NTT DATA Business Solutions – Qualtrics
The Qualtrics solution addresses the key drivers of employee engagement, throughout the organisation, improving the employee experience organisation-wide, from engagement to rewards , to attracting and retaining top talent. Collecting and knowing how to use these different insights can help companies get a full picture of the employee IT experience.
Features
- Design and build surveys with simple drag-and-drop interface
- Automated Key Driver Analysis to identify priority improvement areas
- Distribute via Email,Web,SMS,IVR,QR Code,Social Media,Facebook,Twitter and more
- Real-time interactive dashboards & automated reporting online and mobile app
- Powerful text, sentiment & topics analysis with predictive intelligence
- Advanced statistical analysis including regression, correlation, cluster & conjoint
- Custom branding across all surveys and channels
- Closed-loop ticketing & action planning online and mobile app
- 100+ question types with advanced Display, Branch & Skip logic
- Target website users with 20+ behavioural, device and location variables
Benefits
- Identify key improvement areas that will drive the biggest impact
- Drive action at all levels in the organisation
- Improve operational efficiency, cost to serve and service levels
- Reduce call volumes to Contact Centres
- Gain fast, actionable insights with role based and realtime dashboards
- Increase responses with branded, mobile ready, certified accessible surveys
- Reduce resource and time to manage and act on feedback
- Improve overall web experience to drive online self service
- Integrates with operational data sources for holistic view of performance
- Incorporate employee experience data for front line staff engagement
Pricing
£6.04 a user a month
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
2 6 3 3 3 0 3 8 8 2 8 6 0 0 1
Contact
NTT DATA Business Solutions (UK) Limited
Philip Newman
Telephone: 07554555951
Email: philip.newman@nttdata.com
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Public cloud
- Service constraints
-
No service constraints
Customers are always on the latest version as upgrades are mandatory.
Maintenance window is 3 hours commencing Saturday 22:00 UTC for Europe.
There is no Major Upgrade window in place for Qualtrics - System requirements
-
- Modern HTML5 compatible web browser
- Internet Connection
- Access to the cloud service URL via any corporate firewalls
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- Our target response time for an email is less than 24 hours, although we typically respond much faster. on average, our email response time over the last year averaged less than an hour.
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.1 AA or EN 301 549
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- Web chat
- Web chat support availability
- 9 to 5 (UK time), 7 days a week
- Web chat support accessibility standard
- WCAG 2.1 AA or EN 301 549
- Web chat accessibility testing
- To help meet our goal of universal design, our development team meets standards given by Section 508 of the Rehabilitation Act and the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA to ensure our technical services are accessible to the highest standard possible. To aid in this, software developers and UX designers at Qualtrics use the WCAG guidelines that help codify many of the most important accessibility concerns and standard practices needed to make a web application accessible. The WCAG guidelines are oriented around the guiding principles of making web interfaces Perceivable, Operable, Understandable, and Robust (POUR).
- Onsite support
- No
- Support levels
-
All users have access to live, 24/7 support from our world-class support team, at no additional cost. In an industry where the standard customer satisfaction is 95%, we have always excelled, generally averaging 97% satisfaction. All support is authenticated so only legitimate users receive assistance. This ensures data security for your company.
- Omnichannel access including phone, chat, and email.
- Extensive online support environment - pages, videos, and webinars.
- Expanded language support: English, Spanish, French, German, Italian, Chinese, Dutch, Portuguese, Japanese.
- Technical Account Manager available as an add-on for enterprise accounts. - Support available to third parties
- No
Onboarding and offboarding
- Getting started
-
There are several ways in which we ensure successful platform onboarding, generate buy-in, and deliver value to organisations, including:
No matter which Qualtrics license or account type you have, training is available to all users on XM Basecamp for free, to enhance the onboarding experience and expedite platform adoption.
We are able to provide enablement services to enable your Customer Success representatives, and to provide you with product-specific enablement plans, customised to your specific organisation and user base. These enablement plans outline a timeline with recommended training resources to complete and ensure successful product adoption and expansion.
Brand Admins receive recommended training courses to complete in targeted newsletters.
Our Certification courses provide two levels of training - Platform Essentials and Expert - for a foundational understanding of XM and the Qualtrics platform, as well as a more specialised, in-depth learning journey for your specific product/program. - Service documentation
- Yes
- Documentation formats
-
- HTML
- End-of-contract data extraction
-
Because customers are in control of their data, Qualtrics encourages Customers to export and delete their data from Qualtrics prior to leaving the platform. After the conclusion of the contract period, the Customer will no longer be able to access any data remaining on the platform. Qualtrics then will delete any remaining data in accordance with applicable law and contractual obligations.
