Zendesk
Zendesk is a beautifully simple AI customer service platform. It's designed for companies that want to create customer relationships that are more meaningful, personal and productive. We start by helping companies to provide great support and then mature with self-service and proactive engagement.
Features
- Ticket /Incident Management
- Multi-Channel solution (email, chat, phone, social media)
- Reporting - Analytics and Insights
- Mobile apps and SDK for in-app development
- Self Service Help Centre (Knowledge base and Community Forum)
- Multi-language (28) and Multi-brand (unlimited)
- Fully Customisable (white label solution)
- Industry standard REST APIs, SDK and development framework
- Highly secure including SSO, 2-factor authentication, data encryption
- AI-driven chatbots, agent help, smart routing, and sentiment analysis.
Benefits
- Improve Agent efficiency with a single, multi-channel agent interface
- Connect your social channels (Facebook and Twitter).
- Take customer calls in Zendesk or via other telephony suppliers.
- Reduce support costs and drive sales via Chat.
- Streamline support with ticket views, triggers and automations.
- Provide 24/7 customer service support.
- Use Guide to build powerful self service capability.
- Transform your Zendesk to match your brand.
- Measure customers' satisfaction and your support team's performance.
- Use over 500 apps that sit natively within Zendesk's interface.
Pricing
- Education pricing available
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
8 5 2 4 5 1 3 0 8 3 0 1 9 2 1
Contact
Zendesk, Inc.
James Stubbs
Telephone: +44 7817 663036
Email: jstubbs@zendesk.com
About the service
- Service categories
-
- Application Development and Deployment
- AI platforms
- Search and knowledge discovery
- Search and knowledge discovery
- Search and knowledge discovery
- AI platforms
- Application Development and Deployment
- Multi cloud support
- No
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Public cloud
- Service constraints
- Zendesk is provided as a hosted solution only and is not available for implementation in an on-premise environment. As such, Zendesk requires a high speed internet connection to allow access to the solution and its use requires certain minimum specifications of the computer and browser (see "System Requirements").
- System requirements
-
- High speed Internet connection
- Computer must meet minimum specifications for OS (Windows/Mac OSX)
- Browser must be a stable release.
- Browser Configuration - Javascript must be enabled
- Browser Configuration - Cookies must be enabled
- Browser Configuration - localStorage must be enabled
- Browser Configuration - Security Protocol TLS v1.2 or above
User support
- Email or online ticketing support
- Yes
- Support response times
- Support levels are dependent on the service plan to which a customer is subscribed. Zendesk’s Professional Support service plan includes 24x5 support via email and phone. Zendesk’s Enterprise Support service plan includes 24x7 support via email, chat and phone.
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- Yes, at an extra cost
- Web chat support availability
- 24 hours, 7 days a week
- AI chatbot
- Yes
- Web chat support accessibility standard
- WCAG 2.2 AA
- Web chat accessibility testing
- https://www.zendesk.com/company/policies-procedures/accessibility/
- Onsite support
- Yes, at extra cost
- Support levels
-
Support levels are dependent on the service plan to which a customer is subscribed.
Zendesk’s Professional Support service plan includes 24x5 support via email and phone.
Zendesk’s Enterprise Support service plan includes 24x7 support via email, chat and phone. Priority support is also available to customers on the Enterprise Support service plan at additional cost (via our Priority Customer Support Add-On), providing a 1 hour first response time and 99.9% uptime SLA, backed up by service credits.
Zendesk's Customer Advocate team owns post-implementation support and is organised as follows:
(i) Product Support ("Tier 1"); (ii) Technical Support Engineers ("Tier 2"); and (iii) Technical Support Architects ("Tier 3").
These teams are globally distributed and available 24x7.
Additional technical support resources from the Professional Services team can be made available at extra cost and subject to execution of a Statement of Work. - Support available to third parties
- No
Onboarding and offboarding
- Getting started
-
Getting started Extensive user documentation is available on the Zendesk Support website (https://support.zendesk.com/hc/en-us). This includes how to get started with the solution as well as detailed support for advanced users. Documentation for APIs and SDKs is available via the Zendesk Developer Portal (https://developer.zendesk.com).
