{
  "slug": "qualtrics",
  "category": "forms",
  "name": "Qualtrics",
  "description": "Survey and experience management platform for research, customer and employee feedback, run by Qualtrics LLC in the United States.",
  "website": "https://www.qualtrics.com",
  "license": null,
  "platforms": [
    "web"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 28,
  "coverage": 100,
  "summary": "Qualtrics scores 28 out of 100 (grade F) on the forms and surveys criteria. It meets 1 of 8 criteria: TLS configuration. It partly meets no ads or data sales, independent audit and security headers. It does not meet open source, no trackers or telemetry, transparency report and tells users about requests. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.",
  "url": "https://privacyratings.com/forms/qualtrics/",
  "markdown": "https://privacyratings.com/forms/qualtrics/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://www.qualtrics.com/privacy-statement/",
      "note": "The privacy statement says third-party advertising companies collect information on the website through cookies, and the website loads Google Tag Manager."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.qualtrics.com/privacy-statement/",
      "note": "Funded by subscriptions, and the privacy statement says personal information is not sold. It is shared with advertising partners, such as Google, that show targeted Qualtrics ads."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.qualtrics.com/platform/security/",
      "note": "States SOC 2 Type 2, ISO 27001 and HITRUST certifications and FedRAMP High authorization, but the reports are not public."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "no",
      "evidence": "https://www.qualtrics.com/privacy-statement/",
      "note": "No transparency report is published. The privacy statement only lists law enforcement and government authorities as possible recipients."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published policy on notifying users about data requests."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=login.qualtrics.com&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=login.qualtrics.com",
      "note": "Grade B (75/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "B",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      },
      {
        "name": "OneTrust",
        "host": "cdn.cookielaw.org",
        "effect": "none"
      },
      {
        "name": "VWO",
        "host": "dev.visualwebsiteoptimizer.com",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T07:32:52.839Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}