Data extraction can be performed with a single button click. - End-of-contract process
- Because customers are in control of their data, Qualtrics encourages Customers to export and delete their data from Qualtrics prior to leaving the platform. After the conclusion of the contract period, the Customer will no longer be able to access any data remaining on the platform. Qualtrics then will delete any remaining data in accordance with applicable law and contractual obligations.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Internet Explorer 11
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Opera
- Application to install
- No
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- Users can create surveys compatible with a variety of devices and can tailor the survey based on the device type. We have designed multiple questions for mobile devices with mobile-specific features built-in. You can also use mobile to access role-based dashboards.
- Service interface
- No
- User support accessibility
- WCAG 2.1 AA or EN 301 549
- API
- Yes
- What users can and can't do using the API
-
Our customers use the API in several ways. We have outlined some common uses cases below.
-Query String: Customers can pass API request parameters through standard query string syntax.
-Web Service: Automating API request construction is commonly done by an IT specialist at your organisation, as this process requires the implementation of custom code.
-JSON: Customers can pass parameters as JSON through the body of the request. Note that when using this method, you must specify a Content-Type (i.e., application/json or text/json).
-Automating Contact List Import: Customers can use the importPanel request to import batches of contacts into their Qualtrics account. Through this request, you can import CSV lists of individuals from your CRM into Qualtrics.
-Automating Contact Creation: Rather than individually update contact lists with new contact members, Customers can automate the process by using the addRecipient request. This request adds a new contact to an existing contact list.
-Generating Individual Links (createdDistribution and GetPanel): Customers might need to distribute their survey through an internal mailer rather than the Qualtrics mailer. With the Qualtrics API, Customers can construct individual links that track a respondent’s personal information without having to use the Qualtrics mailer. - API documentation
- Yes
- API documentation formats
- HTML
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
- Qualtrics provides a solution that allows for almost complete flexibility and customisation so that customers can collect and analyze survey data in exactly the way you need to in order to provide your customers with the understanding and experience they deserve. There is flexibility to customise survey questions, look and feel of the surveys, look and feel of internal dashboards, and the ability to customise all instructional and hint text throughout the application. This is not a comprehensive list, but a sampling of some of the areas available to be customised.
Scaling
- Independence of resources
- Qualtrics approaches high availability, scalability, and performance by architecting highly modular, redundant systems. We have multiple data centres around the world designed for 24/7/365 availability. Qualtrics has redundancy both within and across data centres, which allows our teams to perform upgrades and maintenance without any service disruption to users. Modularity of the architecture allows individual layers to be scaled up based on demand (e.g., we can scale web heads independently from the application or database layer). Qualtrics also builds ahead to provide excess capacity in each data centre to accommodate projected growth, spikes, demand, and data centre failovers.
Analytics
- Service usage metrics
- Yes
- Metrics types
-
Qualtrics dashboards help keep clients informed of the adoption and usage of the system. For a lot of organisations, these metrics, at least earlier on, are just as an important of a KPI as their traditional KPIs. As a result, there is a whole section of the platform dedicated to usage tracking.
Customer auditable events in account log files are:
- User login attempt
- User Password reset
- User password change
- User session creation
- User session termination
- User login anomaly
-Brand Create, delete and update (description, BaseURL, account status)
-User create, delete and update - Reporting types
-
- Real-time dashboards
- Reports on request
Resellers
- Supplier type
- Reseller providing extra features and support
- Organisation whose services are being resold
- Qualtrics
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Developed Vetting (DV)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Managed by a third party
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- Another external penetration testing organisation
- Protecting data at rest
-
- Physical access control, complying with SSAE-16 / ISAE 3402
- Encryption of all physical media
- Data sanitisation process
- Yes
- Data sanitisation type
-
- Explicit overwriting of storage before reallocation
- Deleted data can’t be directly accessed
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001
Data importing and exporting
- Data export approach
-
Customers can export survey data to the following formats:
CSV (Comma Separated Values)
TSV (Tab Separated Values)
Excel (Microsoft Excel)
XML (Extensible Markup Language)
SPSS (Statistical Analysis Package)
Google Drive (Direct export to Google Drive)
JSON (Javascript Object Notation) & Open Data Protocol (only available with the API Extension)
Additionally, Customers can export results-reports to a PDF, Word, Powerpoint, or CSV document. Dashboard data can be exported or emailed as a PDF, JPG, PNG, or CSV file. The Qualtrics API allows for automated import/export of data. - Data export formats
- CSV
- Data import formats
- CSV
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- TLS (version 1.2 or above)
- Other
- Other protection between networks
- All access to Qualtrics front-end Services is via Hypertext Transfer Protocol Secure (HTTPS) and enforces HTTP Strict Transport Security (HSTS). The platform supports Transport Layer Security (TLS) for all interaction with the platform. Access to the back-end services using the Qualtrics API supports TLS v1.2. Data is processed by application servers and sent to database servers for storage. Respondent Data includes survey questions, graphics, and other content created in the survey design.
