Skip to main content

Help us improve the Digital Marketplace - send your feedback

Softcat Limited

Salesforce Tableau

Self-service (SaaS Private Cloud) visual analytics platform fully-hosted in the cloud. Keywords: Pulse, Copilot, Hanrahan, Stolte, Chabot, .TDE, BI, Dashboard, VizQL, Hyper, In-Memory, Hybrid, Live, Bridge, Desktop, Prep, Creator, Explorer, Viewer, Viz, .TWB, .TWBX, Chart, Graph, Table, Database, File, Big, Data, Secure, Governed, Audited, Intuitive, Ease-of-use, People, Everyone, TCO. SFDCTBS2024GC14

Features

  • Visual Analytics,Interactive,Creative,Analytical,Human,Perception,Insight,Science,Cognition
  • Maintained, Administered,Upgrade-free,Dublin Data-Centre,Compliant,Trust, Available
  • AI-powered discovery,SecureAD, SAML, SSL, Authentication, Authorisation,Row-Level-Security, 2FA,SSO
  • Mobile, App, Device, Scale, Author,Collaborate,Share,Enterprise
  • Data Access, Spatial, Relational, Real-Time, Drivers,Unstructured,Cloud-based, On-Premise
  • Python, Open-Source, Advanced, Statistics,Forecast, Cluster, What-if, Parameterise
  • Pivot,Union,Join,Transform,Flow,Repeatable,Clean, Integrate
  • Automation through API, REST, Extract, Javascript, Extension, Write-Back, Bi-directional interface
  • Small Multiples, Heatmap, Bullet, Time-Series,Sankey,Bubble
  • Seventy Connectors. Applications (Anaplan), Files (JSON),Relational, 'Big'

Benefits

  • Governance. Security, Consistent, Access, Permissions, Certified, Source, Protected, Audited, Alert
  • Creative. Flexible, Intuitive, Public, Community, Storytelling, Guided
  • Pedigree. Stanford, Stephen, Few, Disruptive, Gartner, Leader, Community, User-Group, Tufte
  • Time-Saving. Fail-Fast, Agile, Iterate, Collaborate, Inclusive, Quick-Start, Accelerate
  • Self-Serve. Empower Workforce, Browser-based, Question, Immediate Answers, Web-Authoring, Subscribe
  • Lower Cost. TCO, Efficient, Revenue-generating, Cost-reducing, Value, Subscription, Operational
  • Evolution. Data-driven, Not Opinion-based, Strategic, Decentralise, Adoption, Transformational
  • Integrated. Visual Analytics, ELT, Data Management, Catalogue

Pricing

£9.58 a unit

  • Education pricing available
  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at psitq@softcat.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

4 8 2 6 1 4 4 0 5 7 3 1 5 2 4

Contact

Softcat Limited Charles Harrison
Telephone: 01628 403403
Email: psitq@softcat.com

Service scope

Software add-on or extension
No
Cloud deployment model
  • Public cloud
  • Private cloud
Service constraints
No specific constraints
System requirements
  • Minimum Browser versions: Chrome, IE(v11), Firefox, Safari (iOS8.x)
  • Mobile Apps (Available from App Store or Play Store)
  • Up to 100GB storage available (per Site)

User support

Email or online ticketing support
Email or online ticketing
Support response times
Typical response time is 4 hours or less for standard support (additional support packages are available, which reduce response times and increase support availability periods). No cover available over the weekend for standard service
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 AA or EN 301 549
Phone support
Yes
Phone support availability
9 to 5 (UK time), 7 days a week
Web chat support
Web chat
Web chat support availability
9 to 5 (UK time), 7 days a week
Web chat support accessibility standard
None or don’t know
How the web chat support is accessible
Live messaging
Screen capture
Screen video
Subject to permissions, remote application control
Chat history across multiple conversations
Web chat accessibility testing
Not aware of any specific testing that has been undertaken by Tableau. The web chat itself though is generic, not exclusive to Tableau so likely to have been subjected to such testing elsewhere
Onsite support
Yes, at extra cost
Support levels
Standard support is provided to every Tableau Online customer at no extra charge as part of their subscription agreement.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Tableau provides a great deal of training material and supporting collateral that is publicly available on the web. In addition we have a range of training courses that cover use and administration of the software. For example: Free training videos, free online training presentations, e-learning, classroom-based courses, on-site courses and virtual courses.

