Trust Center
Welcome to Cornerstone’s Trust Center.
At Cornerstone, protecting your data is at the core of everything we do. Our Trust Center provides transparency into our security, privacy, and compliance practices — allowing you to explore our current posture and request access to detailed audit and certification resources.
Security and privacy are embedded into every layer of our operations — from how we design and build our platforms to how we manage and support our clients. Our commitment is to ensure your information is always handled with the highest standards of protection and integrity.
Because the information security landscape evolves rapidly, we keep this site regularly updated to reflect changes in our controls, certifications, and policies. We encourage you to subscribe for notifications to stay informed of important updates and new compliance resources.
Brad Franklin: VP of Information Security and Compliance, Data Protection Officer
American Express GBT
Expedia
Navan
ConocoPhillips
US Bank
Morgan Stanley
J.P. Morgan
GSA
Trust Center Updates
Critical Vulnerabilities
Security Advisory: Newly Disclosed PHP Vulnerabilities
We are aware of the recently disclosed security vulnerabilities affecting PHP and have proactively assessed our environment to determine any potential exposure.
Following a review of our systems, applications, and infrastructure, we have confirmed that PHP is not used within our environment. As a result, our systems are not impacted by these vulnerabilities, and no remediation actions are required at this time.
We remain committed to maintaining a strong security posture and will continue to monitor emerging threats and vulnerabilities to ensure the ongoing security of our systems and customer data.
Subprocessors
- Are all employees required to use MFA to access the production environment?
- Is customer data encrypted?
- What is Cornerstone's tenancy model and how is data separated?