CivicPlus® Statement on IT Security
CivicPlus is committed to the highest level of ongoing digital security and cybercrime protections. We continually monitor our customers’ digital properties and annually invest in our cybersecurity infrastructure, staff training, and software protection capabilities.
Your Trusted Partner for Compliance and Security
CivicPlus is a leader in compliance tools for government with world-class protection designed to safeguard systems and infrastructure, including the personal privacy of individuals. We are the number one compliance leader in social media archiving and invest $12 million annually in cybersecurity.
Communities never sleep, which means your systems need continual monitoring and access. To ensure your residents can always access your digital tools, we maintain 99.9% up-time of our solutions and offer 24/7/365 emergency support.
How to Submit Security Questions or Report a Concern and Guidance for Responsible Reporting
We appreciate and value our customers, partners, and the security research community—those who proactively and responsibly communicate with us to help maintain stringent security standards across our shared industry.
To protect our customers and systems, CivicPlus does not disclose or discuss security questions or concerns until we have conducted our internal research and evaluation.
By submitting a question or reporting a concern, you agree to abide by the following guidelines:
- Allow CivicPlus a reasonable timeframe to investigate and respond.
- To not publicly share reported information before CivicPlus provides a response and mitigation activities, if necessary.
- Make a good faith effort to avoid creating privacy infringement, destruction, or service disruption to CivicPlus applications or data.
We are committed to working with our customers, partners, and third parties to ensure the highest digital security level. We will act quickly to address all submissions within these guidelines.
We request that our customers, partners, and members of the media use the following secure channels to privately submit inquiries to our Information Security Team for their response.
For More Information
CivicPlus Customers
If you are a CivicPlus customer looking for technical support, visit your
CivicPlus Help Center
Third Party Partners
If you have questions about our security capabilities, contact our
Security and Hosting Team
Media Members
If you are a media member and would like to contact CivicPlus, please submit
an inquiry request hereOngoing Risk Mitigation Efforts
Cybercrime is an ongoing threat to local government operations. We are confident our systems and infrastructure stringently safeguard our customers’ digital content. To mitigate the risk of the ongoing threats to our customers, our software and hosting solutions team have the following security controls and safeguards in place:
- All customer websites are monitored 24/7/365
- An outside entity regularly performs system vulnerability assessments
- We follow strict development practices, which include writing secure code that protects our software and websites from cross-site scripting (XSS), SQL Injection, and other means of unauthorized access
- We leverage only PCI-compliant payment solutions
- We consistently run third-party scans to mitigate security vulnerabilities
- We do not permit questionable accounts to be validated and systematically delete them
Ready to Connect?
Talk with a technology specialist.