FedRAMP Authorized — Moderate Impact

Qlik Government Cloud by Qlik. 6 compliance features verified.

Analytics & BI

Qlik Government Cloud

by Qlik

Moderate ImpactAuthorized

Impact Level

Moderate

Status

Authorized

Pricing

mid market

Authorization Date: November 30, 2021 | Sponsoring Agency: GSA

Overview

Qlik Government Cloud provides FedRAMP Moderate authorized analytics and data integration for government organizations. It features an associative analytics engine that enables exploratory data discovery without predefined queries. The platform combines data integration, analytics, and AI in a single environment.

Key Features

FedRAMP Moderate baseline controls
Associative analytics engine
AI-powered insight suggestions
Data integration and QDI
Governed self-service analytics
Embedded analytics capabilities

Certifications & Authorizations

FedRAMP Moderate Authorization (3PAO assessed)SOC 2 Type IIISO 27001:2013FIPS 140-2 Level 1 (cryptographic modules)DoD SRG IL-2 compliantHIPAA compliantGDPR compliant data processing controls

Deployment Options

AWS GovCloud (US-West) — FedRAMP Moderate multi-tenant SaaS
AWS GovCloud (US-East) — FedRAMP Moderate with government-only tenancy
Qlik Government Cloud dedicated instance — single-tenant architecture
Hybrid deployment — cloud analytics with on-premises data sources via Qlik Data Gateway
Air-gapped deployment — disconnected analytics environment for classified data processing
Multi-region deployment — distributed analytics across multiple AWS GovCloud regions

NIST 800-171 Compliance Coverage

87% of controls covered

How to Procure Qlik Government Cloud for Defense Contracts

Qlik Government Cloud is available through GSA MAS Contract 47QSWA18D00BC and SEWP V Contract NNG15SC03B, providing streamlined procurement for federal agencies. Government pricing includes volume discounts typically 15-25% below commercial rates, with educational/nonprofit pricing available for eligible organizations. For SSP development, the authorization boundary encompasses the Qlik Sense Enterprise SaaS platform, QlikView AccessPoint, and Qlik NPrinting reporting services within AWS GovCloud infrastructure. Contracting officers must approve the data processing addendum (DPA), business associate agreement if handling PHI, and interconnection security agreements for hybrid deployments connecting to agency networks. The FedRAMP P-ATO from FedRAMP PMO covers the core platform, but agencies must complete their own ATO process typically requiring 4-6 months including security assessment and C&A documentation. For CMMC assessment boundary inclusion, document Qlik Government Cloud as an external service provider requiring contractor oversight of data flows, access controls, and incident response coordination. Ensure the SOW specifies government community cloud deployment to maintain DFARS compliance for CUI processing.

Compliance Cross-References

Qlik Government Cloud's FedRAMP Moderate authorization directly satisfies DFARS 252.204-7012 requirements for adequate security when processing CUI, as the platform implements NIST SP 800-171 controls including Access Control (AC-1 through AC-22), System and Communications Protection (SC-1 through SC-23), and Audit and Accountability (AU-1 through AU-12). The AWS GovCloud deployment aligns with DFARS 252.239-7010 cloud computing security requirements, providing required incident reporting, data location restrictions, and government access provisions. For CMMC Level 2 compliance, the platform addresses Access Control (AC), Audit and Accountability (AU), Configuration Management (CM), Identification and Authentication (IA), System and Communications Protection (SC), and System and Information Integrity (SI) domains through inherited cloud controls and application-level security features. DoD Cloud Computing SRG IL-2 compliance is achieved through FedRAMP Moderate baseline implementation, supporting CUI processing requirements while maintaining appropriate security categorization for defense contractor analytics workloads.

Defense Contractor Use Case

Defense contractors use Qlik Government for interactive data exploration and discovery, particularly when analyzing complex datasets that require flexible, non-linear analysis approaches.

Frequently Asked Questions

What is the FedRAMP authorization level for Qlik Government Cloud?

Qlik Government Cloud is authorized at the FedRAMP Moderate impact level, with authorization granted on 2021-11-30 sponsored by GSA. The FedRAMP Moderate baseline includes approximately 325 security controls covering confidentiality, integrity, and availability.

Can defense contractors use Qlik Government Cloud for CUI?

Qlik Government Cloud is authorized at the FedRAMP Moderate baseline. While FedRAMP Moderate covers a broad range of government data, defense contractors handling CUI should carefully evaluate whether Moderate controls meet their specific DFARS 252.204-7012 and NIST 800-171 requirements. Some CUI categories may require FedRAMP High authorization depending on the sensitivity of the data and contract requirements.

How does Qlik Government Cloud pricing compare to commercial?

Qlik Government Cloud government pricing is generally competitive with commercial pricing, though the government edition may carry a premium of 10-20% to cover FedRAMP compliance and dedicated infrastructure costs. Mid-market organizations can often access government pricing through GSA Schedule contracts or reseller partners. Contact Qlik for a quote tailored to your organization size and requirements.

Browse All FedRAMP Authorized Tools

Search and filter 80+ FedRAMP authorized products for your defense contracting needs.

Open FedRAMP Finder

Get a defensible CUI architecture

This Qlik Government Cloud FedRAMP profile flags the gaps. The next step is a compliance architecture review where we map your data flows to FedRAMP-authorized alternatives and CMMC-aligned controls.

Schedule architecture review

Related: how much CMMC certification costs — DoD’s own priced figures