Security page — Qualtrics

Cited by

Facts read from this source

• ISO 27001 Report an error

  “ISO 27001 proves your data is managed with rigorous global security practices”

• ISO 42001 Report an error

  “ISO 42001 (the world’s first standard for AI systems) validates responsible AI governance”

• Hitrust Report an error

  “HITRUST certification ensures that Qualtrics meets the most rigorous requirements for healthcare and beyond. It integrates HIPAA and other critical standards”

• SOC 2 type2 Report an error

  “SOC 2 Type 2 validates that Qualtrics operates with continuous, independent oversight of security, availability, and confidentiality”

• Sensitive data controls Report an error

  “Easily redact and/or restrict the gathering of sensitive data or Personally Identifiable Information (PII) across your organization”

• GDPR erasure controls Report an error

  “Quickly and easily comply with GDPR right to erasure requests. Delete personal data stored in survey responses, tickets, and contacts, regardless of data origination”

• Data retention backups Report an error

  “You decide what data you collect, retain, and delete. Frequent data backups to support recovery and all accounts are password protected with available complexity controls”

• SSO MFA Report an error

  “Make user management simple with single sign-on authentication. Add an additional security layer by enforcing multi-factor authentication for your users”

• Project approval controls Report an error

  “Control the quality and content of your studies with project controls. Implement a workflow that mirrors your processes”

• Admin reports Report an error

  “admin reports which highlight user engagement, activity, consumption, department-specific usage, and more”

• Security operations center Report an error

  “Our in-house Security Operations Center monitors the confidentiality, integrity, availability and performance of your data with sophisticated intrusion detection systems”

• Encryption in transit Report an error

  “we encrypt all data in transit using Hypertext Transfer Protocol Secure (HTTPS) and enforces HTTP Strict Transport Security (HSTS)”

• ISMS Report an error

  “Our Information Security Management System (ISMS) defines the overall security function at Qualtrics”

• Incident response plan Report an error

  “We have a thorough, documented plan for how to keep your data safe and secure if something goes wrong”

• Data confidentiality Report an error

  “All data is treated as highly confidential. Our proprietary, industry best-practice methods keep data safe from unauthorized users, even those within your organization”

• SOC 2 datacenter Report an error

  “An independent, up-to-date audit of data center service providers means your data is protected behind the latest technology and the best controls”

• Physical security Report an error

  “Perimeter defense and high-end firewall systems are all monitored 24/7 by dedicated security professionals. Quick failover points, redundant hardware, and nightly encrypted backups”

• Vulnerability disclosure Report an error

  “If you think you’ve found a vulnerability, see our Vulnerability Disclosure Program for how to report”

• Byok data isolation Report an error

  “applying an additional layer of encryption where you can bring your own key”

• Channels Report an error

  “Community Customer Success Hub Product documentation Developer resources Training and certification System status”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Academic Researcher Survey analysis & reporting
• The Academic Researcher Consent, GDPR & respondent data
• The Academic Researcher Hosting choice, teams & portability
• The Academic Researcher European sovereignty
• The Data Protection Officer Distribution, response collection & workflows
• The Data Protection Officer Survey analysis & reporting
• The Data Protection Officer Consent, GDPR & respondent data
• The Data Protection Officer Hosting choice, teams & portability
• The Data Protection Officer European sovereignty
• The HR Lead Survey analysis & reporting
• The HR Lead Consent, GDPR & respondent data
• The HR Lead Hosting choice, teams & portability
• The HR Lead European sovereignty
• The Market Researcher Distribution, response collection & workflows
• The Market Researcher Survey analysis & reporting
• The Market Researcher Consent, GDPR & respondent data
• The Market Researcher Hosting choice, teams & portability
• The Market Researcher European sovereignty
• The Operations Manager Survey analysis & reporting
• The Operations Manager Consent, GDPR & respondent data
• The Operations Manager Hosting choice, teams & portability
• The Operations Manager European sovereignty
• The Skeptic Distribution, response collection & workflows
• The Skeptic Survey analysis & reporting
• The Skeptic Consent, GDPR & respondent data
• The Skeptic Hosting choice, teams & portability
• The Skeptic European sovereignty