Privacy Framework registry as active for the EU-US Certification, UK Extension Certification, and SW-US Certification, originally issued 26 Sep 2016 and set to expire 20 Jul 2027. As of 17 Sep 2026, no public evidence found for SOC 2 for Cornerstone OnDemand. As of 17 Sep 2026, no public evidence found for HIPAA for Cornerstone OnDemand.","bullets":["FedRAMP: listed in FedRAMP registry as FedRAMP Authorized (issued 02 Feb 2016; audited by Schellman Compliance, LLC), as of 17 Sep 2026","CSA STAR: listed in CSA STAR registry, STAR Level 1 self-assessment (CAIQ) dated 10 Apr 2018, as of 17 Sep 2026","EU-US Data Privacy Framework: listed in DPF registry as active (EU-US, UK Extension, SW-US Certifications), issued 26 Sep 2016, expires 20 Jul 2027, as of 17 Sep 2026"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:41:34.581486+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T02:42:43.068Z"}