Zendesk provides training in many different forms, based on the specific requirements of our customers and the specific project. For example:
(i) Self-service guided resources are available on the Zendesk Support website; (ii) free and paid instructor and self led recorded/live (in person, remote) trainings/webinars are available via Zendesk Training (training.zendesk.com); (iii) custom training (remote or in person) can be designed and scoped based on customer requirements, at additional cost.
Zendesk offers a variety of implementation approaches, designed to meet the needs of our customers. These include various degrees of initial training for the customer's project team to ensure they have a solid understanding of the Zendesk solution before the design workshops. This helps develop a common understanding and language at the very start of the project. - Service documentation
- Yes
- Documentation formats
- HTML
- Documentation accessibility standard
- WCAG 2.2 AA
- End-of-contract data extraction
- Zendesk’s REST APIs and CSV/XML functionality allow customers (via their Account Administrator(s)) to export Service Data on demand, and Service Data will be available for export for 30 days after the contract ends. In the event a customer terminates their subscription, they can also request Zendesk to provide a full export of their Service Data, for which an additional charge may apply at Zendesk's professional services rates.
- End-of-contract process
- On termination or expiration of the contract, Service Data will continue to be available to the customer's Account Administrator(s) for an additional thirty days, during which the customer's Service Data may be exported by the Administrator(s). If customers require assistance with data export, a charge may apply which will be charged at Zendesk’s professional services rates.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Application to install
- No
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- Mobile is provided via native iOS and Android apps, whereas desktop is accessed via web browser. Mobile utilizes the Zendesk APIs to provide functionality for agents on-the-go. Mobile does not have all the features of the desktop service e.g. admin/account setup, security configuration, customer satisfaction ratings, WYSIWYG comment editing, adding inline images, ticket actions audit display and other non-mobile friendly features. Mobile focuses on features that enable agents to perform core ticketing workflows, and has configurable push notifications that desktop does not have. There are no admin functions within mobile. Security and permissions are the same for mobile as desktop.
- Service interface
- Yes
- Description of service interface
-
Please see https://www.zendesk.com/support/features/
https://support.zendesk.com/hc/en-us/articles/4408883355546-Introduction-to-the-Support-agent-interface-standard-agent-interface - Accessibility standards
- WCAG 2.2 AA
- Accessibility testing
- https://www.zendesk.com/company/policies-procedures/accessibility/
- User support accessibility
- WCAG 2.2 AA
- API
- Yes
- What users can and can't do using the API
-
Our REST API allows customers to interact with a variety of features and aspects of Zendesk products. The majority of the functionality available via our user interfaces can be interacted with using the API.
Customers/partners can use our Reseller API to create accounts. Or they can create an account on the web and then use the API. Users and agents can also be created via the API.
The API supports updates to tickets, users, and other key Zendesk data points. Customers can use various endpoints to make updates.
Full documentation, including the full list of supported endpoints, is available in our API documentation which can be found in the Zendesk Developer Portal on our website (https://developer.zendesk.com). - API documentation
- Yes
- API documentation formats
- HTML
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
-
Zendesk Support was created with three user groups in mind: Agents, Administrators and Managers. One of the core requirements of Zendesk is to enable suitably authorised members of these user groups to use, configure and enhance Zendesk without the need for development capabilities.
Areas of the Support solution that can be configured by authorised users to meet customers’ specific requirements include: (i) business processes and workflows, including Automations, Triggers, Macros; (ii) multi-channel capabilities, including self service, email, chat, phone, social media; (iii) analytics; (iv) consumer/customer facing Help Centre functionality and user interface; (v) knowledge content management; (vi) native mobile apps; and (vii) Community.
Additionally, Zendesk’s extensive SDK and API support allows more technical users to extend the power of the solution through the development of specific apps and integrations. For example: (i) Mobile SDK allows for support of Android and iOS capability within your own mobile apps; and (ii) the Zendesk APIs allow customers to extend the solution’s capabilities through integration with external systems, as well as enriching Zendesk data with data from third party sources to provide an enhanced consumer/customer experience.
