What it says
What this says
As at Fri 9 Oct 2026Completed security questionnaire dated 24 Dec 2024, answered by Hannah Lowe for the Growth tier security review. It states TLS 1.3 in transit, 90-day audit log retention and security event notice within four business hours. It states no price or availability figure.
What it is: a BG-Demo answer sheet completed by Hannah Lowe, Solutions Engineer, on 24 Dec 2024 for Ardfinnan Freight Services. It is filed as final and the text carries no draft marking.
Commits: the answers state that "We hold SOC 2 Type II certification" and that BG-Demo "will notify you of any security events within four business hours". Audit logs are "retained for ninety days".
Unusual: nothing departs from standard terms. The backup answer is that "We do not hold independent backups", which relies on Snowflake's backup policy and may matter to a regulated or cautious reader.
Not settled: it is not a contract or order form and names no signatory for the customer. It is nearly two years old, so current controls and certification status are not confirmed here.
As found in this document
As at Fri 9 Oct 2026- Data encryption in transitTLS 1.3Source: the AI read of this record
- Audit log retentionninety daysSource: the AI read of this record
- Security event notificationwithin four business hoursSource: the AI read of this record
- ComplianceSOC 2 Type II certificationSource: the AI read of this record
- Backup and recoverySnowflake's backup policy; no independent backups heldSource: the AI read of this record
The document
Body
Ardfinnan Freight Services - Security Questionnaire
Completed: 24 Dec 2024
This questionnaire has been completed by Hannah Lowe (Solutions Engineer, BG-Demo) as part of the security review for the Growth tier implementation.
| Question | Answer |
|---|---|
| Data encryption in transit | All data transmitted to the BG-Demo cloud layer uses TLS 1.3 encryption. |
| Data encryption at rest | Data stored in your Snowflake account is encrypted using Snowflake's native encryption with keys under your control. |
| Access controls | Role-based access control is enforced. Admins manage permissions through the platform. |
| Audit logging | All access and system changes are logged. Logs are retained for ninety days and are available for audit. |
| Data residency | The brain runs inside your Snowflake account. No data is copied or stored outside your infrastructure. |
| Incident response | We have a documented incident response process and will notify you of any security events within four business hours. |
| Backup and recovery | Your data is protected by Snowflake's backup policy. We do not hold independent backups. |
| Compliance | We hold |
Read the whole document (1,487 characters)
SOC 2 Type II certification. Enterprise tier customers may request additional attestations. |
Summary
The Growth tier meets standard security requirements for mid-market organisations. No additional controls or exceptions are required for implementation to proceed.
Thanks, Hannah
Unusual terms
As at Fri 9 Oct 2026- No independent backups held by BG-Demo