Another relevant aspect here is the huge community of partners, users, fans and collaborators across the world who regularly support Q&A forums and provide blog articles and other information that contributes to a collective body of knowledge that our customers find very valuable as they are developing their own skills.

In addition to this, Tableau can be engaged to provide Professional Services for a fee, with a bespoke engagement defined and conducted in accord with the customer's requirements.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
Users have full control over the content (including published workbooks and data extracts) that they choose to put into the Tableau Online Platform and they can regenerate, drop, download or retract these at any time.

Users can request a full copy of their data at the end of their contract which they could then restore to a local server if required.

As stated in our Terms of Service, once a Site is terminated all data, content and related metadata will be removed and is not recoverable.
End-of-contract process
No additional cost. At the end of a subscription period, if a customer does not renew, then they will find their license is no longer active and all users in the organisation will be unable to publish, access or interact with any content in their Tableau Online Site.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
Application to install
Yes
Compatible operating systems
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
  • Windows Phone
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
Published Tableau content can be accessed and edited via a web browser running on any PC or device. The user experience and interaction is defined by the Creator who published.

In addition Tableau provides a free mobile App so that when users access published content from iOS or Android devices the interaction and display is adapted to suit the touch-screen experience.
Service interface
Yes
User support accessibility
None or don’t know
Description of service interface
Customer administrators are able to manage their activation and deactivation of licenses, download all versions of Tableau software and view the status of all of their Tableau software assets. This administrator service is managed through a password protected Tableau client portal
Accessibility standards
None or don’t know
Description of accessibility
We create Salesforce Accessibility Conformance Report (ACR) using the international edition of the Voluntary Product Accessibility Template (VPAT), which includes the standards to which we align our products. The accessibility features available within Salesforce applications depend on the application UI configuration and Lightning component usage. For this reason, adherence to accessibility requirements should be evaluated throughout the design and final testing of the Salesforce application and not merely on a specific ACR.

We update the website as additional ACRs become available https://help.salesforce.com/articleView?id=accessibility_contact.htm&type=5.

For more information on how to use Salesforce to meet those requirements, please visit https://help.salesforce.com/articleView?id=accessibility_overview.htm&type=5 and https://www.lightningdesignsystem.com/accessibility/overview/.
Accessibility testing
No specific testing of assistive technology for the portal
API
Yes
What users can and can't do using the API
Several APIs available to automate or enhance aspects of the standard platform: REST, Extract, Document, Javascript, Web Data Connector and Extensions (in beta May18).

A small number of specific functions are not relevant (or available) when using the Tableau Online Platform as they relate to the Tableau Server (hybrid-cloud) Platform instead. These differences are clearly identified in the online help pages. For example, search online for 'Tableau onlinehelp API Reference'.

The REST API can be used for managing users, groups and sites, updating workbooks or datasources and Integrating Tableau content with a custom app or portal.

Extract API can be used to create data extracts that improve performance and provide offline access to data.

Document API is used to create and deploy templates or migrate workbooks from test to production data sources.

Javascript API for embedding Tableau into custom web applications. Allows a bi-directional communication between Tableau and the host application.

Web Data Connector: connect to any data via HTTP/HTTPS, providing an HTML interface to end-user, storing into data extracts. Also allows automatic refreshes and authentication.

Extensions API can open up a range of capabilities from 'write-back' to custom interface options and bi-directional communication between Tableau and guest application.
API documentation
Yes
API documentation formats
  • HTML
  • Other
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
The purpose of the Tableau Platform is to allow customers to create their own analytics, reports and dashboards, each of which is customised to meet specific needs. Automation can be applied to the platform through the use of APIs. In addition the interface can be adapted and tailored to reflect customer branding. At an individual level the users can personalise their experience through the use of favourites, selected 'home pages', custom filter settings on views, etc.

Scaling

Independence of resources
The Tableau Platform can be installed on premises, or uses technical infrastructure hosted and maintained in our EU (Dublin) data centre, and we constantly monitor activity to ensure that peak periods are supported by appropriate levels of processing power so that slow-down does not occur as a result of increased activity. We publish a daily (historic) report of service availability and planned maintenance at www.trust.tableau.com

Analytics

Service usage metrics
Yes
Metrics types
A Site Administrator has access to the following service status reports (displayed using Tableau interactive analytics and charts):
Traffic to views/data sources/'Bridge-connected' data sources (i.e. where data originates within your network), Actions by users, Scheduled task activity, Stats for space usage.
Reporting types
Real-time dashboards

Resellers

Supplier type
Reseller (no extras)
Organisation whose services are being resold
Salesforce

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least once a year
Penetration testing approach
‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
Protecting data at rest
Other
Other data at rest protection approach
By default, all data is encrypted at rest with AES 256 using the AWS encryption.

