Capventis

Qlik

Capventis partners with leading Analytics, Integration and Data Quality provider Qlik, delivering intuitive platform solutions for self-service data visualization, guided analytics applications, embedded analytics and reporting. We specialise in delivering innovative solutions in multiple scenarios using Qlik Sense, QlikView, Qlik NPrinting, Geo-Analytics and Talend for organisations of all sizes.

Features

• Visualisations and Dashboards
• Data Extraction and Transformation
• Automated Insight Generation
• Search and Natural Language Interaction
• Intelligent alerting
• Powerful collaboration
• Automated triggering of immediate actions
• Mobile and embedded analytics
• AutoML and predictive analytics
• Reporting and self service

Benefits

• Get rapid insight to take informed action
• Make your enterprise data more valuable and actionable
• Leverage new technologies like AI/ML
• Build a data-driven culture without the need to code
• Ease of adoption for end user
• Improve governance and user confidence in data
• Enable all skill levels to access insights
• Consolidate data efficiently
• Solve all types of data challenges
• Suitable for big data

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at marketing@capventis.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

565374712745837

Contact

Brian O'Flynn
+44 845 313 8696
marketing@capventis.com

About the service

• Service categories:
  • Application Development and Deployment
    • Analytics and business intelligence
      • Business Intelligence
        • Business Intelligence
      • Advanced and predictive analytics
        • Advanced and predictive analytics
      • Location and geospatial data management and analytics
        • Location and geospatial data management and analytics
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: The service is standalone service but it can be used to augment any system that holds data, where the data needs to be analysed and visualised
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: Constraints will vary depending on customer's individual requirements
• System requirements:
  • For On Premises / Client Managed Cloud:
  • Microsoft Windows Server 2016 or above
  • Multi-core x64 compatible processors
  • RAM: 8 GB minimum
  • Minimum Disk Space: 5 GB total required to install
  • Security: Microsoft Active Directory, SAML & 3rd Party
  • Browser Support: Microsoft Edge, Chrome, Firefox, Safari
  • .NET Framework: 4.8
  • Postgres 12.1 and above (Part of Installation)
  • Contact Capventis for further details

User support

• Email or online ticketing support: Yes
• Support response times: Typically initial responses are supplied within an hour. Weekend support can be put in place via a special arrangement.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: The support levels that we provide are additional to the support provided by the software vendor. Our support levels are negotiable and we can provide a technical account manager or cloud support engineer by special arrangement
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Capventis provides all required services from service strategy, analysis & design, service set up, through to application development, test, training, documentation, coaching, deployment and post go-live support. Service can be delivered both remotely and on-site.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Available through the vendor website
• End-of-contract data extraction: The data can be extracted to .qvd, .csv, JSON, parquet & xml files.
• End-of-contract process: In summary the following steps need to take place; Notice needs to be served at least 60 days before the contract period is due to end. Otherwise penalties will apply.; The client needs to take ownership of any data that needs to be retained, otherwise data will be deleted following termination of the contract.; Any professional services required around the End of Contract process are not included in the service cost and will be charged separately.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The service has been designed to work on Mobile Devices. As the screens are responsive the layouts will automatically change to fit Mobile and Tablet devices. There are also dedicated Mobile apps for both android and iOS platforms.
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: Qlik provides numerous APIs that support both front (UI) and back-end activities. Qlik provides a full .NET SDK, along with JavaScrtipt libraries and server support via RESTful API end-points.; The APIs provide methods for creating connectors to external systems, extracting and importing, transforming, analysing and visualising data. Users can create additional controls for visualisation and maintain independent libraries if required.; Qlik components communicate via HTTPS and WebSockets, providing an easy method to set up, configure or change services or associated applications. Users can set up applications via both the standard API (via REST calls) or via a web interface (HTTPS).; Service APIs include the ability to configure, monitor or control proxies, repositories, service access and security (including APIs for user-directory maintenance). The JavaScript libraries provide browsers with the ability to handle selections, navigation, data formatting and visualisation and also create custom components to extend both front-end and back-end services.; In addition to .NET, Qlik also supports scripting tools/languages (such as Python) and the user-community provides open-source extensions in other languages including R, C++, C# and Go.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The technology is a tool that allows users to create and customise applications that analyse and visualise data. Customisation is done through scripting and drag and drop technology. Anybody with the correct user access and training can create their own applications.

