Cornerstone Achieves U.S. Federal Government Authorization with Defense Information Systems Agency (DISA) Impact Level 4 (IL4)

Trust Center

Start your security review
View & download sensitive information
ControlK

Customer Security and Privacy is of Paramount importance to Cornerstone.

This Trust Center provides you with resources demonstrating Cornerstone’s continuous commitment to protecting customer data. We prioritize our customers' security, quality and privacy and embed these and other operational controls in our platform using best practices for highly available, scalable, and secure cloud applications.

This page contains security documentation for the Cornerstone (formerly CSX) product and the associated products below. For all other product lines please select the product using the drop-down arrow at the top of this page.

Product NameProducts IncludedFormerly known as
CornerstoneCornerstone, Content Subscriptions, Cornerstone Content Studio, Cornerstone Talent MarketplaceCSX, Content Anytime, Content Studio, Opportunity Marketplace

Cornerstone reserves the right to update documents as necessary per internal processes.

If you are interested in learning more about Cornerstone and how our products and services can help transform your organization, please visit our https://www.cornerstoneondemand.com/contact-us/ page.

Documents

Featured Documents

DOCUMENTSGalaxy Technology Overview
Cornerstone Status System Dashboard
Amazon Web Services
Data Center Colocations
View more
Knowledge Base (FAQ)
  • General: Does Cornerstone conduct internal security audits?
  • General: What are the number of Employees and Contractors at Cornerstone?
  • General: Where is Cornerstone Corporate Headquarters?
  • General: When was Cornerstone founded?
  • General: What is the history of Cornerstone including acquisiitons?
View more
Trust Center Updates

Cornerstone Achieves U.S. Federal Government Authorization with Defense Information Systems Agency (DISA) Impact Level 4 (IL4)

Copy link
General

Cornerstone is excited to announce it has received Authority to Operate (ATO) at Defense Information Systems Agency (DISA) Impact Level 4 (IL4). With IL4 ATO, additional government organizations within the defense and intelligence communities can access Cornerstone, elevating how federal government employees learn, create and perform.

The IL4 ATO further supports Cornerstone’s ongoing growth in the defense community, building on the DISA Provisional Authorization achieved in 2025. After first receiving Provisional IL4 status in 2025, Cornerstone has continued to earn industry certifications for security and privacy, demonstrating its long-standing commitment to providing a highly reliable, secure, and fully operational environment for U.S. government organizations. These achievements enable agencies to effectively recruit, train, manage, and connect their employees through Cornerstone’s Galaxy™ platform.

Full Press Release: Cornerstone Achieves U.S. Federal Government Authorization with Defense Information Systems Agency (DISA) Impact Level 4 (IL4) (https://www.cornerstoneondemand.com/company/news-room/press-releases/cornerstone-achieves-us-federal-government-authorization-with-defense-information-systems-agency-disa-impact-level-4-il4/)

General

VPAT Reports for the Cornerstone product line were updated in the Trust Center Cornerstone page.

SOC Reports

Compliance

The following SOC Reports (including Letters of Confidentiality) were updated in the applicable Product pages: *Cornerstone *Cornerstone Learning Experience * Cornerstone Saba *Cornerstone SumTotal *Cornerstone TalentLink *Cornerstone TalentSpace *Cornerstone SkyHive.

ISO 42001 Certification

Compliance

Cornerstone is delighted to announce the successful implementation of our comprehensive AI governance foundation and has achieved the ISO 42001 Certification.

ISO 42001 is significant as the first international standard for an AI Management System (AIMS), providing a framework for organizations to develop, use, and manage AI responsibly, ethically, and securely, ensuring transparency, fairness, and accountability, which aids compliance with emerging regulations (like the EU AI Act), and balances innovation with governance. It offers practical guidance for risk management, governance, and lifecycle control, becoming a benchmark for responsible AI across industries.

Earning ISO 42001 Certification is a significant milestone for Cornerstone and a clear demonstration of our leadership's commitment in responsible AI.

Press Release: Cornerstone Announces ISO 42001 Certification, the Global Standard for Responsible AI {https://www.cornerstoneondemand.com/preview/?id=drafts.6fa0cbb5-32da-4462-94f0-61a2049a6d46&lang=en&contentType=pressReleasePageSchema&x-vercel-protection-bypass=M8UHYVxs0ATh4gXlgR6DZddkbpNAJKeW)

Bridge Letters Added

General

SOC Bridge Letters have been uploaded to the following Product pages: *Cornerstone, *Cornerstone Learning Experience, *Cornerstone Saba, *Cornerstone SumTotal, Cornerstone TalentLink, Cornerstone TalentSpace, Cornerstone SkyHive