Skip to main content
Cornerstone OnDemand logo

Cornerstone OnDemand

Security and trust center evidence

About Cornerstone: Cornerstone powers the future-ready workforce with a next generation talent experience platform designed to unite

cornerstoneondemand.comHR and HRISLast verified 2 Nov 2026
Request the report Are you Cornerstone OnDemand?

Summary

SOC 2 mark, CertReports state Vendor-stated as of 21 Sep 2026SOC 2Vendor-statedGDPR mark, CertReports state Vendor-stated as of 21 Sep 2026GDPRVendor-statedFedRAMP mark, CertReports state Verified as of 2 Nov 2026FedRAMPVerifiedISO/IEC 27001 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 27001Vendor-statedCSA STAR mark, CertReports state Verified as of 26 Oct 2026CSA STARVerifiedCyber Essentials mark, CertReports state Vendor-stated as of 21 Sep 2026Cyber EssentialsVendor-statedISO/IEC 27701 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 27701Vendor-statedISO/IEC 42001 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 42001Vendor-statedISO/IEC 27017 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 27017Vendor-statedISO/IEC 27018 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 27018Vendor-statedEU-US Data Privacy Framework mark, CertReports state Verified as of 2 Nov 2026DPFVerifiedCCPA / CPRA mark, CertReports state Vendor-stated as of 21 Sep 2026CCPAVendor-statedCyber Essentials Plus mark, CertReports state Vendor-stated as of 21 Sep 2026CE PlusVendor-stated

Cornerstone OnDemand has 3 registry-verified rows and 10 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 Type 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Cornerstone OnDemand is listed in the FedRAMP registry as FedRAMP Authorized, issued 2 Feb 2016 and audited by Schellman Compliance, LLC, as of 2 Oct 2026. Cornerstone OnDemand states on its trust centre that it holds SOC 2 Type II, GDPR, ISO/IEC 27001:2022 and ISO/IEC 27701:2019, as of 21 Sep 2026. Cornerstone OnDemand states on its trust centre that it holds ISO/IEC 27017:2015, ISO/IEC 27018:2019, ISO/IEC 42001:2023, CCPA, Cyber Essentials and Cyber Essentials Plus, as of 21 Sep 2026. Cornerstone OnDemand is listed in the CSA STAR registry with a Level 1 self-assessment, issued 10 Apr 2018, as of 29 Sep 2026. Cornerstone OnDemand is listed in the EU-US Data Privacy Framework registry as active, with EU-US, UK Extension and Swiss-US certifications issued 26 Sep 2016, expiring 20 Jul 2027, as of 29 Sep 2026.

  • FedRAMP Authorized - issued 2 Feb 2016, audited by Schellman Compliance, LLC (as of 2 Oct 2026)
  • Vendor-stated on trust centre: SOC 2 Type II, GDPR, ISO/IEC 27001/27701/27017/27018/42001, CCPA, Cyber Essentials and Cyber Essentials Plus (as of 21 Sep 2026)
  • CSA STAR Level 1 self-assessment, issued 10 Apr 2018; EU-US Data Privacy Framework active, expiring 20 Jul 2027 (as of 29 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 3 Oct 2026; it is regenerated whenever a row changes.

Among hr and hris vendors

3verified rows

Category median 0, across 94 indexed hr and hris vendors. Cornerstone OnDemand has more verified rows than 96 percent of them.

employee experiencelearning managementtalent managementworkforce development

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, PCI DSS. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors

No subprocessor list captured yet.

Security profile

Pen test cadence
report available

Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.

Change history

  1. 22 Sep 2026DPA changedThe data processing agreement URL changed.
  2. 18 Sep 2026Cyber Essentials evidence addedA Cyber Essentials row entered the index with state Vendor-stated.
  3. 18 Sep 2026Cyber Essentials Plus evidence addedA Cyber Essentials Plus row entered the index with state Vendor-stated.
  4. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  5. 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  6. 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
  7. 18 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.
  8. 18 Sep 2026ISO/IEC 27701 evidence addedA ISO/IEC 27701 row entered the index with state Vendor-stated.
  9. 18 Sep 2026ISO/IEC 42001 evidence addedA ISO/IEC 42001 row entered the index with state Vendor-stated.
  10. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.

Similar vendors with evidence

Related by product tags and the HR and HRIS category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.

Saba Software logo

Saba Software

Research and data providers

Cornerstone and our intelligence platform for workforce readiness deliver the insights leaders want, the skills and learning people need

DPF mark, CertReports state Expired
2 Nov 2026
Avature logo

Avature

HR and HRIS

Avature is an HCM software company which employs more than 450 employees around the world and operates in six countries (USA, UK, Spain

FedRAMP mark, CertReports state VerifiedCSA STAR mark, CertReports state VerifiedDPF mark, CertReports state Verified
3 verified2 Nov 2026
Donut Technologies logo

Donut Technologies

HR and HRIS

Donut is an employee experience platform that helps you automate and scale people programs, right in

SOC 2 mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
1 stated2 Nov 2026
TalentGuard logo

TalentGuard

HR and HRIS

TalentGuard is the only governance-first platform that transforms unverified skills data into defensible workforce

DPF mark, CertReports state Expired
2 Nov 2026

Evidence against regulations

All regulations for Cornerstone OnDemand

How much of each regulation’s vendor requirements Cornerstone OnDemand’s public evidence reaches.

Reviewing a vendor on public evidence

All articles