Customers can limit which users see what data by setting user filters on data sources in both Tableau Server and Tableau Online. This allows better control of what data users see in a published view based on their Tableau Server login account.
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
The purpose of the Tableau Online Platform is to allow customers to create their own analytics, reports and dashboards, each of which is customised to meet specific needs. Automation can be applied to the platform through the use of APIs. In addition the interface can be adapted and tailored to reflect customer branding. At an individual level the users can personalise their experience through the use of favourites, selected 'home pages', custom filter settings on views, etc.
Data export formats
  • CSV
  • Other
Other data export formats
  • .tde
  • .hyper
Data import formats
  • CSV
  • Other
Other data import formats
  • Tableau has over 70 native connectors...
  • ...including files, databases, web data connectors and applications.
  • Search for 'Tableau Connect to your data' for current list.

Data-in-transit protection

Data protection between buyer and supplier networks
  • TLS (version 1.2 or above)
  • Other
Other protection between networks
By default, customers connect to the service over the public Internet with all transmissions between the user and the Salesforce Services secured using TLS 1.2 or higher and encrypted using 256 or 128-bit encryption. The Services use International/Global Step Up SSL certificates with 2048-bit Public Keys. Web Service callouts can be secured using TLS, as well as mutual TLS.
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
Other protection within supplier network
Customer data is protected within the Tableau Cloud through a mature, standards-based defence-in-depth security architecture. Logical and physical access is strictly controlled,logged and monitored, and the access controls used are regularly audited for compliance with our certifications by third parties. Network security controls such as firewalls, intrusion detection, anti-malware, anti-ddos, file integrity monitoring are augmented with extensive monitoring to provide a robust prevention, detection and response model. Internal and external, as well as third-party vulnerability scanning and application penetration testing are also in place.

Availability and resilience

Guaranteed availability
Tableau does not guarantee a particular level of availability for the Tableau Platform. We publish stats showing current (and last 30 days) levels of performance and maintenance breaks on the internet at trust.tableau.com.

No refunds are provided as a result of degraded service.

Refund information can be obtained from the Salesforce Main Services Agreement available at https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Salesforce_MSA.pdf
Approach to resilience
Tableau Online services are hosted in enterprise-class, independently audited data centers that have redundancy built in to all critical services. The data centers are equipped with fire
suppression and other monitoring systems designed to detect environmental issues and respond to them before they cause an outage. Additionally, the hosting providers have contracts with
suppliers to ensure they can maintain operations in the event of a sustained power outage. Upon execution of a non-disclosure agreement, Tableau can share the audit reports for its
data centre providers upon request.

For a summary please access the Tableau White Paper: 'Tableau Online Security in the Cloud' - https://www.tableau.com/learn/whitepapers/tableau-online-security-cloud
Outage reporting
Tableau Cloud undergoes periodic maintenance to sustain the infrastructure supporting Tableau Cloud services and deliver enhanced features and functionality. We recommend reviewing the reserved maintenance schedule to plan for scheduled downtime and to avoid service interruptions.

Tableau communicates system maintenance through the Tableau Trust page and notification emails to site administrators.

Tableau Trust is where all Tableau Cloud status updates are posted.
Status updates include system maintenance, as well as reported incidents that may affect the use of Tableau Cloud. https://trust.tableau.com

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
Other user authentication
Salesforce has a very comprehensive set of authentication mechanisms that customers can chose from. These include the inherent username and password option, Single Sign-on, Social Sign-on through another application, such as google, integration with existing identity management systems a customer may have, 2 Factor Authentication, and the application can also act as a Service Provider or Identity Provider for SSO integration using SAML.
Access restrictions in management interfaces and support channels
Management access for service support and delivery is done through multiple layers of controls including, but not limited to, multiple 2-factor authentication, bastion host and proxy control and segregation of duties. These controls are in scope for SSAE-18 auditing and evidences through the SOC 2/ISAE3402 report. Access to the management interface for the customer to configure their salesforce environment, is configured by the customer themselves. The options are outlined in the above response. Robust application design and testing ensures that users without administrative access rights cannot access more sensitive areas of the application.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
Between 1 month and 6 months
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
Between 1 month and 6 months
How long system logs are stored for
Between 6 months and 12 months