- Data protection within supplier network
-
- TLS (version 1.2 or above)
- Other
- Other protection within supplier network
- The platform supports Transport Layer Security (TLS) for all interactions with the platform. Access to the back-end services using the Qualtrics API supports TLS v1.2. Data is processed by application servers and sent to database servers for storage. Respondent Data includes survey questions, graphics, and other content created in the survey design.
Availability and resilience
- Guaranteed availability
- Qualtrics will use commercially reasonable efforts to ensure that the Cloud Service will be available at all times, excluding when the Cloud Service is unavailable due to (a) required system maintenance as determined by Qualtrics (“Scheduled Maintenance”); and (b) causes outside of the reasonable control of Qualtrics that could not have been avoided by its exercise of due care, including any outages caused by: (i) the Internet in general; (ii) a Customer-caused event; or (iii) any Force Majeure Event (“Availability”).
- Approach to resilience
- Available on Request
- Outage reporting
- Qualtrics has a Status page (qualtrics.com/status/) that outlines current application status. Additionally, automatic alerts are in place to notify appropriate team members of any outages, etc. The Qualtrics support team is available 24/7 where incidents can be reported and escalated appropriately.
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- 2-factor authentication
- Username or password
- Access restrictions in management interfaces and support channels
- The system provides administration functionality where you can set up users and their access permissions. Clients will also have the ability to group users. The level of permissions that can be set is very granular, which allows you to implement strict workflows to allow complete control over the program design and execution process. Even collaborated surveys can be locked and password protected at the survey block level, meaning that someone who has access to modify a specific survey can be restricted in what parts of the survey that user can create or modify. Access to responses may also be restricted.
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- 2-factor authentication
- Username or password
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- Users have access to real-time audit information
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- At least 12 months
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- KPMG Cert GmBH
- ISO/IEC 27001 accreditation date
- 24/04/2021
- What the ISO/IEC 27001 doesn’t cover
-
Supporting the operational data centre environment, personnel, policies, operational procedures, information systems and networks used in the direct provision of the
Qualtrics Experience Management platform to Qualtrics customers. - ISO 28000:2007 certification
- No
- CSA STAR certification
- Yes
- CSA STAR accreditation date
- 12/03/2020
- CSA STAR certification level
- Level 1: CSA STAR Self-Assessment
- What the CSA STAR doesn’t cover
-
The certification accreditation for Qualtrics commenced on 12/03/2020 and was last updated on 06/03/2024.
N/A. At level one organisations can submit one or both of the security and privacy self-assessments. These are based off of the Cloud Controls Matrix and the CSA Code of Conduct for GDPR Compliance. - PCI certification
- No
- Cyber essentials
- No
- Cyber essentials plus
- No
- Other security certifications
- Yes
- Any other security certifications
-
- ISO 9001 - Quality Management System
- SOC Type 2
- HITRUST
- FedRAMP
- SSAE18/SOC2 Type 2
- IRAP - Protected Level Controls
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
-
- CSA CCM version 3.0
- ISO/IEC 27001
- Information security policies and processes
-
Information security is at the heart of your business. Qualtrics helps the world's biggest brands gather critical first-person data about customers, employees, brands, and products. Our information security practices combine best-in-class cloud technology with superior business processes. We obsess about enterprise security so you don't have to.
Protecting your data is our top priority. We've been awarded some of the strictest security and compliance credentials including GDPR, ISO 27001, HITRUST, and FedRAMP to give you peace of mind.
Qualtrics has implemented a company-wide information security management system to comply with the requirements associated with International Standards Organisation, the Federal Risk and Authorization Management Program (FedRAMP) (for the dedicated government environment), and other best practices. This program is monitored by the Security Governance Committee and audited by independent third-party assessors who attest to compliance to these standards.
The Information Security Management System (ISMS) defines the overall security function at Qualtrics. The ISMS includes policies, procedures, and standards that define the controls that help support the confidentiality, integrity, and availability of the XM Platform. Additionally, the ISMS outlines the roles and responsibilities of employees at Qualtrics to help protect the confidentiality, integrity, and availability of the platform.
