Automated decision-making disclosure
Cornerstone is a construction project management platform. Some of what it does is automated: it drafts, reads documents, scores answers against rules, matches records and raises flags. This page lists every such feature, what it does, the information it uses and whether a person reviews the result before anything happens. It is published to meet the automated decision-making transparency requirements of the Privacy Act 1988 (Cth), as amended by the Privacy and Other Legislation Amendment Act 2024, in force from 10 December 2026.
Drafts an RFI, letter, notice, tender deliverable or document from a template and the project's records. A person edits it and decides whether to issue it under the business's name.
Information used: The record being answered, the template, project details, and the names and titles of the people on the correspondence.
Human review: Yes. A person reviews the output before it has any effect.
Reads an uploaded contract and lists the obligations, notice periods, time bars, clarifications and requirements it finds, each marked as extracted. A person checks every clause before it is relied on.
Information used: The text of the contract documents uploaded to the project, which may name individuals (signatories, representatives, superintendents).
Human review: Yes. A person reviews the output before it has any effect.
When a variation, delay or claim is raised, matches it to the contract clauses that require a notice and shows the deadline. A person decides whether and when to give the notice.
Information used: The change event's type, description and dates and the extracted contract clauses. No personal information beyond who raised the event.
Human review: Yes. A person reviews the output before it has any effect.
Scores a contractor's prequalification answers against the questionnaire's rules and suggests a pass, fail or refer outcome. A person in the business reviews the score and any flagged answers before the contractor is told anything.
Information used: The answers the contractor submitted, which include the names, licences, insurances, safety records and financial capacity of the business and sometimes of named individuals.
Human review: Yes. A person reviews the output before it has any effect.
Reads a quote, invoice or purchase order dropped into the project, fills in the supplier, amount, dates and scope, and suggests the matching supplier in the register. A person confirms the fields before anything is committed or paid.
Information used: The document's text, including the supplier's ABN, contact names, email addresses and bank details where they appear on the document.
Human review: Yes. A person reviews the output before it has any effect.
Suggests the certifiable amount on a subcontractor's progress claim from the contract value, work completed and previous certifications. The contract administrator sets the certified amount; the suggestion never issues a payment schedule on its own.
Information used: The subcontractor's engagement, claims and dockets on the project. The names of the people who lodged the claim.
Human review: Yes. A person reviews the output before it has any effect.
Lines up the quotes received on a work package, points to the lowest conforming one and drafts an award recommendation. The person running the package decides who is awarded.
Information used: The quotes on the package and the supplier's prequalification standing. Names of the people who submitted each quote.
Human review: Yes. A person reviews the output before it has any effect.
Flags a subcontractor, worker or plant item whose insurance, licence, ticket, SWMS or inspection is missing or about to expire, and a person's credential that is due for renewal. A flag is information for a supervisor; it does not stop anyone working on its own.
Information used: Credential and compliance records held on people and businesses: licence and ticket numbers, expiry dates, insurance certificates and the person's name and employer.
Human review: Yes. A person reviews the output before it has any effect.
Reads a licence, ticket, induction card or certificate uploaded to a person's profile and fills in its type, number, issuer and expiry. The person adding it confirms before it is saved.
Information used: The image or PDF of the credential: the person's name, date of birth where printed, licence numbers, photograph and expiry dates.
Human review: Yes. A person reviews the output before it has any effect.
From what the business records about how a contractor is engaged (a sole trader engaged for labour only, hours directed, paid by the hour, own tools, works only for the business), raises a review engagement flag and notes a possible relevant contract for payroll tax, with the reasons. It is a prompt for a person to look at the engagement, not a finding and not legal advice.
Information used: The contractor's name and ABN and the engagement details the business records against them.
Human review: Yes. A person reviews the output before it has any effect.
Rules the business sets (an overdue RFI, a claim due, an incident reported) that send a notification or email when they match. The rule is written and switched on by a person; the platform only evaluates it.
Information used: The records the rule watches and the names and email addresses of the people it notifies.
Human review: Yes. A person reviews the output before it has any effect.
Scores the programme against common checks (open ends, long lags, negative float, missing logic) and lists what to fix. It is about the programme, not the planner; nothing is decided from it.
Information used: Programme activities, links and dates. The responsible person named on an activity.
Human review: Yes. A person reviews the output before it has any effect.
Suggests an activity's percent complete from the quantities logged against it. The person updating the programme accepts or overrides it.
Information used: Quantities logged, the activity's budget quantity, and who logged them.
Human review: Yes. A person reviews the output before it has any effect.
Suggests which register a dropped file or forwarded email belongs to (a drawing, an invoice, an RFI, a docket) and the fields to file it with. A person confirms the filing.
Information used: The file or email's text and metadata, which includes the sender's name and address and any names in the document.
Human review: Yes. A person reviews the output before it has any effect.
Writes a summary of the week's diary entries, and keeps a rolling brief of the project, from the records already on it. A person reads and edits it; the summary is not a record of anyone's performance.
Information used: Diary entries, meeting minutes, correspondence and the names of people recorded on them.
Human review: Yes. A person reviews the output before it has any effect.
Fills in the merchant, amount, GST and date from a receipt photo on an expense claim. The person claiming confirms the fields and an approver still approves the claim.
Information used: The receipt image: merchant, amount and sometimes the last digits of a card. The claimant's name.
Human review: Yes. A person reviews the output before it has any effect.
If you believe an automated suggestion on Cornerstone has been used to make a decision about you (for example a prequalification outcome or a claim assessment), you can ask the business that made the decision to explain it and to have a person reconsider it. The business using Cornerstone is the organisation you are dealing with; Cornerstone provides the platform and does not make decisions about you. Questions about this page can be sent to the platform operator through the support link inside the platform.