Marlcliff Security Services - Security Questionnaire
Documentfinal Marlcliff Security Services · security questionnaire · final · 28 Mar 2025
A final security questionnaire completed by BG-Demo's Hannah Lowe on 28 Mar 2025 for Marlcliff's Growth tier evaluation. It is not a contract and states no price, availability figure or P1 response time. Five answers are still marked To confirm.
What it says
What this says
As at Fri 9 Oct 2026A final security questionnaire completed by BG-Demo's Hannah Lowe on 28 Mar 2025 for Marlcliff's Growth tier evaluation. It is not a contract and states no price, availability figure or P1 response time. Five answers are still marked To confirm.
What it is: a pre-sale questionnaire completed by Hannah Lowe, Solutions Engineer, for Marlcliff Security Services, Bristol. It states that it describes the Growth tier and marks where controls belong to Enterprise or to an add-on.
Commits: it sets no figures. It says the Growth service level in the order form applies, "with service credits for availability only", and that freshness "is not credited at Growth".
Unusual: nothing off the standard terms. It records that SSO and SCIM are "part of Enterprise, not Growth", and that dedicated EU or US data residency and Premium support are add-ons.
Not settled: certifications, penetration testing scope, incident notification and sub-processors are all To confirm. The evidence does not show whether Hannah Lowe sent the written answers, whether an order form followed, or whether SSO pushed Marlcliff towards Enterprise.
As found in this document
As at Fri 9 Oct 2026- Growth service creditswith service credits for availability onlySource: the AI read of this record
- Data freshness credit at GrowthFreshness is not credited at Growth.Source: the AI read of this record
- Nightly refreshintended to complete by the start of the working day, UK time, on business daysSource: the AI read of this record
Body
Marlcliff Security Services - Security Questionnaire
Status: Final, first version Completed on: Friday 28 March 2025 Completed by: Hannah Lowe, Solutions Engineer, BG-Demo Prepared for: Marlcliff Security Services, Bristol Tier under evaluation: Growth BG-Demo account owner: Lewis Kerr Customer success manager: Daniel Okafor
Purpose and scope
Marlcliff Security Services is evaluating B-Viz on the Growth tier, so that account managers, the control room and credit control can see each client's sites, incidents, calls and invoices together. This questionnaire records how B-Viz handles data and access for that use.
To be precise, these answers describe the Growth tier. Where a control belongs to a different tier, or is an optional add-on, the answer says so. Where an answer depends on a configuration the customer chooses, the answer says that too. I'll put anything further in writing if your IT team needs it.
How to read the answers
Read the whole document (6,440 characters)
| Answer | Meaning |
|---|---|
| Yes | A standard part of the Growth tier |
| Customer controlled | The setting sits with Marlcliff in its own environment |
| Add-on | Available at extra cost, not included in Growth |
| Other tier | Included in a different tier, not Growth |
| To confirm | We will answer in writing after checking internally |
Section A: Architecture and data location
| Question | Answer | Detail |
|---|---|---|
| Where does B-Viz run? | Yes | B-Viz is built and run inside Marlcliff's own Snowflake account. The data layer is not copied into a BG-Demo-owned data store. |
| Who owns the data? | Yes | Marlcliff. BG-Demo works within the customer's account and does not take ownership of the data. |
| Can data residency be fixed to a region? | Add-on | Dedicated EU or US data residency is an add-on. Marlcliff is in Great Britain and the region of its Snowflake account is Marlcliff's choice. |
| Which source systems can be connected? | Yes | Systems such as Salesforce, HubSpot, Zendesk, Xero, Gong, Microsoft 365, Google Workspace, Dropbox, SharePoint and Slack. The Growth tier has a limit on the number of connectors, which is set out in the order form. |
| Is there a diagram of the data flow? | Yes | The short answer is yes. The longer answer is that we draw it against the connectors Marlcliff actually selects, so it is produced during design, not before. |
Section B: Access control
| Question | Answer | Detail |
|---|---|---|
| Is access role based? | Yes | Users see what their role allows. For Marlcliff the likely split is account management, control room and credit control. |
| Is single sign-on supported? | Other tier | SSO and SCIM are part of Enterprise, not Growth. If Marlcliff needs them, we would discuss the Enterprise tier. |
| Who administers user accounts? | Customer controlled | Marlcliff nominates its administrators. We recommend at least two, so that one person leaving does not leave the account without an admin. |
| Does BG-Demo staff access Marlcliff's environment? | Customer controlled | Only as needed for implementation and support, and only through access that Marlcliff grants and can withdraw. |
| Is multi-factor authentication required? | Customer controlled | This is governed by Marlcliff's own Snowflake and identity settings, not by B-Viz. |
Section C: Data protection
| Question | Answer | Detail |
|---|---|---|
| Is data encrypted at rest and in transit? | Yes | Encryption is provided by the platform the data sits on, which is Marlcliff's Snowflake account, and by encrypted connections to the source systems. |
| Is personal data processed? | Yes | Sales, call, email, ticket and finance records can include names and contact details of Marlcliff's clients and staff. A data processing agreement is part of the contract pack. |
| Can Marlcliff limit which fields are indexed? | Customer controlled | Connectors can be scoped, and Marlcliff decides which sources and objects are brought in. |
| Can data be deleted on request or at exit? | Yes | Because the data lives in Marlcliff's account, Marlcliff holds the controls to delete it. We will agree the exit steps in the contract. |
Section D: Resilience and service
| Question | Answer | Detail |
|---|---|---|
| What availability applies at Growth? | Yes | The standard Growth service level in the order form applies, with service credits for availability only. |
| Is there a data freshness commitment? | Yes | The nightly refresh is intended to complete by the start of the working day, UK time, on business days. Freshness is not credited at Growth. Only Enterprise has credits for freshness. |
| How quickly are urgent issues answered? | Yes | The Growth first response target for the highest priority issues applies. Premium support with a named engineer is an add-on. |
| Is there a test environment? | Other tier | The Sandbox is included in Enterprise from the second release of the price book, and is otherwise an add-on discussion. |
Section E: Assurance and governance
| Question | Answer | Detail |
|---|---|---|
| Do you hold independent certifications? | To confirm | I do not want to overstate this. I will check the current position with a colleague who owns security and answer in writing. |
| Can we run our own penetration test? | To confirm | We would need to agree scope so that it stays within Marlcliff's own account. I will confirm in writing. |
| Is a full security review included? | Other tier | Security review support is part of the Enterprise implementation. For Growth, this questionnaire and a follow-up call with Marlcliff's IT team are the route. |
| How are security incidents communicated? | To confirm | The contract will set out the notification route. I will confirm the wording with our security owner before the order form is drafted. |
| Are sub-processors used? | To confirm | We will provide the current list in writing. |
Open actions
| Action | Owner | Timing |
|---|---|---|
| Send written answers on the items marked To confirm | Hannah Lowe | Before the order form is drafted |
| Provide a data flow diagram for the connectors Marlcliff selects | Hannah Lowe | During design, after selection |
| Discuss whether SSO need points to Enterprise | Lewis Kerr | At the next commercial conversation |
Sign-off
Completed and issued as final for Marlcliff Security Services on 28 Mar 2025.
Thanks, Hannah
Hannah Lowe Solutions Engineer, BG-Demo