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
EY CertifyPoint
ISO/IEC 27001 accreditation date
January 25, 2024
What the ISO/IEC 27001 doesn’t cover
Listing of current exclusions within the ISO27001 Statement of Applicability available to view at https://compliance.salesforce.com/en/documents/a006e000010P47JAAS
ISO 28000:2007 certification
No
CSA STAR certification
Yes
CSA STAR accreditation date
10/01/2022
CSA STAR certification level
Level 1: CSA STAR Self-Assessment
What the CSA STAR doesn’t cover
The available CSA STAR self-assessment covers all points in the latest CCM; version 4.02
PCI certification
No
Cyber essentials
Yes
Cyber essentials plus
Yes
Other security certifications
Yes
Any other security certifications
  • ISO 27001, 27017, 27018
  • SSAE 18/ISAE 3402
  • SOC-1
  • SOC-2
  • Cyber Essentials PLUS
  • CSA CAIQ Level 1
  • Asip Sante HDS
  • NEN-7510

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • CSA CCM version 3.0
  • ISO/IEC 27001
  • Other
Other security governance standards
ISO 27017
ISO 27018
SOC 1,2, 3
NEN7510
HDS Certificate
TISAX
APEC Certification for Processors and Controllers
UK Binding Corporate Rules
Information security policies and processes
Salesforce's Information Security Management System (ISMS) and information security policies are based on the ISO 27002 framework of best practices and are ISO 27001 certified. As required by this certification, the ISMS is endorsed by Senior Management. The EVP of Security has responsibility for the information security policies and ISMS. The Salesforce Security Steering Committee approves/authorizes all changes to the policies, the Statement of Applicability (SoA), the information security manual, and any separate policy statements. During the ISO 27001 audit process (as well as other audits such as SOX and SSAE 16 SOC 1), Senior Management for various departments are involved in verifying that policies and procedures are in place and adhered to. Policies are reviewed/approved at least annually.

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
The change management process proper segregation of duties for the approval and implementation of changes. Salesforce's Change Management Standard outlines the activities to be performed during the change process and the supporting tasks.

Tableau Cloud policies and procedures outline the activities to be performed during each phase of the change process and the supporting tasks that need to be completed for each activity. Changes are implemented during scheduled maintenance windows unless required to address an urgent service issue. Requests for changes, as well as system and hardware maintenance, are standardised, categorised, and prioritised according to documented policies and procedures.
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
Vulnerability and Patch Management Program is implemented where Salesforce performs vulnerability scans on external and internal facing systems using internal scanning resources and with third-party vendors to conduct external vulnerability assessments. Internal scans are completed daily, external service providers are used to perform penetration tests prior each major release (three times annually). Commercial and proprietary vulnerability scanning tools are configured to identify vulnerabilities and measure vulnerability impact in CVSS scores. Patching is applied following a risk-based approach and SLAs while using the change management process to ensure mitigations are deployed. detail on responsible disclosure https://trust.salesforce.com/en/security/responsible-disclosure-policy/
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
Salesforce Threat Intelligence and Detection team monitors the Salesforce services 24x7 for threats and unauthorized intrusions via the latest cutting edge technology and industry analysis, and in collaboration with the Security Incident Response teams. Extensive logging and monitoring is conducted across all Salesforce Services and environments (at application, network and database layers). All suspicious activities are flagged and reported to Salesforce CSIRT for investigation, management, communication, and resolution of security events and incidents in line with the NIST Incident Response model.
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
Salesforce has a formal Incident Management Process that guides the Salesforce Computer Security Incident Response team in investigation, management, communication, and resolution activities.

Salesforce will promptly notify the customer in the event of any security breach of the Service resulting in an actual or reasonably suspected unauthorized disclosure of Customer Data. Notification may include phone contact by Salesforce support, email to customer's administrator and Security Contact and public posting on trust.salesforce.com.

Salesforce.com is a member of the prestigious Forum of Incident Response and Security Teams (FIRST) and complies with the FIRST framework and best practices for incident response.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks
No

Social Value

Social Value

Social Value

  • Fighting climate change
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

Fighting climate change

Softcat are dedicated to reducing our environmental impact and actively promoting sustainability. Our commitment to sustainability is a core aspect of our business strategy, driving us to innovate and lead in the creation of a more sustainable future for our company and the communities we serve. This commitment is embedded in our policies, operating procedures, and training programs.

