Salesforce Tableau
Self-service (SaaS Private Cloud) visual analytics platform fully-hosted in the cloud. Keywords: Pulse, Copilot, Hanrahan, Stolte, Chabot, .TDE, BI, Dashboard, VizQL, Hyper, In-Memory, Hybrid, Live, Bridge, Desktop, Prep, Creator, Explorer, Viewer, Viz, .TWB, .TWBX, Chart, Graph, Table, Database, File, Big, Data, Secure, Governed, Audited, Intuitive, Ease-of-use, People, Everyone, TCO. SFDCTBS2024GC14
Features
- Visual Analytics,Interactive,Creative,Analytical,Human,Perception,Insight,Science,Cognition
- Maintained, Administered,Upgrade-free,Dublin Data-Centre,Compliant,Trust, Available
- AI-powered discovery,SecureAD, SAML, SSL, Authentication, Authorisation,Row-Level-Security, 2FA,SSO
- Mobile, App, Device, Scale, Author,Collaborate,Share,Enterprise
- Data Access, Spatial, Relational, Real-Time, Drivers,Unstructured,Cloud-based, On-Premise
- Python, Open-Source, Advanced, Statistics,Forecast, Cluster, What-if, Parameterise
- Pivot,Union,Join,Transform,Flow,Repeatable,Clean, Integrate
- Automation through API, REST, Extract, Javascript, Extension, Write-Back, Bi-directional interface
- Small Multiples, Heatmap, Bullet, Time-Series,Sankey,Bubble
- Seventy Connectors. Applications (Anaplan), Files (JSON),Relational, 'Big'
Benefits
- Governance. Security, Consistent, Access, Permissions, Certified, Source, Protected, Audited, Alert
- Creative. Flexible, Intuitive, Public, Community, Storytelling, Guided
- Pedigree. Stanford, Stephen, Few, Disruptive, Gartner, Leader, Community, User-Group, Tufte
- Time-Saving. Fail-Fast, Agile, Iterate, Collaborate, Inclusive, Quick-Start, Accelerate
- Self-Serve. Empower Workforce, Browser-based, Question, Immediate Answers, Web-Authoring, Subscribe
- Lower Cost. TCO, Efficient, Revenue-generating, Cost-reducing, Value, Subscription, Operational
- Evolution. Data-driven, Not Opinion-based, Strategic, Decentralise, Adoption, Transformational
- Integrated. Visual Analytics, ELT, Data Management, Catalogue
Pricing
£9.58 a unit
- Education pricing available
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
4 8 2 6 1 4 4 0 5 7 3 1 5 2 4
Contact
Softcat Limited
Charles Harrison
Telephone: 01628 403403
Email: psitq@softcat.com
Service scope
- Software add-on or extension
- No
- Cloud deployment model
-
- Public cloud
- Private cloud
- Service constraints
- No specific constraints
- System requirements
-
- Minimum Browser versions: Chrome, IE(v11), Firefox, Safari (iOS8.x)
- Mobile Apps (Available from App Store or Play Store)
- Up to 100GB storage available (per Site)
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- Typical response time is 4 hours or less for standard support (additional support packages are available, which reduce response times and increase support availability periods). No cover available over the weekend for standard service
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.1 AA or EN 301 549
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), 7 days a week
- Web chat support
- Web chat
- Web chat support availability
- 9 to 5 (UK time), 7 days a week
- Web chat support accessibility standard
- None or don’t know
- How the web chat support is accessible
-
Live messaging
Screen capture
Screen video
Subject to permissions, remote application control
Chat history across multiple conversations - Web chat accessibility testing
- Not aware of any specific testing that has been undertaken by Tableau. The web chat itself though is generic, not exclusive to Tableau so likely to have been subjected to such testing elsewhere
- Onsite support
- Yes, at extra cost
- Support levels
- Standard support is provided to every Tableau Online customer at no extra charge as part of their subscription agreement.
- Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
-
Tableau provides a great deal of training material and supporting collateral that is publicly available on the web. In addition we have a range of training courses that cover use and administration of the software. For example: Free training videos, free online training presentations, e-learning, classroom-based courses, on-site courses and virtual courses.
Another relevant aspect here is the huge community of partners, users, fans and collaborators across the world who regularly support Q&A forums and provide blog articles and other information that contributes to a collective body of knowledge that our customers find very valuable as they are developing their own skills.
