If the Qolsys IQ Panel 2 is disarming by itself, verify the following. 

Verify if Bluetooth disarming is enabled

The Qolsys IQ Panel 2 has the ability to enable a Bluetooth device to disarm the system from an armed away state when it comes within range of the panel. When the system is disarmed by the Bluetooth device, the arming event appears in the event history as disarmed by the Bluetooth device's name (e.g., partition 1 Disarmed by John Doe's iPhone). 

Bluetooth devices display in the customer's equipment list as a Peripheral. The following is an example of a Bluetooth device displayed on the Partner Portal: 

If the customer does not want the system to disarm via the Bluetooth device, they can disable it using the panel. For more information about enabling/disabling Bluetooth disarming, see Configure Bluetooth disarming on the Qolsys IQ Panel 2. 

Verify if schedules are enabled 

If the customer's service package has the Scheduled Arm/Disarm add-on, verify if the schedules are causing the disarming event. For more information about configuring schedules, see Create arming schedules.