Kralingse Expeditie - Security Questionnaire
Documentfinal Kralingse Expeditie · security questionnaire · final · 29 Nov 2025
Final version one security questionnaire completed by Hannah Lowe on 29 Nov 2025 for the Growth tier. It states no price, availability figure or P1 time, defers service levels to the order form, and leaves certifications and the test summary to follow.
What it says
What this says
As at Fri 9 Oct 2026Final version one security questionnaire completed by Hannah Lowe on 29 Nov 2025 for the Growth tier. It states no price, availability figure or P1 time, defers service levels to the order form, and leaves certifications and the test summary to follow.
What it is: a security questionnaire for the Growth subscription, completed by Hannah Lowe, Solutions Engineer. It says the data is held "in your account, under your Snowflake controls, and not in a separate BG-Demo data store".
Commits: nightly refresh "complete by 07:00 customer local time on business days". Hannah also commits to send the role layout before any user is switched on and a written answer on certifications.
Unusual: nothing off the standard terms. The questionnaire says SSO is "not on Growth" and that Premium support and dedicated EU data residency are add-ons.
Not settled: certifications and the penetration test summary are not answered. Service levels are deferred to the order form, which "would take precedence over this document". The EU residency decision sits with the customer. The evidence does not show whether these follow-ups were closed.
As found in this document
As at Fri 9 Oct 2026- Data refreshNightly, and complete by 07:00 customer local time on business days, as on every tier.Source: the AI read of this record
- Service levelsThe exact commitments are set out in your order form, which would take precedence over this document.Source: the AI read of this record
Body
Kralingse Expeditie - Security Questionnaire
Status: Final, version one Completed by: Hannah Lowe, Solutions Engineer, BG-Demo Date: 29 Nov 2025 Prepared for: Kralingse Expeditie, Rotterdam (account owner at BG-Demo: Matteo Ricci; CSM: Elena Novak) Tier in scope: Growth
About this document
This questionnaire covers the Growth subscription of B-Viz as it would be run for Kralingse Expeditie, so that account managers and the customs desk can see each importer's shipments, exceptions, calls and invoices together. Answers describe the Growth tier only. Where a control belongs to another tier or to an add-on, the answer says so. Where I could not confirm an answer in full, I have said what will follow in writing rather than guess.
Section A: Architecture and data location
Read the whole document (3,655 characters)
| Question | Answer |
|---|---|
| Where does the data live? | B-Viz is built and run inside your own Snowflake account. To be precise, the data is held in your account, under your Snowflake controls, and not in a separate BG-Demo data store. |
| Which systems would be connected? | Only the sources you approve, through the Growth connector allowance. Each connector is set up only after written access has been granted. |
| Can data be held in a specific region? | Your Snowflake account sits in the region you chose. Dedicated EU data residency is also available as an add-on; it is not part of the Growth tier as standard. |
| Is data from one customer mixed with another's? | No. Each customer has its own deployment inside its own Snowflake account. |
Section B: Access control
| Question | Answer |
|---|---|
| Is single sign-on supported? | The short answer is: not on Growth. SSO and SCIM provisioning are included from the Enterprise tier. On Growth, users are managed by your named administrators. |
| Can access be limited by team? | Role design for team-level access is agreed with your administrators during setup. I will put the proposed role layout in writing before any user is switched on. |
| Who at BG-Demo can see our data? | Only staff working on your deployment, and only to the extent needed for setup and support. Access is granted by you and can be withdrawn by you. |
Section C: Support and service levels
| Question | Answer |
|---|---|
| What service levels apply? | The standard Growth service level for availability and for first response to priority-one issues. The exact commitments are set out in your order form, which would take precedence over this document. |
| Is named-engineer support included? | No. Premium support is an add-on and is not part of Growth. |
| When does data refresh? | Nightly, and complete by 07:00 customer local time on business days, as on every tier. |
Section D: Assurance and certifications
| Question | Answer |
|---|---|
| Which certifications does BG-Demo hold? | I will not answer this from memory. A written answer on certifications will be sent separately, once I have checked it with Ewan, so that nothing is overstated. |
| Is there a penetration test summary? | A shareable test summary will follow in writing under the same check. |
| Is a full security review included? | A formal security review is part of the Enterprise sales process. For Growth, this questionnaire and follow-up calls with me are the route. |
Open follow-ups
- Written answer on certifications and the shareable test summary: Hannah Lowe, after the check mentioned above.
- Proposed role layout for team-level access: Hannah Lowe, to share with your administrators before setup.
- Decision on dedicated EU data residency: Kralingse Expeditie, with Matteo Ricci.
Thanks, Hannah