In addition to this, Tableau can be engaged to provide Professional Services for a fee, with a bespoke engagement defined and conducted in accord with the customer's requirements. - Service documentation
- Yes
- Documentation formats
-
- HTML
- End-of-contract data extraction
-
Users have full control over the content (including published workbooks and data extracts) that they choose to put into the Tableau Online Platform and they can regenerate, drop, download or retract these at any time.
Users can request a full copy of their data at the end of their contract which they could then restore to a local server if required.
As stated in our Terms of Service, once a Site is terminated all data, content and related metadata will be removed and is not recoverable. - End-of-contract process
- No additional cost. At the end of a subscription period, if a customer does not renew, then they will find their license is no longer active and all users in the organisation will be unable to publish, access or interact with any content in their Tableau Online Site.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Internet Explorer 11
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Application to install
- Yes
- Compatible operating systems
-
- Android
- IOS
- Linux or Unix
- MacOS
- Windows
- Windows Phone
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
-
Published Tableau content can be accessed and edited via a web browser running on any PC or device. The user experience and interaction is defined by the Creator who published.
In addition Tableau provides a free mobile App so that when users access published content from iOS or Android devices the interaction and display is adapted to suit the touch-screen experience. - Service interface
- Yes
- User support accessibility
- None or don’t know
- Description of service interface
- Customer administrators are able to manage their activation and deactivation of licenses, download all versions of Tableau software and view the status of all of their Tableau software assets. This administrator service is managed through a password protected Tableau client portal
- Accessibility standards
- None or don’t know
- Description of accessibility
-
We create Salesforce Accessibility Conformance Report (ACR) using the international edition of the Voluntary Product Accessibility Template (VPAT), which includes the standards to which we align our products. The accessibility features available within Salesforce applications depend on the application UI configuration and Lightning component usage. For this reason, adherence to accessibility requirements should be evaluated throughout the design and final testing of the Salesforce application and not merely on a specific ACR.
We update the website as additional ACRs become available https://help.salesforce.com/articleView?id=accessibility_contact.htm&type=5.
For more information on how to use Salesforce to meet those requirements, please visit https://help.salesforce.com/articleView?id=accessibility_overview.htm&type=5 and https://www.lightningdesignsystem.com/accessibility/overview/. - Accessibility testing
- No specific testing of assistive technology for the portal
- API
- Yes
- What users can and can't do using the API
-
Several APIs available to automate or enhance aspects of the standard platform: REST, Extract, Document, Javascript, Web Data Connector and Extensions (in beta May18).
A small number of specific functions are not relevant (or available) when using the Tableau Online Platform as they relate to the Tableau Server (hybrid-cloud) Platform instead. These differences are clearly identified in the online help pages. For example, search online for 'Tableau onlinehelp API Reference'.
The REST API can be used for managing users, groups and sites, updating workbooks or datasources and Integrating Tableau content with a custom app or portal.
Extract API can be used to create data extracts that improve performance and provide offline access to data.
Document API is used to create and deploy templates or migrate workbooks from test to production data sources.
Javascript API for embedding Tableau into custom web applications. Allows a bi-directional communication between Tableau and the host application.
Web Data Connector: connect to any data via HTTP/HTTPS, providing an HTML interface to end-user, storing into data extracts. Also allows automatic refreshes and authentication.
Extensions API can open up a range of capabilities from 'write-back' to custom interface options and bi-directional communication between Tableau and guest application. - API documentation
- Yes
- API documentation formats
-
- HTML
- Other
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
- The purpose of the Tableau Platform is to allow customers to create their own analytics, reports and dashboards, each of which is customised to meet specific needs. Automation can be applied to the platform through the use of APIs. In addition the interface can be adapted and tailored to reflect customer branding. At an individual level the users can personalise their experience through the use of favourites, selected 'home pages', custom filter settings on views, etc.
Scaling
- Independence of resources
- The Tableau Platform can be installed on premises, or uses technical infrastructure hosted and maintained in our EU (Dublin) data centre, and we constantly monitor activity to ensure that peak periods are supported by appropriate levels of processing power so that slow-down does not occur as a result of increased activity. We publish a daily (historic) report of service availability and planned maintenance at www.trust.tableau.com
Analytics
- Service usage metrics
- Yes
- Metrics types
-
A Site Administrator has access to the following service status reports (displayed using Tableau interactive analytics and charts):
Traffic to views/data sources/'Bridge-connected' data sources (i.e. where data originates within your network), Actions by users, Scheduled task activity, Stats for space usage. - Reporting types
- Real-time dashboards
Resellers
- Supplier type
- Reseller (no extras)
- Organisation whose services are being resold
- Salesforce
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Developed Vetting (DV)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 3.0)
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
- Protecting data at rest
- Other
- Other data at rest protection approach
-
By default, all data is encrypted at rest with AES 256 using the AWS encryption.
