Qlik Data Analytics

Service scope

Software add-on or extension: No
Cloud deployment model: Public cloud

Private cloud

Hybrid cloud
Service constraints: None
System requirements: Supported browser - Edge/Chrome/Firefox/Safari

User support

Email or online ticketing support: Email or online ticketing
Support response times: For online support, customers have access to an online support portal and online chat. The portal is often the most efficient way to get answers to common questions as it provides a comprehensive knowledge base containing answers to many common product questions and a library of how-to videos that cover common product and support topics. The site also allows you to submit and track support requests, and access your license information, and is available 24x7x365.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
Phone support: Yes
Phone support availability: 24 hours, 7 days a week
Web chat support: Web chat
Web chat support availability: 24 hours, 7 days a week
Web chat support accessibility standard: None or don’t know
How the web chat support is accessible: Our Web Chat is available through our community website, this includes chat, access to a knowledge base and an online support portal which is available for licenced users.

Web chat is available through a browser where a user can start a conversation with our trained customer experience experts for Account and Login Issues.
Web chat accessibility testing: Qlik aims to meet accessibility regulations by applying
the standards of WCAG 2.0 Level AA and
Section 508 of the Rehabilitation Act.
Onsite support: Yes, at extra cost
Support levels: Enterprise Support is included as standard in the License Subscription Fee. This provides support for error determination, verification and resolution
(or instruction as to work-around, as applicable). This is available 24/7/365 for Severity 1 Errors and during Qlik’s Standard Business Hours for Severity 2 and Severity 3 Errors.

Qlik also offers a Designated Support Engineer as an add-on to either Standard or Premium Support, providing direct access to a designated technical support expert. This engineer will become knowledgeable about your specific environment and will be able to provide more tailored and faster responses to any issues you face. This engineer will also have fast-track access to Qlik R&D to prioritize any critical software bugs. In addition to reactive support to any issues that arise, you will enjoy regular status calls and quarterly on-site visits and implementation reviews to proactively identify and address potential issues. This offering is ideal for large-scale enterprise deployments, or companies looking to develop a strong center of excellence around the product.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: When a new tenant is created there is a built in training environment to get people started.
Qlik also offers on site and virtual training as an addition
Service documentation: Yes
Documentation formats: HTML
End-of-contract data extraction: Data can be extracted by export into portable files such as .txt or .csv. however, Qlik really just displays analysis of data already stored in source systems so data should not need to be exported from Qlik in most cases.
End-of-contract process: The contract includes use of a private SaaS tenant for the duration of the contract

Using the service

Web browser interface: Yes
Supported browsers: Microsoft Edge

Firefox

Chrome

Safari
Application to install: No
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: The mobile experience can be accessed via a specific mobile app which has an optimised mobile UI or through a standard browser for the default experience, which is fully responsive to mobile devices.
Service interface: No
User support accessibility: None or don’t know
API: Yes
What users can and can't do using the API: Qlik Sense is primarily a SaaS service and almost all elements of management and automation can be achieved through the provided APIs. Full API documentation is available at https://qlik.dev/
API documentation: Yes
API documentation formats: HTML

Other
API sandbox or test environment: No
Customisation available: Yes
Description of customisation: Dashboards can be themed
Elements can be embedded into external portals to effectively fully re-skin an analytics app
Custom extensions can be created/used to allow for the use of fully customised chart objects
This is possible via UI and API depending on customisation and ability can be controlled with permissions

Scaling

Independence of resources: Qlik Sense SaaS is designed upon a microservices architecture deployed via a Kubernetes orchestration layer. This architecture allows for the automatic elastic scaling of the back end infrastructure to meet demand.

Analytics

Service usage metrics: Yes
Metrics types: Audit tools can demonstrate who has accessed the service, which part of the service, when and for how long
Reporting types: API access

Real-time dashboards

Resellers

Supplier type: Not a reseller

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: European Economic Area (EEA)

Other locations
User control over data storage and processing locations: Yes
Datacentre security standards: Supplier-defined controls
Penetration testing frequency: At least once a year
Penetration testing approach: Another external penetration testing organisation
Protecting data at rest: Encryption of all physical media
Data sanitisation process: No
Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach: Data can be easily exported to Excel (if permission is granted) via the Qlik Sense UI.
Data can also be exported via a pdf (if permission is granted)
Data can also be exported to flat files via the load script (if permission is granted)
Data export formats: CSV

Other
Other data export formats: Xlsx

Pdf

Txt

Qvd
Data import formats: CSV

Other
Other data import formats: Xlsx

Txt

Json

Xml

Qvd

Data-in-transit protection

Data protection between buyer and supplier networks: TLS (version 1.2 or above)
Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability: 99.9% uptime per quarter
https://www.qlik.com/us/-/media/files/legal/license-agreements/additional-terms/service-level-agreement.pdf
Approach to resilience: Qlik uses a microservices architecture deployed in AWS which leverages a Kubernetes orchestration layer to scale on demand and self heal to maintain service.
Outage reporting: Via a public dashboard

https://status.qlikcloud.com/?_ga=2.186285225.1255127213.1652091398-1091779616.1629839046

Identity and authentication

User authentication needed: Yes
User authentication: 2-factor authentication

Identity federation with existing provider (for example Google Apps)

Username or password
Access restrictions in management interfaces and support channels: Qlik employs a role based access control system. Only permitted individuals are able to access the management console. This is controlled by the tenant admin. Only registered operators are able to raise support tickets
Access restriction testing frequency: At least once a year
Management access authentication: 2-factor authentication

Identity federation with existing provider (for example Google Apps)

Username or password

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: Between 1 month and 6 months
Access to supplier activity audit information: No audit information available
How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: The Standards Institute of Israel
ISO/IEC 27001 accreditation date: 20/10/2020
What the ISO/IEC 27001 doesn’t cover: The service is completely covered by the certification
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: No
Cyber essentials plus: No
Other security certifications: Yes
Any other security certifications: AICPA SSAE18 SOC2 Type II

AICPA SSAE18 SOC 3

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001
Information security policies and processes: (a) Qlik has an Information Security Policy/Program in place, based on ISO 27001 and the concept of least privilege, that is reviewed and updated by Qlik Security when changes are required and communicated to all employees via our corporate intranet site. The policy/program applies to Qlik's internal environment and its contents are for internal use only, where the policy was last updated on September 7, 2021.

