specification: API Commons TrustCenter
specificationVersion: '0.1'
generated: '2026-09-14'
method: searched
source: https://www.altusgroup.com/trust-center/
provider: ARGUS
providerId: argus
description: >-
  Altus Group publishes a Trust Center covering the ARGUS platform. It names certifications
  and links the artifacts directly, rather than gating them behind a portal request — the
  ISO 27001 certificate and three SOC 3 Type 2 reports are downloadable anonymously. The
  SOC 2 Type II report is the one item held behind a contact form.
trust_center:
  url: https://www.altusgroup.com/trust-center/
  status: 200
  gated: false
  request_form: https://www.altusgroup.com/contact-us/
certifications:
  - name: ISO/IEC 27001
    scope: Altus Group
    public_artifact: >-
      https://assets.ctfassets.net/8jgyidtgyr4v/57zQIo2ZT1tjAYxNXMTeov/5119a5f2b118d51137ce93e46d4e4564/Altus_Group_-_ISO_27001_Certificate__1257796-1_.pdf
    status: 200
  - name: SOC 3 Type 2
    scope: ARGUS Cloud (2025)
    public_artifact: >-
      https://assets.ctfassets.net/8jgyidtgyr4v/62oPXodxLyc0k2zAHoV5fG/91830a2100eb1f0825dac12bc0282ecb/Altus__ARGUS_Cloud__-_2025_SOC_3_Type_2_-_Report.pdf
    status: 200
  - name: SOC 3 Type 2
    scope: ARGUS Intelligence Platform (2025)
    public_artifact: >-
      https://assets.ctfassets.net/8jgyidtgyr4v/2hPBrND9iRvGEs2VldL8yJ/9c159d96366dd479de6e7cbbc2ba4c7c/Altus__ARGUS_Intelligence__-_2025_SOC_3_Type_2_-_Report.pdf
    status: 200
  - name: SOC 3 report
    scope: Altus Finance Active / Fairways (2024)
    public_artifact: >-
      https://assets.ctfassets.net/8jgyidtgyr4v/2g5zRuAZd4I18qDqETNcz5/209ef534616ee61751b4c1cee1a66810/2024_Altus_Finance_Active_SOC_3_report.pdf
  - name: SOC 2 Type II
    scope: Altus Group
    public_artifact: null
    access: on request via the contact form
compliance_documents:
  - name: Operational Resilience (EU & UK)
    url: >-
      https://assets.ctfassets.net/8jgyidtgyr4v/P6edTsHH9vYOUWRvQXyB1/aaedc98ba400a8cc3149f5a720fe44d6/Altus_Group_-_Operational_Resilience__EU_UK_.pdf
  - name: GDPR statement
    url: https://www.altusgroup.com/legal/gdpr/
    status: 200
  - name: GDPR sub-processors
    url: https://www.altusgroup.com/legal/gdpr-subprocessors/
    status: 200
  - name: California resident privacy notice
    url: https://www.altusgroup.com/legal/california-resident-privacy-notice/
  - name: Privacy policy
    url: https://www.altusgroup.com/legal/privacy-policy/
    status: 200
gaps:
  - >-
    No vulnerability disclosure or responsible-disclosure policy is published, and no
    security contact is named on the Trust Center.
  - >-
    No /.well-known/security.txt is served on any ARGUS host (see well-known/).
  - >-
    No bug bounty program (HackerOne, Bugcrowd, Intigriti) could be found.
  - >-
    No public status page. https://altusgroup.statuspage.io/ redirects to Atlassian
    marketing, meaning the subdomain is unclaimed.
  - >-
    No terms of use page is published. https://www.altusgroup.com/terms-of-use/ and every
    /legal/ variant probed return HTTP 404; the /legal/ index lists privacy, cookie,
    anti-spam, AODA and GDPR pages but no terms of service.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com