Softcat Limited

Tableau Platform

Tableau Platform is your self-service visual analytics solution. Keywords: Hanrahan, Stolte, Chabot, .TDE, BI, Dashboard, VizQL, Hyper, In-Memory, Hybrid, Live, Bridge, Desktop, Prep, Creator, Explorer, Viewer, Viz, .TWB, .TWBX, Chart, Graph, Table, Database, File, Big, Data, Secure, Governed, Audited, Intuitive, Ease-of-use, People, Everyone, TCO. SFDCTB2022GC13

Features

• Embedded, Interactive, Creative, Analytical, Human, Perception, Insight, Cognition
• Maintained, Administered, Upgrade-free, London Data-Centre, Compliant, Trust, Available
• AD, SAML, SSL, Authentication, Authorisation, Row-Level-Security, 2FA
• Valuable, Mobile, App, Device, Scale, Author, Collaborate, Share, Enterprise
• Spatial, Relational, Real-Time, Drivers, Unstructured, Cloud-based, On-Premise
• R, Python, Open-Source, Advanced, Statistics, Forecast, Cluster, What-if, Parameterise
• Re-structure, Pivot, Union, Join, Transform, Flow, Repeatable, Clean, Integrate
• Automation through API, REST, Extract, Javascript, Extension, Write-Back
• Small Multiples, Heatmap, Bullet, Time-Series, Sankey, Bubble
• Applications, Files, Relational, 'Big', Ask Data

Benefits

• Security, Consistent, Access, Permissions, Certified, Source, Protected, Audited, Alert
• Flexible, Intuitive, Public, Community, Storytelling, Guided
• Disruptive, Gartner, Leader, Community, User-Group
• Fail-Fast, Agile, Iterate, Collaborate, Inclusive, Quick-Start, Accelerate
• Empower Workforce, Browser-based, Question, Immediate Answers, Web-Authoring
• Efficient, Revenue-generating, Cost-reducing, Value, Subscription, Operational
• Data-driven, Not Opinion-based, Strategic, Decentralise, Adoption, Transformational
• Integrated. Visual Analytics, ELT, Data Management, Catalogue

£0 to £132,000 a user a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  ODS

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at psitq@softcat.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

637658584204132

Contact

Charles Harrison
01628 403403
psitq@softcat.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: No specific constraints
• System requirements:
  • Windows, 8/8.1, Windows 10 (x64), 2GB memory
  • 1.5 GB minimum free disk space
  • CPUs must support SSE4.2 and POPCNT instruction sets
  • MacOS Mojave 10.14, macOS Catalina 10.15, Big Sur 11.4+
  • Intel processors
  • M1 processors under Rosetta 2 emulation mode
  • 1.5 GB minimum free disk space
  • CPUs must support SSE4.2 and POPCNT instruction sets

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Response times differ based on support contract. More details can be found here:; https://www.tableau.com/support/services#targeted-response-times
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: No
• Support levels: Full details can be found here: https://www.tableau.com/support/services; At no cost - Standard support at 8x5 support; With additional cost - Premium support including a Technical Account Manager, 24x7 support; With additional cost - Extended support including 24x7 P1 support
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Training can be provided via user documentation, online videos, virtual training sessions, onsite training sessions and specific training sessions as required.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Download from the online version prior to service termination or retain data within their environments if an on premises / cloud-based deployment was chosen.
• End-of-contract process: N/A

