SOC2 Type 2 Compliance for Qlik product enviroments

[kdmarkee]

Hello.  I haven't found anything helpful in the Community nor Support Portal regarding this subject and am really hoping someone out there has had to address this, that being... how to maintain one's Qlik product environments according to SOC2 Type 2 compliance.  These a big and vague questions, but... (1) Can anyone offer insight into what we need to consider to be compliant when we have internal and external clients who access QlikView apps and receive NPrinting reports?  (2) Is anyone willing to share their process, tools, how to's, etc to accomplish those compliance items? I'd really like to think there are other companies out there that have had clients require this type of compliance of them, and I'm hoping there are people out there willing to share their knowledge on this.  Thanks!

[Brett_Bleess · Accepted solution]

You will likely need to reach out to a accounting-related firm in order to get the assistance you wish, as they are the ones that perform these services as far as certification, but they would also consult on the preparations needed to get ready for the certification too I believe.  

We do have SOC2 certification as you will see in the following link, but every case is going to be different depending upon what you are trying to certify etc.

https://www.qlik.com/us/trust

Sorry I do not have anything better for you.

Regards,
Brett

[KeithSteward]

Hi Brett, I emailed Security and will await a response but are you aware if Qlik has a SOC 1 Type II report? I was able to download the latest SOC 3 report but I am seeking the SOC 1 report and potentially a SOC 2 if not SOC 1 is present. Thanks!