Kielderside Growth Agency - Security Questionnaire
Documentfinal Kielderside Growth Agency · security questionnaire · final · 10 Apr 2026
Final version one security questionnaire for a prospect evaluating Enterprise in a public tender, completed 10 Apr 2026. It states no price and no contract is in place. It cites the nightly refresh by 07:00 and Enterprise freshness credits, with no figures for availability or P1 time.
What it says
What this says
As at Fri 9 Oct 2026Final version one security questionnaire for a prospect evaluating Enterprise in a public tender, completed 10 Apr 2026. It states no price and no contract is in place. It cites the nightly refresh by 07:00 and Enterprise freshness credits, with no figures for availability or P1 time.
What it is: a BG-Demo answer sheet to the agency's security questions, prepared by Theo Gallagher with Tom Ashdown as commercial contact. The cover says "Prospect. No contract is in place, so no contracted recurring revenue is stated."
Commits: it describes design and sales terms, not a signed obligation. It says "A nightly refresh completes by 07:00 customer local time on business days, on every tier" and that Enterprise is credited for freshness breaches.
Unusual: nothing off the standard terms. Availability and P1 response are referred to the service level schedule without figures. EU or US residency is an add-on to be written into the order form.
Not settled: the platform team confirmation for AI processing (DATA-C) is still to be attached on request. The residency requirement, the exit plan wording, price and any order form are not settled. The document does not show whether the agency proceeded.
As found in this document
As at Fri 9 Oct 2026- Nightly refreshA nightly refresh completes by 07:00 customer local time on business days, on every tier.Source: the AI read of this record
- Enterprise service creditsEnterprise is also credited for data freshness breaches, not only availability.Source: the AI read of this record
- AvailabilityThe Enterprise availability level, with service credits where it is missed.Source: the AI read of this record
- P1 responseThe Enterprise first-response level for priority one issues, which is the fastest of our tiers.Source: the AI read of this record
Body
Kielderside Growth Agency - Security Questionnaire
Status: Final, version one Completed: 10 Apr 2026 Prepared by: Theo Gallagher, Solutions Engineer, BG-Demo Commercial contact: Tom Ashdown, BG-Demo Tier under evaluation: Enterprise
Sheet: Cover
| Item | Detail |
|---|---|
| Respondent | BG-Demo, a London data business |
| Product | B-Viz, one AI-queryable layer over a customer's CRM, calls, emails, tickets, usage, finance and HR data |
| Buyer | Kielderside Growth Agency, Newcastle upon Tyne |
| Context | Public tender. The agency wants account managers, the enquiries line and the grants team to see each business in one view. |
| Contract position | Prospect. No contract is in place, so no contracted recurring revenue is stated. |
Answers below describe how B-Viz is designed and sold. Where a control needs a dated document, we say we can evidence that and name the item. Nothing here describes a control that is not in place.
Sheet: Hosting and data location
Read the whole document (4,979 characters)
| Ref | Question | Answer | Evidence offered |
|---|---|---|---|
| HOST-A | Where is our data stored and processed? | B-Viz is built and run inside the customer's own Snowflake account. The agency's data stays in the agency's account and is not copied into a BG-Demo-owned data store. | Architecture note in the security review pack |
| HOST-B | Can data residency be fixed to a region? | Yes. Dedicated EU or US data residency is available as an add-on. The agency should state its residency requirement in the tender response so it can be written into the order form. | Add-on description |
| HOST-C | Who controls the underlying platform? | The customer controls its Snowflake account, its roles and its network settings. BG-Demo works inside the access the customer grants. | Access model summary |
Sheet: Access control
| Ref | Question | Answer | Evidence offered |
|---|---|---|---|
| ACC-A | Is single sign-on supported? | Yes. Enterprise includes SSO and SCIM, so joiners, movers and leavers can be driven from the agency's identity provider. | Enterprise tier description |
| ACC-B | How is least privilege applied across teams? | Account managers, the enquiries line and the grants team can be given separate views of the same business record. Access follows the roles the agency defines. | Role design workshop output, produced during implementation |
| ACC-C | How are BG-Demo staff given access? | Only through access the agency grants, and it can be withdrawn by the agency at any time. | Access model summary |
Sheet: Data handling
| Ref | Question | Answer | Evidence offered |
|---|---|---|---|
| DATA-A | Which source systems would connect? | The agency chooses connectors from the supported systems, for example Salesforce, HubSpot, Zendesk, Microsoft 365 or SharePoint. Enterprise carries the largest connector allowance of any tier. | Connector list |
| DATA-B | How fresh is the data? | A nightly refresh completes by 07:00 customer local time on business days, on every tier. Enterprise is also credited for data freshness breaches, not only availability. | Service level schedule |
| DATA-C | Is AI querying done on data leaving our environment? | We will not overstate this. The design keeps data in the customer's Snowflake account. The detail of model processing is confirmed with our platform team and set out in the review pack, not asserted here. | Platform team written confirmation, supplied on request |
Sheet: Service and support
| Ref | Question | Answer | Evidence offered |
|---|---|---|---|
| SVC-A | What availability is committed? | The Enterprise availability level, with service credits where it is missed. | Service level schedule |
| SVC-B | What is the incident response commitment? | The Enterprise first-response level for priority one issues, which is the fastest of our tiers. | Service level schedule |
| SVC-C | Is there a test environment? | The Sandbox and Premium support, with a named engineer, are available on Enterprise from price book version two. | Price book entry |
Sheet: Exit and continuity
| Ref | Question | Answer | Evidence offered |
|---|---|---|---|
| EXIT-A | What happens to our data if we leave? | Because the data sits in the agency's Snowflake account, it remains with the agency. BG-Demo access is removed and the connectors are switched off. | Exit steps, written into the order form |
| EXIT-B | Is there a documented exit plan? | Yes. We will agree it with the agency during contracting, and it forms part of the security review support included in Enterprise implementation. | Exit plan, issued at contract |
Open findings and owners
No open findings remain on this questionnaire.
| Item | Owner | Next step |
|---|---|---|
| Platform team confirmation for DATA-C | Theo Gallagher | Attach to the review pack when the agency asks for it |
| Residency requirement from the tender | Tom Ashdown | Agree wording for the order form if the agency proceeds |
Thanks, Theo