Skip to main content Skip to complementary content
Qlik Resources

Qlik Cloud security, compliance, and privacy

Qlik adheres to a variety of international compliance and privacy standards. For a complete list, see Trust and security at Qlik.

Qlik Cloud Government compliance certifications

Qlik Cloud Government has been purpose built for the U.S. Public Sector and designed to meet the security and compliance standards of the Federal Risk and Authorization Management Program (FedRAMP). FedRAMP provides .a standardized approach to security authorizations for Cloud Service Offerings, accelerating cloud adoption across the U.S. Public Sector.

  • FedRAMP Status: Qlik Cloud Government has achieved FedRAMP's authorized designation at the Moderate Impact Level (IL). It is listed in the Marketplace under Authorized products.
    For more information see the FedRAMP Marketplace.

  • Department of Defense Status: Qlik Cloud Government has achieved the Department of Defense (DoD) IL 2.
    For more information, see the DoD Cloud Security Portal.

  • StateRAMP Status: Qlik Cloud Government has achieved the State Risk and Authorization Management Program (StateRAMP) Moderate Authorized status. StateRAMP simplifies security for U.S. State, Local, and Higher Education organizations by providing a standardized approach to security authorizations for Cloud Service Providers.
    For more information, see StateRAMP.

  • TX-RAMP Status: Qlik Cloud Government has achieved Texas Risk and Authorization Management Program (TX-RAMP) Level 2 Authorization supporting confidential agency data determined to be at the moderate or high impact level. The Texas Department of Information Resources (DIR) provides a standardized approach for security assessment, authorization, and continuous monitoring of cloud computing services that process the data of a state agency.
    For more information, see TX-RAMP.

  • ITAR Status: Qlik Cloud Government is compliant with the United States International Traffic in Arms Regulations(ITAR) for the handling of software and technical data controlled on the United States Munitions List (USML). Qlik Cloud Government provides an environment that is physically located in the U.S. and access to the environment is restricted to U.S. Persons thereby allowing qualified companies to use Qlik Cloud Government to transmit, process, and store protected articles and data subject to ITAR restrictions.
    For more information, see Directorate of Defense Trade Controls.

Qlik Cloud and HIPAA

The US Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a set of national standards to protect sensitive patient health information from being disclosed without the patient’s consent or knowledge. Qlik has successfully completed a SOC2 Type 2 + HITRUST attestation. The attestation evaluates the suitability of the design and operating effectiveness of Qlik’s internal controls related to the protection of Personal Health Information (PHI) and US HIPAA regulatory requirements. By using Customer Managed Keys along with features and tools in Qlik Cloud, customers can host PHI as defined in HIPAA. Customers must also enter into a HIPAA Business Associate Agreement (BAA) with Qlik.

For more information, see Healthcare analytics

Information noteQlik Sense Business does not support the use of Customer Managed Keys.
Information noteQlik Cloud Government and Qlik Sense Business are not covered by the HIPAA attestation.

For more information, see:

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – let us know how we can improve!

Leave your feedback here