Trust Center
With the CoStar Real Estate Manager platform, accounting and real estate teams have a shared view of the entire lease lifecycle.
Lease accountants enjoy peace of mind with audits and compliance. Real estate managers know they have the best data for rent payments, portfolio optimization and quicker decisions.
CoStar Real Estate Manager maintains SOC 1 Type 2, and SOC 2 Type 2 attestations. SOC 1 examinations are performed three times per year for the following periods:
- Jan to Dec - Report release in early February
- Apr to Mar - Report release in early May
- Oct to Sep - Report release in early November
SOC 2 Type 2 examinations are performed annually for the Oct to Sep period.
Documents
Featured Documents
- What is CoStar Group's entity structure and how does that affect the delivery of services to clients?
- Are there any pending litigation or regulatory matters which may prevent CoStar Group from providing services to clients?
- Are CoStar Group employees required to undergo background investigations?
- Has CoStar Group conducted an OFAC screen on vendor and vendor's beneficial owners (25%>) and obtained a negative Office of Foreign Asset Control (OFAC) hit result?
- Where does CoStar Group operate?
CoStar Group's Response to Ivanti Connect Secure Vulnerability (CVE-2025-0282)
On January 8, 2025, CoStar Group learned of a vulnerability associated with the Ivanti Connect Secure product (CVE-2025-0282). CoStar Group uses the Ivanti Connect Secure application to support some remote access cases. CoStar Group took immediate steps to review the vulnerability and its presence in CoStar Group's environment.
As of January 9, 2025, CoStar Group has fully remediated the vulnerability. CoStar Group performed an investigation and found no signs of compromise or unauthorized access related to this vulnerability.
CoStar Group continues to monitor guidance from the Cybersecurity and Infrastructure Security Agency, Ivanti, the company's third parties, and other leading cybersecurity authorities regarding the Connect Secure application. Please monitor the company's Trust Center for additional updates, as required.