Astley Brook Packaging - Security Questionnaire
Documentfinal Astley Brook Packaging · security questionnaire · final · 2 Jan 2026
Final security questionnaire answered by Hannah Lowe on 2 Jan 2026 for the Growth tier. It states the nightly refresh completes by 07:00 and defers availability and P1 response to the order form. It gives no price and no certifications.
What it says
What this says
As at Fri 9 Oct 2026Final security questionnaire answered by Hannah Lowe on 2 Jan 2026 for the Growth tier. It states the nightly refresh completes by 07:00 and defers availability and P1 response to the order form. It gives no price and no certifications.
What it is: a customer-facing security questionnaire prepared by Hannah Lowe for Astley Brook Packaging, dated 2 Jan 2026 and marked final. It describes B-Viz as delivered on Growth.
Commits: "The nightly refresh completes by 07:00 customer local time on business days." On service credits, "service credits apply to availability only. Data freshness is credited on Enterprise only." Hannah also promises to put role and source access in writing before go-live.
Unusual: nothing off standard terms. It states SSO and SCIM are Enterprise only, and Sandbox and Premium support are add-ons or Enterprise features.
Not settled: availability and P1 response are not stated, as "the order form prevails over any other document". Certifications, penetration test reports and incident-response procedures are not answered and need written confirmation from the security lead. Retention is left to the customer's Snowflake settings.
As found in this document
As at Fri 9 Oct 2026- Nightly refreshThe nightly refresh completes by 07:00 customer local time on business days.Source: the AI read of this record
- Service creditsOn Growth, service credits apply to availability only. Data freshness is credited on Enterprise only.Source: the AI read of this record
- AvailabilityThe Growth availability commitment applies. The figure is set out in the order formSource: the AI read of this record
- P1 first responseThe Growth first-response time for a P1 applies, as stated in the order form.Source: the AI read of this record
- Access scopingI'll put that in writing before go-live.Source: the AI read of this record
Body
Astley Brook Packaging - Security Questionnaire
Prepared for: Astley Brook Packaging, Bolton Prepared by: Hannah Lowe, Solutions Engineer, BG-Demo Date: 2 Jan 2026 Tier under review: Growth Status: Final
These answers describe B-Viz as it is delivered on the Growth tier. To be precise, where a control is not part of Growth, the answer says so rather than implying it. Anything that depends on Astley Brook's own Snowflake configuration is marked as the customer's responsibility.
1. Architecture and data location
Read the whole document (3,499 characters)
| Ref | Question | Answer |
|---|---|---|
| A1 | Where is our data stored? | B-Viz is built and run inside Astley Brook's own Snowflake account. The data stays in your account and is not copied into a separate BG-Demo store. |
| A2 | Is a dedicated data residency region available? | Dedicated EU or US data residency is an optional add-on. It is not included in Growth, and as a UK customer you have not asked for it. |
| A3 | Which systems will be connected? | Connectors are limited to the Growth connector allowance. Systems are connected for reading, for example your CRM, helpdesk and accounting system, so that orders, complaints and invoices can be seen together. |
| A4 | How often is data refreshed? | The nightly refresh completes by 07:00 customer local time on business days. This applies to every tier. |
2. Access control
| Ref | Question | Answer |
|---|---|---|
| B1 | How do users sign in? | Growth uses the access arrangements set up in your Snowflake account during implementation. |
| B2 | Is single sign-on available? | SSO and SCIM are part of the Enterprise tier. They are not included in Growth. If you need them later, that is an upgrade conversation with your account executive, Sophie Ling. |
| B3 | Can we limit who sees which data? | Access follows the roles you define in your Snowflake account. Deciding which teams see which sources is agreed with you during implementation, and I'll put that in writing before go-live. |
| B4 | Who administers users? | Astley Brook nominates its administrators. BG-Demo does not create user accounts on your behalf without your instruction. |
3. Service levels and support
| Ref | Question | Answer |
|---|---|---|
| C1 | What availability is committed? | The Growth availability commitment applies. The figure is set out in the order form, and the order form prevails over any other document. |
| C2 | What is the response time for a serious incident? | The Growth first-response time for a P1 applies, as stated in the order form. |
| C3 | Are service credits offered? | On Growth, service credits apply to availability only. Data freshness is credited on Enterprise only. |
| C4 | Is a sandbox or Premium support included? | Both are add-ons or Enterprise features. They are not part of Growth as standard. |
4. Items we are not answering here
| Ref | Question | Answer |
|---|---|---|
| D1 | Third-party certifications, penetration test reports and detailed incident-response procedures | Not covered in this questionnaire. These need to be checked and confirmed in writing by our security lead before we give an answer, so none is given here. |
| D2 | Specific retention periods for your data | These follow your own Snowflake settings, so they are for Astley Brook to decide. |
5. Sign-off
Answers reviewed by Hannah Lowe, Solutions Engineer, BG-Demo, on 2 Jan 2026. Please send any follow-up questions to me and I will answer them in writing.
Thanks, Hannah