Cornerstone9

Terms of service

Version 1.1

1. What Cornerstone9 is

Cornerstone9 is a software tool that helps organisations prepare for certification to ISO 9001:2015. It provides a guided questionnaire, an automated readiness assessment, drafted quality-management documents, and scheduling and reminder features.

2. What Cornerstone9 is not

Cornerstone9 is not a certification body, a registrar, an accreditation body, or an auditor. It does not issue certificates, and it does not perform, replace or influence the independent third-party certification audit. That audit is carried out by a certification body you appoint separately, and its outcome is determined solely by that body’s auditors.

3. No warranty of certification success

We make no representation, warranty or guarantee — express or implied — that using Cornerstone9 will result in certification, in a successful audit, in any particular audit finding, or in the absence of nonconformities. Nothing in the product, its outputs, its marketing, or any communication from us should be read as such a guarantee.

The service is provided “as is” and “as available”, without warranties of any kind to the fullest extent permitted by law, including any implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

4. Your responsibility for your quality system

Documents generated by Cornerstone9 are drafts. You are responsible for reviewing them, correcting anything that does not reflect how your organisation actually operates, approving them, and implementing them in practice. A document that describes a process you do not follow is worse than no document at all — auditors check practice, not paperwork. You remain solely responsible for the accuracy, adequacy and implementation of your quality management system and for compliance with all applicable laws and regulations.

5. Scope

Cornerstone9 addresses generic ISO 9001:2015 only. It does not cover sector-specific schemes including but not limited to IATF 16949, ISO 13485, AS9100 or ISO 27001, each of which imposes additional requirements this product does not assess.

6. Automated content

Assessments and drafted documents are produced with the assistance of automated language models working from a clause reference we maintain. Output may contain errors or omissions. It is your responsibility to review it before relying on it. We do not reproduce the text of ISO 9001:2015, which is copyrighted and must be obtained from ISO or your national standards body.

7. Your data

You retain ownership of the information and documents you upload and of the documents produced for your organisation. We process them to provide the service. You can export your documents at any time. Data is isolated per organisation.

8. Cookies and analytics

We use Google Analytics on our public pages — the home page, this page, the contact page and our ISO 9001:2026 guide — to see how many people find the site and which pages they read. It sets cookies in your browser, named _ga and similar, and sends Google your page address, approximate location, and general device and browser information.

Nothing is set until you accept. If you have not answered our cookie banner, or you chose Reject, no analytics cookies are placed and nothing is sent to Google. You can change your mind at any time using the “Cookie settings” link in the footer; choosing Reject after having accepted also deletes the cookies already set.

We deliberately do not track everything. Analytics does not run on your account pages, so your work inside your quality system is not sent to Google. It also does not run on shared auditor or quality-profile links, because those addresses contain an access token and sending them to a third party would expose them.

We use no advertising cookies, no remarketing, and no cross-site tracking. Cookies strictly necessary to run the service — keeping you signed in, and remembering your cookie choice — do not require consent and are always present.

9. Personal information we collect

If you join the waiting list, we store the email address you give us and anything you choose to write in the optional questions, along with any company details you provide. We use it to tell you when the product is available and to decide what to build. We do not sell it, and we do not pass it to anyone except the service providers described below.

If you contact us, we receive your message and email address so that we can reply.

If you hold an account, we process the information and documents you put into your quality system in order to provide the service, as described in section 7.

We rely on the following processors: Supabase (database and authentication), Vercel (hosting), Resend (email delivery), Stripe (payments) and Google (analytics, only with your consent). Some are located outside the UK and EEA.

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it — including removing you from the waiting list. Write to privacy@cornerstone9.com and we will action it. If you are in the UK or EEA you also have the right to complain to your data protection authority.

10. Fees

Fees are as displayed at the point of purchase. The one-time setup fee is non-refundable once document drafting has been used. Subscriptions renew until cancelled and can be cancelled at any time, taking effect at the end of the current period.

11. Limitation of liability

To the fullest extent permitted by law, our total liability arising out of or relating to the service is limited to the amount you paid us in the twelve months preceding the claim. We are not liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, lost business, or the cost of a failed or delayed certification audit.

12. Changes

We may update these terms. Material changes will be notified to the email address on your account.

13. Contact

Questions about these terms: hello@cornerstone9.com

Prepared with Cornerstone9 — cornerstone9.com