Scaling

• Independence of resources: Qlik operates via the use of load-balanced proxy-servers distributing traffic through to a number of application servers, allowing for virtually infinite scalability, where required. As with any modern load-balanced service, the proxies can forward or restrict traffic based on server load, available capacity, data throughput, time etc. Qlik also works well with external (to Qlik) network management tools (such as NGINX) and can work within QoS management tiers.

Analytics

• Service usage metrics: Yes
• Metrics types: Yes – both at a web-server level and at an individual Qlik Sense application level, if required. We can also extend this model to include additional traffic analytics, if necessary.
• Reporting types:
  • API access
  • Real-time dashboards
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Supplier type

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Qlik

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest: Other
• Other data at rest protection approach: All encryption is handled by the Qlik Cloud security protocols and the use of industry standard tools to encrypt and to protect data at rest
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Users can export data via standard application menu/application options. The APIs also provide access to data and users can create data publishers in all common formats.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • JSON
  • XML
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Multiple data sources supported
  • For further details contact Capventis

Data-in-transit protection

• Data protection between buyer and supplier networks: Private network or public sector network
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: These guarantees and service level are undertaken by Qlik
• Approach to resilience: Please refer to Capventis for further details. Approach to resilience is based on customer need.
• Outage reporting: Yes, Capventis are able to provide a service report for the following outages including public Dashboard, an API and Email Alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
  • Other
• Other user authentication: All restricted access interfaces pass through ‘in-band’ dedicated routing systems. For some clients, we implement a tiered approach: access restrictions based on specific MAC addresses, defined network routes, VPN-only, and proxy security loops/break-outs.; In addition, software provides hard-coded routing where all restricted interface requests require authentication against an external encrypted and hashed data store. We also employ NIST best practice to design, development, testing and deployment processes to ensure that we employ current best practice in providing management interface protection.
• Access restrictions in management interfaces and support channels: All restricted access interfaces pass through ‘in-band’ dedicated routing systems. For some clients, we implement a tiered approach: access restrictions based on specific MAC addresses, defined network routes, VPN-only, and proxy security loops/break-outs.; In addition, software provides hard-coded routing where all restricted interface requests require authentication against an external encrypted and hashed data store. We also employ NIST best practice to design, development, testing and deployment processes to ensure that we employ current best practice in providing management interface protection.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: No
• Security governance approach: Capventis works with clients and adopts their security standards.
• Information security policies and processes: We follow industry best practice, including ISO 27001/2 and NIST.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Capventis implement a formal blueprint process and pre-agree a statement of work. Development cycles include functional and non-functional testing in a dedicated test environment. Once approved via internal QA processes, we release for user acceptance testing and then schedule risk-managed promotion to the live environment.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: We regularly patch systems and actively maintain/enforce security policies and procedures. Within the procedures, we include client-specific security requirements along with current industry best practice.; Internal assessments involve all relevant parties, including clients. We assess in accordance with both industry standards and relevant project requirements. We employ active monitoring processes to highlight issues as soon as they occur. Additionally, we employ network hardware and software to protect our systems. We gather information about potential threats from our suppliers, antivirus companies, clients, trusted technical media, telecommunications providers, and internal resources.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: We identify potential compromises in several different ways, some dependent on available services within client or supplier environments. Manual checks and software monitors and alerts us to potential network attacks and/or breaches.; We raise issues with senior management and instigate detailed investigations and associated threat assessments immediately. If necessary, we quarantine the machines and network segment(s) affected and/or close down compromised devices. We can then address the issue within a quarantined environment before determining how to restore services and resolve matters arising.; We also employ third parties to test services, and support clients in testing or monitoring for incidents.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Post-quantum cryptography secure: Yes
• Incident management approach: We use a ticketing service within our CRM system where clients can raise, respond to, and track incidents. We also provide ‘front-desk’ support calls, where clients can call and raise issues via telephone.; For common events, we provide a client Wiki and for more complex client environments, full troubleshooting guides and supporting documentation. We flow-chart common issues to ease resolution, and review processes regularly to resolve/remove regularly occurring or more common issues.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Qlik allows you to create and share your fully interactive Qlik Sense apps with up to 100 people -- all for free. 30 day trial period, no catch.
• Link to free trial: https://www.capventis.com/qlik

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: Provided
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at marketing@capventis.com. Tell them what format you need. It will help if you say what assistive technology you use.