Explore the Platform
CivicPlus Statement on IT Security
CivicPlus® is committed to the highest level of ongoing digital security and cybercrime protections. We continually monitor our customers’ digital properties and annually invest in our cybersecurity infrastructure, staff training, and software protection capabilities.
Your Trusted Partner for Compliance and Security
CivicPlus is a leader in compliance tools for government with world-class protection designed to safeguard systems and infrastructure, including the personal privacy of individuals. We are the number one compliance leader in social media archiving and invest $12 million annually in cybersecurity.
Communities never sleep, which means your systems need continual monitoring and access. To ensure your residents can always access your digital tools, we maintain 99.9% up-time of our solutions and offer 24/7/365 emergency support.
How to Submit Security Questions or Report a Concern and Guidance for Responsible Reporting
We appreciate and value our customers, partners, and the security research community—those who proactively and responsibly communicate with us to help maintain stringent security standards across our shared industry.
To report a security vulnerability, please email Information Security informationsecurity@civicplus.com with the following information:
- A description of the vulnerability, including the affected product, application, or URL.
- Detailed steps to reproduce the issue.
- The potential impact of the vulnerability, as you understand it.
- Any supporting evidence (screenshots, logs, or proof-of-concept code), limited to what is necessary to demonstrate the issue.
Please do not include sensitive data (such as personal information of third parties) in your report.
For More Information
CivicPlus Customers
If you are a CivicPlus customer looking for technical support, visit your
CivicPlus Help Center
Third Party Partners
If you have questions about our security capabilities, contact our
Security and Hosting Team
Media Members
If you are a media member and would like to contact CivicPlus, please submit
an inquiry request hereOngoing Risk Mitigation Efforts
Cybercrime is an ongoing threat to local government operations. We are confident our systems and infrastructure stringently safeguard our customers’ digital content. To mitigate the risk of the ongoing threats to our customers, our software and hosting solutions team have the following security controls and safeguards in place:
- All customer websites are monitored 24/7/365
- An outside entity regularly performs system vulnerability assessments
- We follow strict development practices, which include writing secure code that protects our software and websites from cross-site scripting (XSS), SQL Injection, and other means of unauthorized access
- We leverage only PCI-compliant payment solutions
- We consistently run third-party scans to mitigate security vulnerabilities
- We do not permit questionable accounts to be validated and systematically delete them
