Fewston Heating Supplies - Security Questionnaire
Documentfinal Fewston Heating Supplies · security questionnaire · final · 15 Sep 2026
Final version 1 security questionnaire prepared by Theo Gallagher on 15 Sep 2026 for Fewston's Growth evaluation. It states no availability percentage or price, leaves audit reports unconfirmed, and says SSO is Enterprise only.
What it says
What this says
As at Fri 9 Oct 2026Final version 1 security questionnaire prepared by Theo Gallagher on 15 Sep 2026 for Fewston's Growth evaluation. It states no availability percentage or price, leaves audit reports unconfirmed, and says SSO is Enterprise only.
What it is: a pre-sale answer sheet covering data location, access control, availability and assurance. It says answers "describe the Growth tier only" and is not an order form.
Commits: little by design. It states "nothing here should be read as a commitment beyond what the order form says if Fewston goes ahead". The only firm figure is the nightly refresh by 07:00 customer local time on business days.
Unusual: it declines to quote the availability percentage, saying it is "written into the order form". Independent audit reports are not attached and will not be described as available until the platform team confirms.
Not settled: whether Fewston needs SSO, which would point to Enterprise, and the data region preference. Exit steps are "to be agreed in the contract". The evidence does not show a signed order form or any price.
As found in this document
As at Fri 9 Oct 2026- Nightly refreshcompletes by 07:00 customer local time on business days, as it does for every tierSource: the AI read of this record
The document
Body
Fewston Heating Supplies - Security Questionnaire
Prepared by: Theo Gallagher, Solutions Engineer, BG-Demo Prepared for: Fewston Heating Supplies, Harrogate Date: 15 Sep 2026 Status: Final, version 1 Tier evaluated: Growth
This document answers the security questions raised during Fewston's evaluation of B-Viz. Answers describe the Growth tier only. Where a control is not part of Growth, or where evidence is held by the platform team, the answer says so. Evidence is provided on request, and nothing here should be read as a commitment beyond what the order form says if Fewston goes ahead.
1. Data location and ownership
Read the whole document (4,339 characters)
| No. | Question | Answer |
|---|---|---|
| 1.1 | Where is our data stored? | B-Viz is built and run inside the customer's own Snowflake account. Fewston's data stays in Fewston's Snowflake account and is not copied into a BG-Demo environment. |
| 1.2 | Who owns the data? | Fewston. B-Viz is a layer over the customer's systems and does not take ownership of source data. |
| 1.3 | Can we choose the data region? | Dedicated EU or US data residency is an add-on. It is not part of Growth as standard. Fewston is UK based, and the region would follow the Snowflake account it chooses. |
| 1.4 | What systems would be connected? | The connectors are agreed in the order form. Examples of supported systems include Salesforce, HubSpot, Zendesk, Xero, Microsoft 365, Google Workspace and SharePoint. Growth includes the Growth connector allowance. |
2. Access control
| No. | Question | Answer |
|---|---|---|
| 2.1 | Is single sign-on supported? | SSO and SCIM are Enterprise features. They are not included in Growth. If Fewston needs them, the right tier is Enterprise, and we would revisit the proposal. |
| 2.2 | How is user access managed? | Admins at Fewston manage users within the Growth user allowance. Access to source data follows the permissions Fewston sets in its own Snowflake account. |
| 2.3 | Can access be limited by team? | Yes, in principle, through the permissions set in the customer's Snowflake account. We can evidence the configuration during implementation, not before. |
3. Availability and service
| No. | Question | Answer |
|---|---|---|
| 3.1 | What availability is committed? | The Growth availability level in the standard service terms. The exact percentage is written into the order form, and we would not quote it here ahead of that document. |
| 3.2 | What happens if availability is missed? | Growth carries a service credit for availability breaches, set out in the service terms. Credits for data freshness are Enterprise only. |
| 3.3 | How quickly do you respond to a critical issue? | Growth has a first-response commitment for the highest-priority tickets, measured in business hours. Premium support, with a named engineer, is an add-on. |
| 3.4 | When is data refreshed? | The nightly refresh completes by 07:00 customer local time on business days, as it does for every tier. |
| 3.5 | Is there a test environment? | The Sandbox is an add-on and is not part of Growth. |
4. Assurance and evidence
| No. | Question | Answer |
|---|---|---|
| 4.1 | Can you share independent audit reports? | We can evidence what is held, but the platform team provides those documents. I have not attached any to this version and will not describe a report as available until the team has confirmed it. |
| 4.2 | Is there a formal security review for Growth? | Formal security review support is included with the Enterprise implementation. For Growth we answer questionnaires such as this one and are happy to take follow-up questions. |
| 4.3 | Is there an exit plan? | Because the data and the build sit in Fewston's own Snowflake account, Fewston keeps its data if the subscription ends. The detailed exit steps are to be agreed in the contract. |
5. Open points
| Point | Owner | Position |
|---|---|---|
| Independent assurance documents | Platform team, via Theo Gallagher | To be confirmed with the platform team |
| Whether SSO is required | Fewston | If yes, Enterprise would need to be considered |
| Data region preference | Fewston, with Lewis Kerr | To be settled before any order form |
6. Contacts
- BG-Demo account owner: Lewis Kerr
- Security questionnaire contact: Theo Gallagher, Solutions Engineer
Thanks, Theo
Unusual terms
As at Fri 9 Oct 2026- Availability percentage deliberately not quoted
- Audit reports not attached or confirmed
- Exit steps left to the contract