Operational security
- Configuration and change management standard
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Configuration and change management approach
-
Qualtrics manages all hardware and software changes to the Qualtrics products. Due to our flexible development environment, changes in code and operations are nimble. However, each change must be tested before being deployed to ensure a continued stable and operational platform. Thus we have adopted the following base conditions:
-System uptime is most critical
-The system must scale as number of users and amount of data grow
-Features cannot break with a new code release.
We conduct studies and perform analyses before any change is made. The API, for instance, can be expanded quickly, but the functionality/performance must not decline. - Vulnerability management type
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Vulnerability management approach
-
Qualtrics has a robust vulnerability management program which includes using multiple methods to identify vulnerabilities in the environment. These methods include anti-malware software, internal and external penetration tests, vulnerability scans, and source code scans. If a vulnerability is detected, it is assigned a ticket and a rating: critical, high, medium, or low. High-rated vulnerabilities are evaluated for a) likelihood of exploitation, b) impact if exploited, and c) time to test and deploy.
Remediation plans are developed as necessary to address high risk vulnerabilities within 30 days and moderate risk vulnerabilities within 90 days—except in extenuating circumstances. - Protective monitoring type
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Protective monitoring approach
- An Incident involving a) Data loss or b) unauthorised access to Data is a “Security Breach” and declared a Code Red Incident. If the Security Breach was caused by Qualtrics’ errors or omissions, the Brand Administrator will be notified without undue delay, and no later than 2 business days, after it was first discovered. A Qualtrics case manager will conduct a formal investigation, and will deliver an official written report to the Brand Administrator within two weeks of the incident.
- Incident management type
- Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
- Incident management approach
-
Qualtrics has developed Incident Response policies and procedures to ensure the integrity, confidentiality, and availability of the Data.
An Incident includes:
-A malfunction, disruption, or unlawful use of the Service;
-The loss or theft of Data from the Service;
-Unauthorised access to Data, information storage, or a computer system; or
-Material delays or the inability to use the Service
-Any event that triggers privacy notification rules, even if such an event is not due to Qualtrics’ actions or inactions.
Qualtrics will notify clients by email, telephone, and/or by the web site login page with the details of the emergency.
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)
Public sector networks
- Connection to public sector networks
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
NTT DATA established the Climate Action Committee (now the Green Action Committee) to lead our climate change initiatives. In October 2021, we created the Green Innovation Office with a focus on advancing green innovation. We are an active steering member of the Green Software Foundation, which is committed to continuous emissions reduction within the ICT industry.
NTT DATA aims to achieve net zero for direct and indirect emissions from its own operations for data centres by 2030, the entire company including offices and other facilities by 2035, and its entire supply chain by 2040, with an immediate aim to reduce GHG across the organisation by 50,000 tons by 2025.
One of these initiatives is our “Work Where It Works” scheme, which gives employees more freedom over their work location. This has reduced the proportion of time our staff spend in office locations which, in turn, has reduced the carbon emissions associated with business travel and employee commuting which are our two biggest contributors to our carbon footprint.
A second initiative we offer is a subsidised electric car scheme and preferential deals on electric vehicles to encourage employees to switch from away from diesel and petrol vehicles to an all-electric vehicle.
We operate our “One Day, One Tree” campaign, where we provide a tree planting donation every quarter, with a seedling planted for each recorded day in UK consulting. Over the last 2 years, we have we donated 101,833 trees to 7 different international projects, ultimately absorbing approx. 2,036 tons of CO2 every year.
We analyse our carbon footprint annually and report our results publicly via the SECR (Streamlined Energy ad Carbon Reporting) and ESOS (Energy Savings Opportunity Scheme). We action any recommendations from the consultancies involved in the audits.Covid-19 recovery
Prior to the pandemic, NTT DATA were already ahead of their competitors in terms of flexible working. Post pandemic, this commitment has been recognised by NTT DATA, and remote/flexible working has become our new norm through our “Work Where It Works” initiative, which ultimately allows all employees more freedom over remote and hybrid working.
During the pandemic, strict Health and Safety protocols were implemented and maintained in all NTT DATA office locations, including regular sanitisation, social distancing measures and access to testing and vaccination information. Whilst these have eased post pandemic, there is still a firm focus on making every NTT DATA office a safe and welcoming place to work.
Our people are at the heart of everything we do, and it was vital, both during and post the pandemic, to find ways to keep employees engaged and connected, even if they are working remotely. NTT DATA host regular formal and informal get-togethers across business units, with each team having their own informal weekly team meeting, and monthly check-ins between employees and line managers to ensure wellbeing.
