Menlo Quay Medical - Security Questionnaire
Documentfinal Menlo Quay Medical · security questionnaire · final · 21 Nov 2025
BG-Demo's completed security questionnaire for a Growth evaluation, dated 21 Nov 2025. It states nightly refresh complete by 07:00 customer local time on business days. It gives no availability percentage, P1 time or price.
What it says
What this says
As at Fri 9 Oct 2026BG-Demo's completed security questionnaire for a Growth evaluation, dated 21 Nov 2025. It states nightly refresh complete by 07:00 customer local time on business days. It gives no availability percentage, P1 time or price.
What it is: a final questionnaire completed by Anya Petrova, Solutions Engineer, answering the customer's evaluation questions. It says "Tier under discussion: Growth" and that answers depending on the order form say so.
Commits: data stays in the customer's own Snowflake account, and the refresh is "complete by 07:00 customer local time on business days". Connector issues are handled "under the Growth first-response service level", with service credits for availability only.
Unusual: nothing off the standard Growth terms. It states that SSO and SCIM are Enterprise features and that EU or US data residency is an add-on, not included.
Not settled: it gives no availability percentage, response time, credit amount, connector count or price. Certifications and third-party audit reports are not recorded, and any non-standard service level must be written into the executed order form. It is not a contract.
As found in this document
As at Fri 9 Oct 2026- Data refreshNightly. The refresh is complete by 07:00 customer local time on business days.Source: the AI read of this record
- AvailabilityThe standard Growth availability level applies, with service credits for availability only.Source: the AI read of this record
- Critical issue responseWithin the Growth first-response time for the highest priority.Source: the AI read of this record
- Connector issueshandled under the Growth first-response service levelSource: the AI read of this record
- Security incidentsreported to your security contact promptly and in writingSource: the AI read of this record
Body
Menlo Quay Medical - Security Questionnaire
Status: Final Completed by: Anya Petrova, Solutions Engineer, BG-Demo Date: 21 Nov 2025 Tier under discussion: Growth Account owner: Matteo Ricci
This document answers the security questions raised by Menlo Quay Medical during evaluation. Where an answer depends on the signed order form, it says so.
Section A: Hosting and data location
| Question | Answer |
|---|---|
| Where is our data stored? | B-Viz is built and run inside Menlo Quay Medical's own Snowflake account. Your data is not copied into a separate BG-Demo data store. |
| Can data be kept in a specific region? | Dedicated EU or US data residency is available as an add-on. It is not included in the Growth tier and would be named in the order form if chosen. |
| Who controls the Snowflake account? | Menlo Quay Medical. BG-Demo works within the access your administrators grant. |
Section B: Access control
Read the whole document (2,851 characters)
| Question | Answer |
|---|---|
| How do users sign in? | Growth uses the standard sign-in method. Single sign-on and SCIM provisioning are features of the Enterprise tier and are not part of Growth. |
| Can access be limited by team? | Yes. Each connected source is governed by the permissions your administrators set, and the three teams can be given separate views. |
| Who at BG-Demo can see our data? | Only staff working on your implementation or support requests, and only for that purpose. |
Section C: Connectors and data handling
| Question | Answer |
|---|---|
| How are source systems connected? | Through connectors configured with your administrators. The Growth tier has a fixed allowance of connectors, confirmed in the order form. |
| How often is data refreshed? | Nightly. The refresh is complete by 07:00 customer local time on business days. |
| What happens if a source stops loading? | The connector issue is raised as a support ticket and handled under the Growth first-response service level. |
Section D: Availability and incident handling
| Question | Answer |
|---|---|
| What availability is committed? | The standard Growth availability level applies, with service credits for availability only. |
| How quickly do you respond to a critical issue? | Within the Growth first-response time for the highest priority. |
| Will we be told about a security incident? | Yes. Any incident affecting your environment would be reported to your security contact promptly and in writing. |
Section E: Open items
- Certifications and third-party audit reports are not recorded in this questionnaire. They will be supplied separately if your security team requests them.
- Any service level that differs from the standard Growth terms must be written into the executed order form.
Sign-off
Completed by Anya Petrova, Solutions Engineer, BG-Demo, on 21 Nov 2025.