What was said
What this says
As at Fri 9 Oct 2026Theo Gallagher walked Lynsey Bainbridge through data residency, permissions and logging for her IT team. Two security items remain open, and Theo committed to confirm the subprocessor date in writing by the end of the week.
What happened: Theo showed the architecture page and said the data stays in Bilsdale Housing's own Snowflake account. He covered role-based access, query logging and leaver handling, then ran a search with source references.
Customer view: Lynsey said the permissions point was one her IT team asked three times, and that her team wants the references to check answers. She ended with "that's really clear".
Commercial: Asking about the Growth tier shows she is scoping that tier. Theo said the full security review sits with Enterprise, while Growth gets the standard pack and questionnaire.
Watch: Two items are open: data retention, owned by Theo, and the subprocessor list, with the platform team. The leaver answer is still draft.
Themes
As at Fri 9 Oct 2026Who was there
BG-Demo
Them
Follow-up
Next steps
As at Fri 9 Oct 2026- Theo Gallagher to confirm the subprocessor date in writing by the end of the week.
- Theo to send the open items with owners and the pack with control references.
- Lynsey to review the pack and return any further questions.
Risks
As at Fri 9 Oct 2026- The data retention answer and the subprocessor list are both still open with the IT team.
- The leaver-access answer is only a draft and Lynsey had not read the full IT question list.
Opportunities
As at Fri 9 Oct 2026- Lynsey is scoping the Growth tier, so closing the security items could move the deal forward.
Transcript
- Sophie LingAfternoon Lynsey. Theo's joining today to go through the demo and the security questions your IT team raised.
- Lynsey BainbridgeAfternoon. Yes, they've sent over a list, it's quite long. I'll be honest, I haven't read all of it.
- Theo GallagherThat's fine, we'll go through it in order. First, I'll list the open items and who owns each, so nothing gets lost.
- Theo GallagherWe have two open items from your IT team. The data retention answer is with me, and the subprocessor list is with the platform team, who I'll chase after this call.
- Lynsey BainbridgeOkay. When do you think the subprocessor list will be ready?
- Theo GallagherI don't want to guess. Here is the dated commitment I can give you: I'll confirm the date in writing by the end of the week, once the platform team has replied.
- Sophie LingThat sounds sensible. Theo, shall we start with the demo, or with the questionnaire?
- Theo GallagherDemo first, because the questionnaire answers make more sense once you have seen where the data sits. Sophie, can you share the screen?
- Sophie LingYes, it's up. Can you see the architecture page?
- Theo GallagherGot it. This shows the data staying inside your own Snowflake account. The layer reads from your systems, and nothing is copied out to our side for queries.
- Lynsey BainbridgeMm. So where is the question answered, then? In your environment or ours?
- Theo GallagherIn your environment. We can evidence that with the control reference in the pack, which I'll send. I'd rather you read it than take my word for it.
- Lynsey BainbridgeGood. Can we go through the permissions? That's the question my IT team asked three times.
- Theo GallagherYes. Number one, access follows your existing roles. Number two, a user only sees the complaint records their role allows. Number three, every query is logged, so you can see who asked what.
- Lynsey BainbridgeRight, the logs are useful. And what about leavers? If someone leaves, does their access go straight away?
- Theo GallagherIt follows your identity provider, so when the person is removed there, the access goes too. I'll put the exact steps in the draft answer, which is not final yet, so I'll mark it as draft.
- Sophie LingTheo, can you show the search quickly, so Lynsey can see the answer come back?
- Theo GallagherYes. I'll ask it the question about repairs and complaints on the sample records. There, it returns the list with the source references attached.
- Lynsey BainbridgeGood. My team would want the references, because that's how they check things.
- Theo GallagherExactly. The references point back to the source record, so anyone can check them. That's the whole point of keeping the answer tied to the data.
- Lynsey BainbridgeRight. Now, for the Growth tier, do we need the full security review, or is that only for the bigger tiers?
- Theo GallagherThe full security review sits with the Enterprise tier. For Growth, we send the standard security pack and answer the questionnaire, which is what we're doing now.
- Sophie LingLynsey, does that work for your team? I can check anything else you need on the commercial side.
- Lynsey BainbridgeMostly, yes. I'll look at the pack and come back with anything else. Theo, can you send the list of open items as well?
- Theo GallagherYes. I'll send the open items with their owners, the pack with control references, and the subprocessor date once it's confirmed. Thanks, Theo.
- Lynsey BainbridgeThanks Theo, that's really clear. Speak soon, bye.
- Sophie LingThanks both. Cheers.