Customers can limit which users see what data by setting user filters on data sources in both Tableau Server and Tableau Online. This allows better control of what data users see in a published view based on their Tableau Server login account. - Data sanitisation process
- Yes
- Data sanitisation type
-
- Explicit overwriting of storage before reallocation
- Deleted data can’t be directly accessed
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001
Data importing and exporting
- Data export approach
- The purpose of the Tableau Online Platform is to allow customers to create their own analytics, reports and dashboards, each of which is customised to meet specific needs. Automation can be applied to the platform through the use of APIs. In addition the interface can be adapted and tailored to reflect customer branding. At an individual level the users can personalise their experience through the use of favourites, selected 'home pages', custom filter settings on views, etc.
- Data export formats
-
- CSV
- Other
- Other data export formats
-
- .tde
- .hyper
- Data import formats
-
- CSV
- Other
- Other data import formats
-
- Tableau has over 70 native connectors...
- ...including files, databases, web data connectors and applications.
- Search for 'Tableau Connect to your data' for current list.
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- TLS (version 1.2 or above)
- Other
- Other protection between networks
- By default, customers connect to the service over the public Internet with all transmissions between the user and the Salesforce Services secured using TLS 1.2 or higher and encrypted using 256 or 128-bit encryption. The Services use International/Global Step Up SSL certificates with 2048-bit Public Keys. Web Service callouts can be secured using TLS, as well as mutual TLS.
- Data protection within supplier network
-
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Other
- Other protection within supplier network
- Customer data is protected within the Tableau Cloud through a mature, standards-based defence-in-depth security architecture. Logical and physical access is strictly controlled,logged and monitored, and the access controls used are regularly audited for compliance with our certifications by third parties. Network security controls such as firewalls, intrusion detection, anti-malware, anti-ddos, file integrity monitoring are augmented with extensive monitoring to provide a robust prevention, detection and response model. Internal and external, as well as third-party vulnerability scanning and application penetration testing are also in place.
Availability and resilience
- Guaranteed availability
-
Tableau does not guarantee a particular level of availability for the Tableau Platform. We publish stats showing current (and last 30 days) levels of performance and maintenance breaks on the internet at trust.tableau.com.
No refunds are provided as a result of degraded service.
Refund information can be obtained from the Salesforce Main Services Agreement available at https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Salesforce_MSA.pdf - Approach to resilience
-
Tableau Online services are hosted in enterprise-class, independently audited data centers that have redundancy built in to all critical services. The data centers are equipped with fire
suppression and other monitoring systems designed to detect environmental issues and respond to them before they cause an outage. Additionally, the hosting providers have contracts with
suppliers to ensure they can maintain operations in the event of a sustained power outage. Upon execution of a non-disclosure agreement, Tableau can share the audit reports for its
data centre providers upon request.
For a summary please access the Tableau White Paper: 'Tableau Online Security in the Cloud' - https://www.tableau.com/learn/whitepapers/tableau-online-security-cloud - Outage reporting
-
Tableau Cloud undergoes periodic maintenance to sustain the infrastructure supporting Tableau Cloud services and deliver enhanced features and functionality. We recommend reviewing the reserved maintenance schedule to plan for scheduled downtime and to avoid service interruptions.
Tableau communicates system maintenance through the Tableau Trust page and notification emails to site administrators.
Tableau Trust is where all Tableau Cloud status updates are posted.
Status updates include system maintenance, as well as reported incidents that may affect the use of Tableau Cloud. https://trust.tableau.com
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- 2-factor authentication
- Identity federation with existing provider (for example Google Apps)
- Username or password
- Other
- Other user authentication
- Salesforce has a very comprehensive set of authentication mechanisms that customers can chose from. These include the inherent username and password option, Single Sign-on, Social Sign-on through another application, such as google, integration with existing identity management systems a customer may have, 2 Factor Authentication, and the application can also act as a Service Provider or Identity Provider for SSO integration using SAML.
- Access restrictions in management interfaces and support channels
- Management access for service support and delivery is done through multiple layers of controls including, but not limited to, multiple 2-factor authentication, bastion host and proxy control and segregation of duties. These controls are in scope for SSAE-18 auditing and evidences through the SOC 2/ISAE3402 report. Access to the management interface for the customer to configure their salesforce environment, is configured by the customer themselves. The options are outlined in the above response. Robust application design and testing ensures that users without administrative access rights cannot access more sensitive areas of the application.
