--- title: "CivicPlus Payments Privacy Statement" slug: "civicplus-payments-privacy-statement" description: "CivicPlus Payments offers a secure online payment solution, integrating with your preferred partners while ensuring compliance with data processing standards." updated: 2026-06-10T20:46:54Z published: 2026-06-11T16:51:08Z canonical: "www.civicplus.help/civicplus-payments-privacy-statement" excludeFromExternalSearch: true --- > ## Documentation Index > Fetch the complete documentation index at: https://www.civicplus.help/llms.txt > Use this file to discover all available pages before exploring further. # CivicPlus Payments Privacy Statement This Privacy Statement describes the processing activities performed by CivicPlus when providing its CivicPlus Payments product (“Product”) pursuant to an executed contract with our Customers. This is not a privacy policy regarding the collection, use, and processing of Personal Data when CivicPlus is acting as a data controller. For information regarding our privacy practices when we are acting as a data controller, please see our [Privacy Policy](/legal-center/docs/civicplus-privacy-policy). **Description of the Product:** CivicPlus Payments is an online payment solution that connects our Services to our Customers’ payment partners. Note that CivicPlus Payments does not directly process payment details or financial information, but, rather, provides an integration for Customer to process payments with its preferred payment partners with whom Customer has a relationship and whose terms of service and privacy practices with which Customer has separately agreed. For more information, please see our [CivicPlus Payments website](https://www.civicplus.com/tools/civicplus-pay/). If you have any questions about this Privacy Statement, please contact us at [privacy@civicplus.com](mailto:privacy@civicplus.com). ## Processing Overview for the Product 1. Does the Product process Personal Data? **Yes** 1. Who’s Personal Data? - Our Customers’ Staff or Vendors: **Yes** - Our Customers’ End-Users: **Yes** - Other: **No** 2. Are there optional modules for the Product that process Personal Data that are turned on by default? **No** 3. Does the Product process Sensitive Data? **No** 4. Does the processing involve profiling of individuals based on personal characteristics? **No** 5. Is the processing done by Artificial Intelligence? **No** 6. Does the Product process Biometric Information? **No** 7. Does the Product process Personal Data using Monitoring Technologies? **Yes** 8. Does the processing include automated decision making that produces legal consequences or seriously impacts the people whose data the Product processes? **No** --- ## Detailed Description of the Processing | Categories of Data Processed | Categories of Sensitive Data Processed | Categories of Data Subjects | Purpose of Processing | Categories of Data Recipients | | --- | --- | --- | --- | --- | | Identifiers; Commercial Information; Internet or Electronic Activity; Monitoring Technologies | None | Customer End-Users | Provision of Goods or Services; Analytics & Improvement; Fraud Detection & Prevention; Legal Compliance | Service Providers; Customer Staff | | Identifiers; Internet or Electronic Activity; Monitoring Technologies; Geolocation Data; Internet or Electronic Activity | None | Customer Staff | Provision of Goods or Services; Operational and Internal Business Purposes of Customer | Service Providers; Customer Staff | --- ## Technical and Organizational Measures (TOMs) CivicPlus maintains the following Technical and Organization Measures (TOMs) to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems. We will provide further information about the below TOMs defined below to facilitate Customer audits and to prove compliance with our processing obligations, upon request. | Measure | Status | | --- | --- | | Physical Access Controls | **Yes** | | User Access Controls | **Yes** | | Anonymization or Pseudonymization | **Yes** | | Encryption in Transit | **Yes** | | Encryption at Rest | **Yes** | | Patching and Updating | **Yes** | | Backups Maintained and Tested | **Yes** | | Virus Protection on End Devices | **Yes** | | Application Firewalls | **Yes** | | Annual Data Protection Training | **Yes** | | Business Continuity Measures | **Yes** | | Disaster Recovery Measures | **Yes** | | Threat Detection and Monitoring | **Yes** | | Regular Testing & Evaluation of TOMs | **Yes** | --- ## Audits and Other Certifications CivicPlus has the following audits or certifications for this Product: - PCI DSS - GovRAMP Ready --- ## Subprocessors We utilize subprocessors to perform the processing activities set out in this Privacy Statement for the Product. If we engage a new subprocessor or replace an existing one, we will update this Privacy Notice. If you have an objection to a subprocessor, please contact us at [privacy@civicplus.com](mailto:privacy@civicplus.com). | Subprocessor | Description of Processing | Location | | --- | --- | --- | | **Mandatory** | | Rainforest Pay, Inc. | Processing | USA | | Microsoft, Inc. Azure | Host & Server | USA | | Pendo.io | Analytics | USA | | **Optional** | | Authorize.net, LLC | Processing | USA | | PayPal, Inc. d/b/a Braintree | Processing | USA | | Wells Fargo Bank N.A. d/b/a CardConnect d/b/a CardPointe | Processing | USA | | Clover Network, LLC | Processing | USA | | Cybersource Corporation | Processing | USA | | CSG Forte Payments, Inc. | Processing | USA | | Heartland Payment Systems, Inc. | Processing | USA | | Baseline Payments d/b/a JetPay | Processing | Canada | | RELX, Inc. D/b/a LexisNexis | Processing | USA | | Global Payments Direct, Inc. | Processing | USA | | PayPal, Inc. d/b/a PayPal | Processing | USA | | Fiserv, Inc. d/b/a First Data | Processing | USA | | Tempus Technology, Inc. | Processing | USA | Payment Card Industry Data Security Standard. A set of security standards designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment. Government Risk and Authorization Management Program. Incorporated. Limited Liability Company.