(b) The Qlik Security team is led by the CISO, Louis Yeck, who reports directly to the CIO and is responsible for Qlik's ISMS which is ISO 27001 certified. This team is staffed appropriately to support the size of the business and hold relevant security competencies and/or certifications in line with their job responsibilities (e.g. CISA, CISSP). This team may be contacted directly at security@qlik.com.

(c) The Qlik Security team conducts internal audits of key aspects of the security program to ensure compliance.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: Qlik utilizes an elastic microservices architecture that utilizes Docker as our container platform, Kubernetes for orchestration and AWS as our cloud provider. This cloud native architecture allows for a highly available, scalable and secure multi-tenant SaaS offering, where assets are automatically spun up and spun down on demand. Services are continuously deployed in which the latest version of the underlying operating system is updated as part of that process.
Vulnerability management type: Supplier-defined controls
Vulnerability management approach: SDLC is key to Qlik's Security Model and follows an adaptation of the Scaled Agile Framework (SAFe). Qlik takes guidance from OWASP top 10 and SANS top 20. Internal vulnerability scans conducted weekly and external penetration tests conducted annually. Qlik's security program includes automated (DAST and SAST scans) and manual (security code reviews) elements. Threat modelling is performed against new features and penetration tests executed by a dedicated team. Vulnerability Management is integral to Qlik's Security Model. Qlik's methodology and approach for vulnerabilities aligns with industry best practices. Vulnerabilities are patched based on CVSS v3.0 severity.
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: Qlik’s layered approach to security includes, but is not limited to, the following:
• SOC (24x7 security monitoring)
• Web Application Firewall (SaaS environments/tenants)
• Network IDS (SaaS environments/network)
• Threat/Vulnerability Monitoring (SaaS host/containers)
• System changes & service/infrastructure availability monitoring (ongoing)
• Qlik has deployed a security tool throughout the production environment that is used to monitor the underlying operating system supplied by AWS (hosting and backup service provider) for compliance with Qlik-defined security hardening and configuration baselines.

Regarding security events, Qlik has a SOC with 24x7 security monitoring in place.
Incident management type: Supplier-defined controls
Incident management approach: Qlik has an Incident Response policy/plan in place, including but not limited to a SOC/MSSP, with defined roles, responsibilities and escalation points. This applies to Qlik’s internal environment only and are for internal use only. The Policy was reviewed on May 24, 2021 and is communicated to all employees. The IR plan is tested annually.

Qlik will notify customers without undue delay (within 72 hours) of any incidents affecting customer data. Qlik abides by all reporting requirements (if any) in our agreement(s) with customers. Qlik also complies with all applicable reporting/notification laws.

Qlik Security may be contacted directly at: security@qlik.com.

Secure development

Approach to secure software development best practice: Supplier-defined process

Public sector networks

Connection to public sector networks: No

Social Value

Fighting climate change
Covid-19 recovery
Tackling economic inequality
Equal opportunity
Wellbeing

Fighting climate change

As a technology company, we have specific responsibilities to our stakeholders to engage in good business practices. As people, we have personal responsibilities to others and our planet. Because we want all of our actions and interactions to impact society in a positive way, we adopted and continually measure our progress against the triple bottom line model. It’s the best way to ensure we’re doing all we can to drive tangible economic, social, and environmental value across our global community.

Covid-19 recovery

As a technology company, we have specific responsibilities to our stakeholders to engage in good business practices. As people, we have personal responsibilities to others and our planet. Because we want all of our actions and interactions to impact society in a positive way, we adopted and continually measure our progress against the triple bottom line model. It’s the best way to ensure we’re doing all we can to drive tangible economic, social, and environmental value across our global community.

Tackling economic inequality

As a technology company, we have specific responsibilities to our stakeholders to engage in good business practices. As people, we have personal responsibilities to others and our planet. Because we want all of our actions and interactions to impact society in a positive way, we adopted and continually measure our progress against the triple bottom line model. It’s the best way to ensure we’re doing all we can to drive tangible economic, social, and environmental value across our global community.

Equal opportunity

As a technology company, we have specific responsibilities to our stakeholders to engage in good business practices. As people, we have personal responsibilities to others and our planet. Because we want all of our actions and interactions to impact society in a positive way, we adopted and continually measure our progress against the triple bottom line model. It’s the best way to ensure we’re doing all we can to drive tangible economic, social, and environmental value across our global community.

Wellbeing

As a technology company, we have specific responsibilities to our stakeholders to engage in good business practices. As people, we have personal responsibilities to others and our planet. Because we want all of our actions and interactions to impact society in a positive way, we adopted and continually measure our progress against the triple bottom line model. It’s the best way to ensure we’re doing all we can to drive tangible economic, social, and environmental value across our global community.

Pricing

Price: £50 to £750 a user a year
Discount for educational organisations: Yes
Free trial available: Yes
Description of free trial: Access to Qlik Sense SaaS and all it's functionality for an initial 30 day period (can be extended if required).
Link to free trial: https://www.qlik.com/us/trial/qlik-sense-business

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Pricing

Service documents

Cookies on Digital Marketplace

Qlik Data Analytics

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents