Vendor profile
Cornerstone OnDemand: where is customer data stored and processed?
Cornerstone OnDemand has its headquarters in the USA and its customer data locations are not stated in the material provided. The privacy notice only says processing happens inside or outside the EEA, and the Trust Center mentions hosting regions without showing where they are. Storage, processing, backup, identity, support and notifications are all listed without a stated location. Group companies in the United Kingdom, France and Germany are registered, but the material does not confirm that they process customer data. No sub-processors are listed. The data processing agreement sits behind a login and was not read, so it cannot say where data is stored. The customer group is not stated, and the product name is blank.
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Group companies | France, Germany | United Kingdom |
Ownership and agreements
| Owner | Cornerstone OnDemand, Inc. (USA) |
|---|---|
| Headquarters | USA |
| Data processing agreement | Exists, but is not public |
| Certifications | SOC 2, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, CSA STAR, Cyber Essentials, ISO/IEC 42001, FedRAMP |