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- 2-factor authentication
- Username or password
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- Between 1 month and 6 months
- Access to supplier activity audit information
- Users have access to real-time audit information
- How long supplier audit data is stored for
- Between 1 month and 6 months
- How long system logs are stored for
- Between 6 months and 12 months
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- EY CertifyPoint
- ISO/IEC 27001 accreditation date
- January 25, 2024
- What the ISO/IEC 27001 doesn’t cover
- Listing of current exclusions within the ISO27001 Statement of Applicability available to view at https://compliance.salesforce.com/en/documents/a006e000010P47JAAS
- ISO 28000:2007 certification
- No
- CSA STAR certification
- Yes
- CSA STAR accreditation date
- 10/01/2022
- CSA STAR certification level
- Level 1: CSA STAR Self-Assessment
- What the CSA STAR doesn’t cover
- The available CSA STAR self-assessment covers all points in the latest CCM; version 4.02
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- Yes
- Any other security certifications
-
- ISO 27001, 27017, 27018
- SSAE 18/ISAE 3402
- SOC-1
- SOC-2
- Cyber Essentials PLUS
- CSA CAIQ Level 1
- Asip Sante HDS
- NEN-7510
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
-
- CSA CCM version 3.0
- ISO/IEC 27001
- Other
- Other security governance standards
-
ISO 27017
ISO 27018
SOC 1,2, 3
NEN7510
HDS Certificate
TISAX
APEC Certification for Processors and Controllers
UK Binding Corporate Rules - Information security policies and processes
- Salesforce's Information Security Management System (ISMS) and information security policies are based on the ISO 27002 framework of best practices and are ISO 27001 certified. As required by this certification, the ISMS is endorsed by Senior Management. The EVP of Security has responsibility for the information security policies and ISMS. The Salesforce Security Steering Committee approves/authorizes all changes to the policies, the Statement of Applicability (SoA), the information security manual, and any separate policy statements. During the ISO 27001 audit process (as well as other audits such as SOX and SSAE 16 SOC 1), Senior Management for various departments are involved in verifying that policies and procedures are in place and adhered to. Policies are reviewed/approved at least annually.
Operational security
- Configuration and change management standard
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Configuration and change management approach
-
The change management process proper segregation of duties for the approval and implementation of changes. Salesforce's Change Management Standard outlines the activities to be performed during the change process and the supporting tasks.
Tableau Cloud policies and procedures outline the activities to be performed during each phase of the change process and the supporting tasks that need to be completed for each activity. Changes are implemented during scheduled maintenance windows unless required to address an urgent service issue. Requests for changes, as well as system and hardware maintenance, are standardised, categorised, and prioritised according to documented policies and procedures. - Vulnerability management type
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Vulnerability management approach
- Vulnerability and Patch Management Program is implemented where Salesforce performs vulnerability scans on external and internal facing systems using internal scanning resources and with third-party vendors to conduct external vulnerability assessments. Internal scans are completed daily, external service providers are used to perform penetration tests prior each major release (three times annually). Commercial and proprietary vulnerability scanning tools are configured to identify vulnerabilities and measure vulnerability impact in CVSS scores. Patching is applied following a risk-based approach and SLAs while using the change management process to ensure mitigations are deployed. detail on responsible disclosure https://trust.salesforce.com/en/security/responsible-disclosure-policy/
- Protective monitoring type
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Protective monitoring approach
- Salesforce Threat Intelligence and Detection team monitors the Salesforce services 24x7 for threats and unauthorized intrusions via the latest cutting edge technology and industry analysis, and in collaboration with the Security Incident Response teams. Extensive logging and monitoring is conducted across all Salesforce Services and environments (at application, network and database layers). All suspicious activities are flagged and reported to Salesforce CSIRT for investigation, management, communication, and resolution of security events and incidents in line with the NIST Incident Response model.
- Incident management type
- Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
- Incident management approach
-
Salesforce has a formal Incident Management Process that guides the Salesforce Computer Security Incident Response team in investigation, management, communication, and resolution activities.
Salesforce will promptly notify the customer in the event of any security breach of the Service resulting in an actual or reasonably suspected unauthorized disclosure of Customer Data. Notification may include phone contact by Salesforce support, email to customer's administrator and Security Contact and public posting on trust.salesforce.com.
Salesforce.com is a member of the prestigious Forum of Incident Response and Security Teams (FIRST) and complies with the FIRST framework and best practices for incident response.