Scaling
- Independence of resources
- Zendesk is fully on the cloud, as a SaaS-based, multi-tenant solution. Zendesk uses a fully redundant, distributed, and automated environment consisting of geographically separate Availability Zones running multiple, self-sustaining instances of the Zendesk application. As a precaution, our cloud provider has additional space and power to add capacity to the Availability Zones should one of the data centers become unrecoverable in a disaster.
Analytics
- Service usage metrics
- Yes
- Metrics types
-
Zendesk provides prebuilt real-time operational dashboards supporting monitoring of KPIs for the following interrelated areas: (i) customer satisfaction; (ii) support operations; (iii) agent/team performance; (iv) knowledge base usage; (v) community usage; (vi) search effectiveness/ticket deflection.
Each area has a set of 4-6 KPIs, displayed in dashboard headlines and graphs. Prebuilt dashboards can be filtered to time intervals ranging from the last 24 hours up to the last 90 days.
Applicable KPIs, e.g. solved tickets, first reply time, customer satisfaction and agent touches, can be monitored in aggregated headline reports and graphs (also available in pre-built leaderboards by agent or team). - Reporting types
-
- API access
- Real-time dashboards
- Regular reports
- Resource tagging
- Yes
- FOCUS resource tagging
- No
Supplier type
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Baseline Personnel Security Standard (BPSS)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- Other locations
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 4.0)
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- ‘IT Health Check’ performed by a CREST-approved service provider
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v4.0
- Physical access control, complying with SSAE-18 / ISAE 3402
- Physical access control, complying with another standard
- Encryption of all physical media
- Scale, obfuscating techniques, or data storage sharding
- Data sanitisation process
- Yes
- Data sanitisation type
- Deleted data can’t be directly accessed / Cryptographic Erasure
- Equipment disposal approach
- A third-party destruction service
Data importing and exporting
- Data export approach
- Service Data can be exported using the Zendesk API (as further described on the Zendesk Developer Portal - https://developer.zendesk.com). Administrators on Professional and Enterprise Support service plans may also export Service Data via the user interface once they have enabled data export on their account. Account owners can enable data export functionality by emailing support@zendesk.com.
- Data export formats
-
- CSV
- Other
- Other data export formats
- XML
- Data import formats
-
- CSV
- Other
- Other data import formats
- XML
Data-in-transit protection
- Data protection between buyer and supplier networks
- TLS (version 1.2 or above)
- Data protection within supplier network
- Other
- Other protection within supplier network
- Our network is protected by redundant layer 7 firewalls, best-in-class router technology, secure HTTPS transport over public networks, regular audits, and network intrusion detection/prevention technologies (IDS/IPS) that monitor and block malicious traffic and network attacks. Major application data flow ingress and egress points are monitored with Intrusion Detection Systems (IDS) or Intrusion Prevention Systems (IPS). In addition to our own capabilities and tools, we contract with on-demand DDoS scrubbing providers to mitigate Distributed Denial of Service (DDoS) attacks. Network security scanning gives us deep insight for quick identification of out-of-compliance or potentially vulnerable systems.
Availability and resilience
- Guaranteed availability
- We use commercially reasonable efforts to make our service available 24 hours a day, 7 days a week, except during planned downtime and in the event of a force majeure. We guarantee 99.9% availability of Zendesk Support and Zendesk Chat to purchasers of our Priority Customer Support Add-On, in accordance with the terms applicable to that Add-On.
- Approach to resilience
- We have developed a risk framework and strategy that accounts for the evaluation of our facilities, technology, applications, data, processes and overall organization to ensure our risk mitigation strategy operates at multiple levels with broad coverage. Zendesk uses a fully redundant, distributed, and automated environment consisting of geographically separate data centers running multiple, self-sustaining instances of the Zendesk application. As a precaution, we have additional space and power to add capacity to our data centers should one data center become unrecoverable in a disaster. We use multiple Internet service providers, connected through diverse paths entering the facilities at physically secure, separate locations. This redundant mesh-edge network design delivers robust networking through a number of paths. Our database data is stored on efficient flash memory devices with multiple servers per database cluster. Any hardware component failures are handled quickly and easily with automated builds and deploys. Our strict backup regime helps protect customer data should we experience a major incident. Key source data for standard Zendesk accounts is backed up daily, which includes both local and off-site storage.
