Policy Updates

Trust Center

Start your security review
View & download sensitive information
ControlK

Customer Security and Privacy is of Paramount importance to Cornerstone.

This Trust Center provides you with resources demonstrating Cornerstone’s continuous commitment to protecting customer data. We prioritize our customers' security, quality and privacy and embed these and other operational controls in our platform using best practices for highly available, scalable, and secure cloud applications.

This page contains security documentation for the Cornerstone (formerly CSX) product and the associated products below. For all other product lines please select the product using the drop-down arrow at the top of this page.

Product NameProducts IncludedFormerly known as
CornerstoneCornerstone, Content Subscriptions, Cornerstone Content Studio, Cornerstone Talent MarketplaceCSX, Content Anytime, Content Studio, Opportunity Marketplace

Cornerstone reserves the right to update documents as necessary per internal processes and internal Policies are provided as View only based on Cornerstone's internal Information Classification & Handling Policy.

If you are interested in learning more about Cornerstone and how our products and services can help transform your organization, please visit our https://www.cornerstoneondemand.com/contact-us/ page.

Documents

Featured Documents

DOCUMENTSGalaxy Technology Overview
Knowledge Base (FAQ)
  • General: Does Cornerstone conduct internal security audits?
  • General: What are the number of Employees and Contractors at Cornerstone?
  • General: Where is Cornerstone Corporate Headquarters?
  • General: When was Cornerstone founded?
  • General: What is the history of Cornerstone including acquisiitons?
View more
Trust Center Updates

Policy Updates

Copy link
General

Please note the following Policies were updated in the Trust Center where applicable: ISO 27001 Scope Statement, Information Exchange Policy, Global Trade Compliance Policy, Electronic Commerce Policy, Acceptable Use Policy for Generative AI Tools, SCM Source Control Policy, Privacy Information Management System (PIMS) Policy, Organization of Privacy Policy, Organization of Information Security Policy, Information Security Management Systems (ISMS) Policy.

Bridge Letters Added

Compliance

SOC Bridge Letters have been uploaded to the following Product pages: *Cornerstone, *Cornerstone Learning Experience, *Cornerstone Saba, *Cornerstone SumTotal, Cornerstone TalentLink, Cornerstone TalentSpace, Cornerstone SkyHive

Cornerstone Achieves U.S. Federal Government Authorization with Defense Information Systems Agency (DISA) Impact Level 4 (IL4)

General

Cornerstone is excited to announce it has received Authority to Operate (ATO) at Defense Information Systems Agency (DISA) Impact Level 4 (IL4). With IL4 ATO, additional government organizations within the defense and intelligence communities can access Cornerstone, elevating how federal government employees learn, create and perform.

The IL4 ATO further supports Cornerstone’s ongoing growth in the defense community, building on the DISA Provisional Authorization achieved in 2025. After first receiving Provisional IL4 status in 2025, Cornerstone has continued to earn industry certifications for security and privacy, demonstrating its long-standing commitment to providing a highly reliable, secure, and fully operational environment for U.S. government organizations. These achievements enable agencies to effectively recruit, train, manage, and connect their employees through Cornerstone’s Galaxy™ platform.

Full Press Release: Cornerstone Achieves U.S. Federal Government Authorization with Defense Information Systems Agency (DISA) Impact Level 4 (IL4) (https://www.cornerstoneondemand.com/company/news-room/press-releases/cornerstone-achieves-us-federal-government-authorization-with-defense-information-systems-agency-disa-impact-level-4-il4/)

General

VPAT Reports for the Cornerstone product line were updated in the Trust Center Cornerstone page.

SOC Reports

Compliance

The following SOC Reports (including Letters of Confidentiality) were updated in the applicable Product pages: *Cornerstone *Cornerstone Learning Experience * Cornerstone Saba *Cornerstone SumTotal *Cornerstone TalentLink *Cornerstone TalentSpace *Cornerstone SkyHive.