Cornerstone Information Systems

Cornerstone Information Systems is listed in the EU-US Data Privacy Framework registry as active across the EU-US, Swiss-US, and UK Extension certifications, issued 18 Jan 2018 and valid through 1 Dec 2026, as of 26 Oct 2026. The vendor states on its trust centre that it holds SOC 2 Type 2, GDPR, PCI DSS, and CCPA/CPRA alignment, all as of 21 Sep 2026. No independent registry evidence beyond the Data Privacy Framework listing is available for these other frameworks as of 26 Oct 2026. Reviewers should note the Data Privacy Framework listing remains active through 1 Dec 2026, based on the registry check dated 26 Oct 2026. No public evidence found for ISO/IEC 27001 or HIPAA for Cornerstone Information Systems as of 26 Oct 2026.

• EU-US Data Privacy Framework - active, listed in registry, issued 18 Jan 2018, valid through 1 Dec 2026 (as of 26 Oct 2026)
• Vendor states on its trust centre: SOC 2 Type 2, GDPR, PCI DSS, CCPA/CPRA (as of 21 Sep 2026)
• No public evidence found for ISO/IEC 27001, HIPAA (as of 26 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 31 Oct 2026; it is regenerated whenever a row changes.