- Outage reporting
- Service impacts are coordinated through our cross-functional Incident Response process. As a key part of this process, impacts to service are communicated through our System Status page, Twitter, and our Zendesk Help Center (available on the Zendesk Support website, https://support.zendesk.com/hc/en-us). The process includes appropriate update frequency, post-event follow up, and ability to escalate for additional information.
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- Multi-Factor Authentication (MFA)
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Dedicated link (for example VPN)
- Username or password
- Other
- Other user authentication
- Additional authentication methods are available for Zendesk Support, depending on the service plan to which a customer is subscribed, including the following: SSO, SAML, Active Directory SSO, configurable password requirements, and IP restrictions.
- Access restrictions in management interfaces and support channels
- Zendesk leverages the following management access methods: (i) dedicated devices on a segregated network; (ii) dedicated services for community service management; and (iii) service management via bastion hosts.
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- Multi-Factor Authentication (MFA)
- Identity federation with existing provider (for example Google Apps)
- Dedicated link (for example VPN)
- Username or password
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- At least 12 months
- Access to supplier activity audit information
- No audit information available
- How long system logs are stored for
- At least 12 months
Security governance
- Named board-level person responsible for service security
- Yes
- Software Security Code of Practice
- Yes
- Security governance certified
- Yes
- Security governance standards
-
- ISO/IEC 27001
- Other
- Other security governance standards
- SOC 2 Type II, ISO 27018:2019, ISO 27701:2019, ISO 27017:2015, Cyber Essentials, Cyber Essentials Plus, CSA STAR AI Levels 1 & 2
- Information security policies and processes
-
Zendesk has a full suite of security policies, including: (i) Information Security Policy; (ii) Security Incident Response Policy; (iii) Production Network Security Monitoring Policy; (iv) Production Network Change Management Policy; (v) Production Network Access Control Policy; and (vi) Information Management Standard.
All policies are reviewed at least annually, or in real time if necessary.
Assurances are obtained by independent third party auditing of our security controls.
In terms of reporting structure, the various security teams (Incident Response, Security Compliance, Network Security, Threat Intelligence, Secure Development, Application Security, and R&D) report to the SVP Chief Trust Security Officer.
Security policies are part of mandatory training and such training is backed up by internal tests including routine attempts to socially engineer our staff.
Operational security
- Configuration and change management standard
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Configuration and change management approach
-
Zendesk follows change control procedures for all system/software configuration changes, including: (i) documenting change impact (operational impact; security impact on major projects); (ii) peer review for technical scope; (iii) management review for timing and impact scope (segregation of change-management duties); (iv) testing of operational functionality (pre- and post-testing); (v) back-out procedures; (vi) change documentation (logs, etc); (vii) tracking of code changes and infrastructure components via code versioning tool or Ops related tickets. Changes are recorded and kept for auditing purposes.
Approvals are required for all changes. For network devices, approvals are required before ports can be opened to that device. - Vulnerability management type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Vulnerability management approach
-
We assess and obtain information regarding potential threats in the following ways: (i) continuous dynamic scanning for vulnerabilities on live applications; (ii) static code analysis upon commits to our code bases; (iii) third-party penetration tests; (iv) dedicated Security Personnel; (v) public "bug bounty”; (vi) third party infrastructure scanning.
Zendesk maintains documented SLAs for bug fixes which are in line with industry standards. - Protective monitoring type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Protective monitoring approach
-
We digest many sources of potential vulnerabilities for product and infrastructure, including: (i) code scans; (ii) network scans; (iii) penetration tests; (iv) bug bounty; (v) threat intel; and (vi) QA testing.
All of these sources feed into ticketing processes for validation, risk-ranking, assignment, and tracking.
