Help center Contact us 888-228-2233

About

Security

CivicPlus® Statement on IT Security

CivicPlus is committed to the highest level of ongoing digital security and cybercrime protections. We continually monitor our customers’ digital properties and annually invest in our cybersecurity infrastructure, staff training, and software protection capabilities.

Your Trusted Partner for Compliance and Security

CivicPlus® is a leader in compliance tools for government with world-class protection designed to safeguard systems and infrastructure, including the personal privacy of individuals.

We continually monitor our customers’ digital properties and annually invest in our cybersecurity infrastructure, staff training, and software protection capabilities. Our commitment is backed by a $12 million annual investment in cybersecurity to ensure we stay at the forefront of the latest threats.

When you choose CivicPlus, you choose a partner who is:

  • The number one compliance leader in social archiving
  • NIST 800-53 Rev 5 compliant
  • Committed to maintaining 99.9% up-time for our solutions
  • Available for 24/7/365 emergency support
  • Backed up a tier II data center that is fully redundant and multiple network providers with burst bandwidth

For More Information

CivicPlus Customers

If you are CivicPlus Customer looking for technical support, visit your

CivicPlus Help Center

Partners and Other Third Parties

If you are a third party with questions about our security capabilities, contact the

CivicPlus IS Department
hero image

Members of the Media

If you are a media member and would like to contact CivicPlus, please submit

an inquiry request here

Ongoing Risk Mitigation Efforts

We understand that there is an understandable concern about cybercrime. Please rest assured that we are confident our systems and infrastructure stringently safeguard our clients’ digital content.

To mitigate the risk of the ongoing threats to our clients, our software and hosting solutions team have the following security controls and safeguards in place:

  • All client websites are monitored 24/7/365.
  • An outside entity regularly performs system vulnerability assessments.
  • We follow strict development practices, which include writing secure code that protects our software and websites from cross-site scripting (XSS), SQL Injection, and other means of unauthorized access.
  • Our hosting is SOC 2 compliant.
  • We leverage only PCI-compliant payment solutions.
  • We consistently run third-party scans to mitigate security vulnerabilities.
  • As we identify suspicious activities, we will actively protect our clients. Specifically, regarding questionable accounts, we are not allowing these accounts to be validated and are systematically deleting them on your behalf. Our clients require no further action.

As we identify suspicious activities, we will actively protect our clients. Specifically, regarding questionable accounts, we are not allowing these accounts to be validated and are systematically deleting them on your behalf. Our clients require no further action.

Ready to Connect?

Stay up to date with the latest tips and news for local governments.

Request a Demo