We are proud to be the first FTSE 250 company to be awarded 5-star status in relation to the United Nations Sustainable Development Goals.

We aim to achieve a Carbon Net-Zero Value Circle by 2040 by prioritising renewable energy, reducing natural resource use, minimising waste, and safeguarding biodiversity in compliance with environmental legislation.

At Softcat, we have taken significant steps towards securing renewable energy across our organisation, reducing our scope 1 & 2 emissions. We had the target of using 100% Renewable Energy across all our locations by 2024. We successfully delivered against this target ~2 years early.

In May 2023 we took delivery of 15 electric vehicles, replacing all existing fossil-fuelled company cars used by employees for business means. The implementation of the EV pool fleet will see a saving of over 80 tons of CO2e per year. A huge impact on our Net Zero targets.

Tackling economic inequality

As a value-add reseller, Softcat outsources the products, services, and solutions through our extensive network of partners, to best suit the needs of our broad client base. We always consider and promote SMEs and local providers where appropriate, particularly for the products and services we offer via the G Cloud framework.

We remain dedicated to improving employability and educational awareness across schools, colleges, and universities to help break down the barriers to joining technology organisations.

We work collaboratively with many schools that are close in proximity to our offices, to ensure we are actively supporting the community as well as schools from lower socio-economic backgrounds.

We visit the schools to talk about the IT sector and the roles in our organisation, as well as promoting work-experience opportunities during the summer. In particular, we actively encourage students from diverse backgrounds to engage in work experience to appreciate the roles available in our sector.

For ambitious school and college leavers, a Softcat Apprenticeship is a great first step into the world of work, with 94% of our apprentices offered a permanent position at Softcat post apprenticeships, which goes to show the amazing opportunity available with us.

We were ranked 1st in IT & Consultancy, and 10th overall in by RateMyApprenticeship.com - Best 100 Apprenticeship Employers 2023-2024 list.

Softcat now also offer 12 month paid internships to University students looking to complete a year in industry as part of their undergraduate studies.

Equal opportunity

Our approach to diversity and inclusion is introduced first during our induction training, as part of our Softcat values, outlining responsibility to uphold our principles. This message is reinforced by our process and policies, networks, Allyship Training and Inclusion Awareness campaigns.

Softcat supports diversity and inclusion through various networks including:
- Supporting Women in Business (SWIB)
- The Ethnic and Cultural Network
- The Pride Network
- The Family Network
- The Empowering Disability and Neurodiversity Network (EDN)
- The Faith at Work Network
- Armed Forces & Veterans Network
These networks aim to create a supportive and inclusive work environment for all employees, regardless of gender, ethnicity, sexual orientation, disability, or family commitments.

Our allyship programme, Stronger Together, is a mixture of event and workshop-based training available to all staff. Programme topics include, bias, power, privilege, and being a greater ally.

Inclusion Awareness campaigns include race, disability, sexual orientation, gender, faith, and caring responsibilities. These sessions highlight and celebrate minority groups, through panel sessions, Q&A sessions and training, providing an opportunity to discuss and understand ways to be more inclusive.

Our efforts to improve diversity and inclusion have been incredibly successful. Since 2020, the number of female employees below management level has increased to 35%, and the number of ethnic minority employees rose to 17%.

Wellbeing

At Softcat, all employees are provided with access to our multidimensional wellbeing programme which includes flexible work arrangements, free nutritious breakfast, mental health support, employee benefits scheme, health and wellbeing week activities, and online workshops.

Giving back to the community is an innate part of who we are as a company. All Softcat employees are therefore given two volunteer days per year to support a charitable or community cause.

Each of our 10 regional offices also support local charities through fundraising, donations and events. For example, our Manchester office has raised over £30,000 for the WeLoveMCR charity. This funding has supported young, disadvantaged Manchester citizens in gaining qualifications to broaden their work opportunities and supporting local groups in delivering indispensable services that enable community cohesion.

Pricing

Price
£9.58 a unit
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
A fully-operational instance of the Tableau Online Platform can be made available on a trial basis for a short duration.
Link to free trial
Visit www.tableau.com

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at psitq@softcat.com. Tell them what format you need. It will help if you say what assistive technology you use.