We investigate and respond as necessary to any incidents or potential compromises immediately. - Incident management type
- Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
- Post-quantum cryptography secure
- No
- Incident management approach
-
We have a documented Security Incident Response Policy. This Policy contains run-books for common event types.
Subscribers may report incidents via customer ticket, email to security@zendesk.com, or internally by Zendesk personnel via communication channels directly to Security Operations.
Incident reports are provided to affected customers based on their contractual notification terms for such incidents; otherwise, an email to the account owner is used.
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)
Public sector networks
- Connection to public sector networks
- No
Pricing
- Discount for educational organisations
- Yes
- Free trial available
- Yes
- Description of free trial
- Users can register for a trial on various Support, Talk or Chat service plans. There are no limitations to the functionality available during the trial. Trials can be converted to a Production environment, without the loss of any configuration or data, if required at the successful completion of the trial.
- Link to free trial
- https://www.zendesk.com/product/pricing/
Discount percentage by annual call-off contract value (excluding VAT)
- Less than £250,000
- 0%
- Between £250,000 and £500,000
- 2%
- Between £500,001 and £1,000,000
- 5%
- Between £1,000,001 and £2,500,000
- 7%
- Between £2,500,001 and £5,000,000
- 10%
- Over £5,000,001
- 15%
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- ISO/IEC 27001 accredited by
- EY CertifyPoint
- ISO/IEC 27001 accreditation date
- Wednesday 18 April 2018
- What the ISO/IEC 27001 doesn’t cover
-
ISO/IEC 27001:2022 certification covers the Information Security Management System (ISMS) governing the development, operations, maintenance, and delivery of Zendesk, Inc.’s SaaS products.
In-Scope Products
The certification applies to the Zendesk Suite, including:
Core Features: Ticketing, Help Center, Messaging, Live Chat, Voice, Reporting, and Platform.
Intelligence: AI Agent Essential, AI and Automation, and Zendesk Copilot.
Connectivity: Mobile Apps/SDKs and Sunshine Conversations.
Add-Ons: Advanced Data Privacy and Protection (ADPP), Workforce Management, Data Storage, High Volume API, and Premium Sandbox.
Legacy Add-Ons: Including Productivity Pack, Advanced Compliance, and Data Center Location.
In-Scope Teams
Security management is integrated across three primary global divisions:
Engineering: Manages product architecture, design, and overall application delivery.
Foundation: Oversees production infrastructure, including compute, storage, edge, and system reliability.
Trust & Security: Protects customer data and employees through product security, governance, risk, compliance, and cyber defense.
Note: Corporate environments and any products or entities not explicitly listed above are excluded from this scope. - ISO 28000:2022 certification
- No
- ISO 9001 certification
- No
- Quality management systems (QMS)
- No
- CSA STAR certification
- Yes
- CSA STAR accreditation date
- Tuesday 25 March 2014
- CSA STAR certification level
- Level 1: CSA STAR Self-Assessment
- What the CSA STAR doesn’t cover
- https://cloudsecurityalliance.org/star/registry/zendesk/services/zendesk
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber Essentials Certificate Number
- 9420186a-cb52-4e1a-ae56-8bdda2b2132b
- Cyber essentials plus
- Yes
- Cyber Essentials Plus Certificate Number
- 51256279-5254-45bd-b5f1-d703cf7d3a24
- Other security certifications
- Yes
- Any other security certifications
-
- SOC 2 Type II Report
- ISO 27017
- ISO 27018
- ISO 27001
- ISO 42001
Social value
- Mission: Kick start economic growth
-
To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
- Plans to engage the contract workforce in deciding the most important workplace issues to address
- Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
- Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
- Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
- Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
- Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
- Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
- Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
- Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Volunteering opportunities for staff
- Mission: Break down barriers to opportunity
-
By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 6: Employment and training: For those who face barriers to employment
- Introducing transparency to pay and reward processes
- Working conditions which promote an inclusive working environment and promote retention and progression
- Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.
- Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
- Mission: Build an NHS fit for the future
-
That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.
Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.
- Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
- Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
- Actions to invest in the physical and mental health and wellbeing of the contract workforce