Skip to main content
Qualtrics Home page

Legal resources for suppliers

On this page, you can find a summary of how we will contract with you and locate helpful resources on Qualtrics’ supplier requirements.

Your contract with Qualtrics will be made up of the
following documents (listed in order of precedence):

1. Work Order

Each time Qualtrics purchases any goods and/or services from a supplier, Qualtrics enters into a Work Order that details the scope of work, deliverables, amounts payable, and other payment specific instructions agreed upon by Qualtrics and the supplier.

Supplier pyramid with the work order section emphasized.

2. Qualtrics Contractor Agreement on the Commissioned Processing of Personal Data (“CDPA”), if applicable

The CDPA outlines a supplier’s data privacy and security obligations related to their processing of personal data on behalf of Qualtrics or Qualtrics customers and/or partners in connection with the supplier’s goods and/or services.

CONTRACTOR AGREEMENT ON THE COMMISSIONED PROCESSING OF PERSONAL DATA

3. Qualtrics Contractor Business Associate Agreement (“CBAA”), if applicable

The CBAA outlines a supplier’s HIPAA compliance obligations related to their processing of Protected Health Information on behalf of Qualtrics or Qualtrics customers and/or partners in connection with the supplier’s goods and/or services.

Contractor business associate agreement

4. Qualtrics Master Services Agreement (“MSA”)

The MSA governs the relationship between Qualtrics and a supplier, including a supplier’s provision of goods and services provided to Qualtrics under Work Orders.

Master Services Agreement

Other resources

Qualtrics Supplier Code of Conduct

Qualtrics is committed to integrating sustainability and integrity into Qualtrics’ core business and expects our supplier base to play a critical role in this goal and follow these guidelines in their conduct of business.

Qualtrics Technical and Organizational Measures for Suppliers, Contractors and Subprocessors

Suppliers must implement and meet these security control measures whenever processing personal data on behalf of Qualtrics or Qualtrics customers and/or partners.