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • Windows
  • Windows Phone
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Published Tableau content can be accessed and edited via a web browser running on any PC or device. The user experience is defined by the Author.; ; Tableau provides a free mobile App so that when users access published content from iOS or Android devices the interaction and display is adapted to suit the touch-screen experience.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: Customer administrators are able to manage their activation and deactivation of licenses, download all versions of Tableau software and view the status of all of their Tableau software assets. This administrator service is managed through a password protected Tableau client portal
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: N/A
• API: Yes
• What users can and can't do using the API: Several APIs available to automate or enhance aspects of the standard platform: REST, Extract, Document, Javascript, Web Data Connector and Extensions.; ; A small number of specific functions are not relevant (or available) when using the Tableau Online Platform as they relate to the Tableau Server (hybrid-cloud) Platform instead. These differences are clearly identified in the online help pages. For example, search online for 'Tableau onlinehelp API Reference'.; ; The REST API can be used for managing users, groups and sites, updating workbooks or datasources and Integrating Tableau content with a custom app or portal.; ; Extract API can be used to create data extracts that improve performance and provide offline access to data.; ; Document API is used to create and deploy templates or migrate workbooks from test to production data sources.; ; Javascript API for embedding Tableau into custom web applications. Allows a bi-directional communication between Tableau and the host application.; ; Web Data Connector: connect to any data via HTTP/HTTPS, providing an HTML interface to end-user, storing into data extracts. Also allows automatic refreshes and authentication.; ; Extensions API can open up a range of capabilities from 'write-back' to custom interface options and bi-directional communication between Tableau and guest application.
• API documentation: Yes
• API documentation formats:
  • HTML
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The purpose of the Tableau Platform is to allow customers to create their own analytics, reports and dashboards, each of which is customised to meet specific needs. Automation can be applied to the platform through the use of APIs. In addition the interface can be adapted and tailored to reflect customer branding. At an individual level the users can personalise their experience through the use of favourites, selected 'home pages', custom filter settings on views, etc.

Scaling

• Independence of resources: The Tableau Online Platform uses technical infrastructure hosted and maintained in our UK (London) data centre, and we constantly monitor activity to ensure that peak periods are supported by appropriate levels of processing power so that slow-down does not occur as a result of increased activity. We publish a daily (historic) report of service availability and planned maintenance at www.trust.tableau.com

Analytics

• Service usage metrics: Yes
• Metrics types: A Site Administrator has access to the following service status reports (displayed using Tableau interactive analytics and charts):; Traffic to views/data sources/'Bridge-connected' data sources (i.e. where data originates within your network), Actions by users, Scheduled task activity, Stats for space usage.
• Reporting types: Real-time dashboards

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Other
• Other data at rest protection approach: By default, all data is encrypted at rest with AES256 using the AWS encryption.; ; Customers can limit which users see what data by setting user filters on data sources in both Tableau Server and Tableau Online. This allows better control of what data users see in a published view based on their Tableau Server login account.
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: The purpose of the Tableau Platform is to allow customers to create their own analytics, reports and dashboards, each of which is customised to meet specific needs. Automation can be applied to the platform through the use of APIs. In addition the interface can be adapted and tailored to reflect customer branding. At an individual level the users can personalise their experience through the use of favourites, selected 'home pages', custom filter settings on views, etc.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • .tde
  • .hyper
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Tableau has over 70 native connectors including:
  • Files, databases, web data connectors and applications.
  • Search for 'Tableau Connect to your data' for current list.

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: By default, customers connect to the service over the public Internet with all transmissions between the user and the Salesforce Services secured using TLS 1.2 or higher and encrypted using 256 or 128-bit encryption. The Services use International/Global Step Up SSL certificates with 2048-bit Public Keys. Web Service callouts can be secured using TLS, as well as mutual TLS.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: Customer data is protected within the Tableau Online through a mature, standards-based defence-in-depth security architecture. Logical and physical access is strictly controlled,logged and monitored, and the access controls used are regularly auditedfor compliance with our certifications by third parties. Network security controls such as firewalls, intrusion detection, anti-malware, anti-ddos, file integrity monitoring are augmented with extensive monitoring to provide a robust prevention, detection and response model. Internal and external, as well as third-party vulnerability scanning and application penetration testing are also in place.