Furthermore, the pandemic had a significant impact on mental health, which NTT DATA have responded to by providing mental health support, such as mental health first aiders and counselling services to help employees cope with stress and anxiety.
NTT DATA continuously monitor the World Health Organisation for updates and new guidance, and subsequently follow a defined process for implementing and communicating any changes throughout the organisation. The leadership team also take the WHO status into consideration whilst reviewing and adapting business operations based on the current situation and forecasts, and in preparing comprehensive contingency plans that outline steps to be taken in case of future/similar disruptions.Tackling economic inequality
NTT DATA have implemented various practices to promote fair treatment and opportunities for all, helping to tackle economic inequality.
NTT DATA ensure all employees receive not only a competitive salary, but comprehensive benefits which support financial stability, including healthcare, pension schemes and paid leave.
We recognise and value talent and offer clear career development pathways which are accessible to all employees, regardless of their level within the company. To help maximise employee’s potential and improve employability, NTT DATA provide a range of training and further education, including enrolment in one of the top business schools and mandatory CPD hours. We also encourage employees to volunteer their time and skills with organisations tackling economic inequality issues. This fosters social responsibility and connects the company to the needs of the community.
Additionally, in line with our DEI policies, NTT DATA are committed to diversity and inclusion in hiring by reaching out to underrepresented groups, using unbiased recruitment tools (and delivering unconscious bias training), and creating an inclusive workplace culture that values different perspectives.
NTT DATA strive to maintain sustainable business practices and ultimately reduce environmental degradation, which disproportionately affects low-income populations.
This extends to ensuring we operate responsible supply chains, working only with ethical suppliers and partners who adhere to fair labour practices, pay fair wages and provide safe working conditionsEqual opportunity
NTT DATA is an equal opportunity employer and is fully committed to a policy of treating all employees and job applicants equally.
We have a zero-tolerance approach to any form of behaviour which leaves an employee feeling discriminated against, bullied or harassed and we will treat any complaints of this nature seriously. Discrimination, bullying or harassment based on protected characteristics is not tolerated at NTT DATA under any circumstances.
Gender equality and diversity are issues of major importance to NTT DATA, and we believe that DEI is indispensable for the development of our company, and it is clearly stated in the NTT DATA Group Code of Conduct.
Staff diversity is promoted at all levels of the organisation by several measure and activities, including a variety of networks within NTT DATA that were created to promote a safe space for minorities to connect with their peers across the organisation, including:
• Women in Business
• Fathers Network
• LGBTQ+
• Family & Co
• Dis-/Ability
The Women in Business initiative, as an example, if part of a wider strategy geared at NTT DATA increasing the percentage of positions held by women within the organisation. Currently, this sits at 31.05%, with a view to increase this to 33.33% by 2028. In addition, NTT DATA strive to have women make up no less than 20% of the Global Leadership team within the same period.
In order to achieve this, NTT DATA offer a number of programs to support young women in the workplace, along with flexible working and enhanced family-friendly policies, along with the unwavering commitment to recognise, nurture and promote talent, regardless of age, gender, race, disability and/or sexual orientation.Wellbeing
In 2024, NTT DATA was one of the only 17 organisations to be recognised as a Global Top Employer, for our outstanding People policies and practices worldwide, by Top Employers Institute.
Achieving this award is a testament to the priority NTT DATA put on the wellbeing of our people.
NTT DATA recognise the importance of work/life balance, and in giving employees flexibility, which is reflected in our “Work Where It Works” policy previously referenced, and our “Free Friday” initiative, which sees every employee in NTT DATA eligible for 12 days leave in addition to the standard annual leave entitlement, in the form of one Friday off every month.
NTT DATA also partner with Help@Hand to offer total health and wellbeing support for employees and eligible family members, via their app, which includes:
· 24/7 Helpline & Remote GP
· Mental Health Support
· Physiotherapy
· Financial & Legal Support
· 360 Wellbeing Scoring & Guidance
· 1-2-1 Lifestyle Coaching
· Special offers to support everyday finances
We also have a dedicated fit-solutions team, who are tasked with coordinating virtual and in-person events for all NTT DATA entities, with annual events such as:
· World Health Day
· NDBS Soccer Cup
· International Yoga Day
· World Mental Health Day
NTT DATA recognises that for some, wellbeing is found through charity work, and therefore we foster an environment that supports employees involved in charitable causes, with paid days off for charity work, options to be involved in global/company outreach programs, and of course, support of our own employees fundraising activities.
Pricing
- Price
- £6.04 a user a month
- Discount for educational organisations
- No
- Free trial available
- No