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)
Public sector networks
- Connection to public sector networks
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
Softcat are dedicated to reducing our environmental impact and actively promoting sustainability. Our commitment to sustainability is a core aspect of our business strategy, driving us to innovate and lead in the creation of a more sustainable future for our company and the communities we serve. This commitment is embedded in our policies, operating procedures, and training programs.
We are proud to be the first FTSE 250 company to be awarded 5-star status in relation to the United Nations Sustainable Development Goals.
We aim to achieve a Carbon Net-Zero Value Circle by 2040 by prioritising renewable energy, reducing natural resource use, minimising waste, and safeguarding biodiversity in compliance with environmental legislation.
At Softcat, we have taken significant steps towards securing renewable energy across our organisation, reducing our scope 1 & 2 emissions. We had the target of using 100% Renewable Energy across all our locations by 2024. We successfully delivered against this target ~2 years early.
In May 2023 we took delivery of 15 electric vehicles, replacing all existing fossil-fuelled company cars used by employees for business means. The implementation of the EV pool fleet will see a saving of over 80 tons of CO2e per year. A huge impact on our Net Zero targets.Tackling economic inequality
As a value-add reseller, Softcat outsources the products, services, and solutions through our extensive network of partners, to best suit the needs of our broad client base. We always consider and promote SMEs and local providers where appropriate, particularly for the products and services we offer via the G Cloud framework.
We remain dedicated to improving employability and educational awareness across schools, colleges, and universities to help break down the barriers to joining technology organisations.
We work collaboratively with many schools that are close in proximity to our offices, to ensure we are actively supporting the community as well as schools from lower socio-economic backgrounds.
We visit the schools to talk about the IT sector and the roles in our organisation, as well as promoting work-experience opportunities during the summer. In particular, we actively encourage students from diverse backgrounds to engage in work experience to appreciate the roles available in our sector.
For ambitious school and college leavers, a Softcat Apprenticeship is a great first step into the world of work, with 94% of our apprentices offered a permanent position at Softcat post apprenticeships, which goes to show the amazing opportunity available with us.
We were ranked 1st in IT & Consultancy, and 10th overall in by RateMyApprenticeship.com - Best 100 Apprenticeship Employers 2023-2024 list.
Softcat now also offer 12 month paid internships to University students looking to complete a year in industry as part of their undergraduate studies.Equal opportunity
Our approach to diversity and inclusion is introduced first during our induction training, as part of our Softcat values, outlining responsibility to uphold our principles. This message is reinforced by our process and policies, networks, Allyship Training and Inclusion Awareness campaigns.
Softcat supports diversity and inclusion through various networks including:
- Supporting Women in Business (SWIB)
- The Ethnic and Cultural Network
- The Pride Network
- The Family Network
- The Empowering Disability and Neurodiversity Network (EDN)
- The Faith at Work Network
- Armed Forces & Veterans Network
These networks aim to create a supportive and inclusive work environment for all employees, regardless of gender, ethnicity, sexual orientation, disability, or family commitments.
Our allyship programme, Stronger Together, is a mixture of event and workshop-based training available to all staff. Programme topics include, bias, power, privilege, and being a greater ally.
Inclusion Awareness campaigns include race, disability, sexual orientation, gender, faith, and caring responsibilities. These sessions highlight and celebrate minority groups, through panel sessions, Q&A sessions and training, providing an opportunity to discuss and understand ways to be more inclusive.
Our efforts to improve diversity and inclusion have been incredibly successful. Since 2020, the number of female employees below management level has increased to 35%, and the number of ethnic minority employees rose to 17%.Wellbeing
At Softcat, all employees are provided with access to our multidimensional wellbeing programme which includes flexible work arrangements, free nutritious breakfast, mental health support, employee benefits scheme, health and wellbeing week activities, and online workshops.
Giving back to the community is an innate part of who we are as a company. All Softcat employees are therefore given two volunteer days per year to support a charitable or community cause.
Each of our 10 regional offices also support local charities through fundraising, donations and events. For example, our Manchester office has raised over £30,000 for the WeLoveMCR charity. This funding has supported young, disadvantaged Manchester citizens in gaining qualifications to broaden their work opportunities and supporting local groups in delivering indispensable services that enable community cohesion.
Pricing
- Price
- £9.58 a unit
- Discount for educational organisations
- Yes
- Free trial available
- Yes
- Description of free trial
- A fully-operational instance of the Tableau Online Platform can be made available on a trial basis for a short duration.
- Link to free trial
- Visit www.tableau.com