Availability and resilience

• Guaranteed availability: Tableau does not guarantee a particular level of availability for the Tableau Online Platform. We publish stats showing current (and last 30 days) levels of performance and maintenance breaks on the internet at trust.tableau.com.; ; No refunds are provided as a result of degraded service.
• Approach to resilience: This information is available on request. For a summary please access the Tableau White Paper: 'Tableau Online Security in the Cloud'
• Outage reporting: A public dashboard is available www.trust.tableau.com

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Other user authentication: Only users you explicitly add to your site have access to your content and workbooks. Administrators that you designate are responsible for all account management functions including adding and removing users and assigning permissions. Account management is completely in your control.; ; SAML allows administrators to configure their site for single sign on using their own SAML 2.0 capable identity provider (IdP). For additional information refer to the Site Authentication section of the Online Product Guide.; ; Note: Features related to SAML and single sign-on are currently only available by request. To request these features, contact Tableau Support.
• Access restrictions in management interfaces and support channels: Access to the configuration settings for the platform and to published content is dependent on the Role of the user (determined at the Authentication login step), and the Security permissions model put in place by the customer's Site Administrator. There are many capabilities that are limited in this way, from the ability to download a particular dataset to the capability of publishing an item to the shared environment. For more details search the Tableau Online Help pages for 'Content Permissions and Ownership'
• Access restriction testing frequency: At least every 6 months
• Management access authentication: 2-factor authentication

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: EY CertifyPoint
• ISO/IEC 27001 accreditation date: 28/01/2021
• What the ISO/IEC 27001 doesn’t cover: The only ISO27001 control not included in our Statement of Applicability is A.14.2.7 - Outsourced Development. This is not covered as Salesforce does not perform outsourced system development.
• ISO 28000:2007 certification: No
• CSA STAR certification: Yes
• CSA STAR accreditation date: 25/10/2021
• CSA STAR certification level: Level 1: CSA STAR Self-Assessment
• What the CSA STAR doesn’t cover: The available CSA STAR self-assessment covers all points in the latest CCM; version 4.02.
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • ISO 27001, 27017, 27018
  • SSAE 18/ISAE 3402
  • SOC-1
  • SOC-2
  • Cyber Essentials PLUS
  • CSA CAIQ Level 1
  • Asip Sante HDS
  • NEN-7510

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CCM version 3.0
  • ISO/IEC 27001
  • Other
• Other security governance standards: ISO 27001, 27017, 27018; SSAE 18/ISAE 3402 ; SOC-1 ; SOC-2; Cyber Essentials PLUS; CSA CAIQ Level 1; Asip Sante HDS; NEN-7510
• Information security policies and processes: Salesforce's Information Security Management System (ISMS) and information security policies are based on the ISO 27002 framework of best practices and are ISO 27001 certified. As required by this certification, the ISMS is endorsed by Senior Management. The EVP of Security has responsibility for the information security policies and ISMS. The Salesforce Security Steering Committee approves/authorizes all changes to the policies, the Statement of Applicability (SoA), the information security manual, and any separate policy statements. During the ISO 27001 audit process (as well as other audits such as SOX and SSAE 16 SOC 1), Senior Management for various departments are involved in verifying that policies and procedures are in place and adhered to. Policies are reviewed/approved at least annually.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: The assumption has been taken that this question does not relate to the internal process and operation of the company. In terms of the release of software updates to the Tableau Online Platform, Tableau now operates a cadence where updates are made available roughly 4 times per year, on a quarterly basis. For the hosted solution the updates are made directly without significant downtime or loss of service to the customer.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: The Tableau Security team cares deeply about the security of our products and the data that our customers entrust to us. We will thoroughly investigate any reported vulnerability that jeopardizes either. Once a vulnerability is fully investigated and its content addressed, we will work with you to disclose the vulnerability in a way that acknowledges your work and protects our customers.; ; All security-related notifications will be announced to our customers via the Security Bulletins community page: https://community.tableau.com/community/security-bulletins. This page also details our response to Internet-wide vulnerabilities that impact Tableau products, release notes about security bug fixes and disclosed vulnerabilities.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: In relation to Tableau Online Platform, there is no specific Protective Monitoring standard in place. Where highly-sensitive, high-impact customer data is concerned our recommendation would be to implement the Tableau Server (Hybrid-Cloud) Platform where the customer's own security standards and policies will apply.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Salesforce has a formal Incident Management Process that guides the Salesforce Computer Security Incident Response team in investigation, management, communication, and resolution activities.; ; Salesforce will promptly notify the customer in the event of any security breach of the Service resulting in an actual or reasonably suspected unauthorized disclosure of Customer Data. Notification may include phone contact by Salesforce support, email to customer's administrator and Security Contact and public posting on trust.salesforce.com.; ; Salesforce.com is a member of the prestigious Forum of Incident Response and Security Teams (FIRST) and complies with the FIRST framework and best practices for incident response.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  In 2021, Salesforce achieved net zero across its full value chain and reached 100% renewable energy. This means Salesforce has purchased enough renewable energy to match all electricity it uses globally. ; ; Since first committing to this goal in 2013, Salesforce has been working to accelerate the global transition to clean and renewable sources of electricity with the aim for a future where renewable energy is powering the world around the clock.; ; Furthermore, Salesforce is on a mission to help conserve, restore, and grow 1 trillion trees by 2030.; ; Efforts include helping drive toward a 1.5°C future with its Climate Action Plan. Salesforce is focusing on six sustainability priorities — emissions reduction, carbon removal, trillion trees & ecosystem restoration, education & mobilisation, innovation, and regulation & policy — offering others a blueprint to accelerate their journey to Net Zero. In line with these priorities, Salesforce helped found 1t.org, a global movement to conserve, restore and grow 1 trillion trees by 2030 and launched an Ocean Sustainability Program to help protect our ocean.
• Covid-19 recovery:

  Covid-19 recovery

  Businesses are under pressure to find ways to innovate quickly, while providing seamless user experiences and increased security to accommodate the all-digital, work-from-anywhere world.; ; At Salesforce, we have responded to our customers’ needs faster than ever. We launched Work.com in May to help organisations navigate the complexity of safe office return. It included apps for manual contact tracing, employee wellness checks, shift scheduling, employee learning platform and command centre to help leaders visualise the data and make informed decisions. We built an entirely new suite of solutions in just eight weeks." More details: https://www.salesforce.com/news/stories/how-salesforce-built-work-com-in-8-weeks/. We also launched Vaccine Cloud in 2021 to help monitor health in the community.; ; Returning to the office; As the pandemic changed the way we work and live, we used our technology like Work.com and expertise to safely reopen our offices world-wide, and welcome our employees in a safe environment.; The Salesforce's approach is more than just reopening offices, for Brent Hyder (former Salesforce President and CPO) it is ‘’an opportunity to create a workspace and an employee experience that makes us more connected, healthy, innovative and productive.’’; For more information: https://www.salesforce.com/news/stories/global-return-to-the-office-the-salesforce-approach/; ; Vaccine Cloud; Introduced in early 2021, this cloud-based solution is designed to help organisations, workplaces, schools, and non-profits make data-driven decisions based on health status so they can open safely. ; Vaccine Cloud helps businesses and organisations quickly scale vaccine operations. The solution features capabilities ranging from recipient registration and scheduling to inventory management and public health outreach. Salesforce built Vaccine Cloud because legacy systems were built too simplistic to handle this epidemic; Vaccine Cloud is a technology that helps:; • Mitigate short-term risks and stabilise operations; • Plan and orchestrate a return-to-work; • Engage customers, partners, and suppliers at every-point
• Tackling economic inequality:

  Tackling economic inequality

  Based on World Economic Forum’s “The Future of Jobs Report 2020,” 50% of employees will need new skills in the next five years to keep up with the technology. ; More than 3 million people are already skilling up with Trailhead.; Anyone ready to take their skills to the next level can sign up for a free Trailhead account at www.Trailhead.com ; ; Trailhead offers free learning, helping to create new pathways into tech for diverse talent. This shapes a more inclusive future. ; ; 9 out of 10 customers rely on our partner apps and experts. 70% of Salesforce implementations are led by 1 of 132,000 Salesforce experts. Our partnership ecosystem is predicted to create 9.3M jobs and $1.6T in new business revenue by 2026, according to IDC (source:https://www.salesforce.com/news/press-releases/2021/09/20/idc-salesforce-economy-2021/?sfdc-redirect=430). ; ; Sustainable supply; Sustainability is integral to Salesforce’s procurement strategy and our supplier relationships. On Trailhead we outline our expectations of suppliers.; ; Our commitment to Equality extends to our supply chain. Our suppliers are critical for our success and innovation, share our values, operate with integrity, respect, and transparency.; ; Partnering with small businesses and diverse suppliers is not just the right thing to do; it is smart business. We seek certified diverse suppliers bringing innovation to positively impact local communities, ecosystems, and the environment. ; ; We are active partners with diverse community-based organisations to provide development, education, and resources. We are proud members and sponsors of Disability:IN, the National LGBT Chamber of Commerce, the National Minority Supplier Development Council, the National Veteran Business Development Council, and the Women’s Business Enterprise National Council. As we expand our initiative globally, we are proud to join the Minority Supplier Development UK and Supply Nation.; ; Learn more: https://www.salesforce.com/company/supplier-diversity/
• Equal opportunity:

  Equal opportunity

  The Valuable 500 is a global call to action for 500 world’s most influential businesses to include disability on their agenda and end bias toward disability. ; We joined the group in 2019 to create inclusive workplaces where everyone feels valued, respected and comfortable. ; ; Equality is a core value at Salesforce. It empowers us to innovate, build deeper connections with our customers, and ultimately become a better company.; ; We strive to create a workplace that reflects the diverse communities around us. Together we can build a more equal workplace and world for all.; ; We set a goal in 2019 to have 50% of our U.S. employees from underrepresented groups by 2023. In 2020, we included additional public representation goals to continue to accelerate this work, and we’re evaluating new goals to help hold us accountable.; ; Our Equality Groups are employee-led organisations that build community, educate allies, and drive equality. We continue to offer recognition and compensation for globally elected Equality Group leaders. More information: https://www.salesforce.com/company/equality/equality-groups/ .; ; Equality Examples; ; New gender inclusive benefits; Transgender people face barriers and inequality — including access to healthcare. We want to help remove some of those barriers to ensure our transgender and non-binary employees can get the care they need and live as their true, authentic selves by providing critical financial and emotional support they deserve.; ; Equal pay; Salesforce has spent $16 million to date to ensure equal pay for equal work among its global workforce. In 2015, the company committed to investigating and addressing any gender pay gaps. Since then, Salesforce has continued to improve upon its processes and broaden the scope of assessment to include bonuses, promotions, and stock, as well as race and ethnicity in the United States, in addition to gender globally.
• Wellbeing:

  Wellbeing

  We bring mental health conversations into the workplace. ; For example, our CPO Brent Hyder hosted a virtual Mental Health Town Hall for our global employee base, featuring leaders from across the spectrum talking about mental health.; ; We recognize that health equity concerns are especially problematic in the context of mental health. We see how the problems facing humanity such as nutrition insecurity, housing insecurity, climate action, health equity, mental health, wellbeing, and workforce development all intersect.; These are complex problems and we have to work all together towards solutions that span more than one axis.; ; Pledge 1% is a global movement that inspires, educates, and empowers every entrepreneur, company, and employee to be a force for good. Over 10,000 members in 100 countries have used Pledge 1%’s flexible framework to ignite half a billion dollars in new philanthropy.; ; Pledge 1% founding partners include Salesforce, Atlassian, and Rally, three companies that know first-hand how pledging a small portion of future success today can have an enormous impact tomorrow. In 2014, they came together with the Entrepreneurs Foundation of Colorado to accelerate a shared vision of every business around the globe integrating philanthropy into its corporate DNA. In 2016, Pledge 1% became a special initiative of Tides, a leading global philanthropic partner and non-profit accelerator.; ; Salesforce.org powers the purpose of people dedicated to solving our world’s biggest problems. A global community of nonprofits and educational institutions relies on our technology to help them operate effectively, raise funds, and build more meaningful relationships with those they serve.; - $1.5 Billion in technology given for free; - $23 Million in Pro Bono value to the sector in FY21; - 87% customers have improved their ability to achieve their mission

Pricing

• Price: £0 to £132,000 a user a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: A fully-operational instance of the Tableau Online Platform can be made available on a trial basis for a short duration.
• Link to free trial: Visit www.tableau.com

Service documents

• Pricing document

  ODS

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at psitq@softcat.com. Tell them what format you need. It will help if you say what assistive technology you use.