Sheepscar Health - Security Questionnaire
Documentfinal Sheepscar Health · security questionnaire · final · 18 Apr 2024
Final security questionnaire answered by Hannah Lowe on 18 Apr 2024 for the Growth tier. It states a nightly refresh by 07:00 and a P1 first response of one business hour. Encryption and penetration test scope are left to be confirmed.
What it says
What this says
As at Fri 9 Oct 2026Final security questionnaire answered by Hannah Lowe on 18 Apr 2024 for the Growth tier. It states a nightly refresh by 07:00 and a P1 first response of one business hour. Encryption and penetration test scope are left to be confirmed.
What it is: a Q&A response prepared by Hannah Lowe, Solutions Engineer, answering the customer's security questions for the Growth tier. It opens: "every answer below describes B-Viz on the Growth tier unless it says otherwise."
Commits: it states "By 07:00 your local time on business days" for the nightly refresh and "One business hour" for P1 first response. Availability is "The Growth availability commitment, with service credits for availability only." No availability percentage is given.
Unusual: nothing off standard terms. It is an informational answer, not a contract, and carries no price.
Not settled: encryption relies on "the controls of your Snowflake account", with the detailed position to follow in writing. Penetration test scope is unconfirmed pending the security lead. Single sign-on and SCIM are Enterprise only, so a customer needing them would need an upgrade. The document is from 2024 and may be stale.
As found in this document
As at Fri 9 Oct 2026- AvailabilityThe Growth availability commitment, with service credits for availability only.Source: the AI read of this record
- Nightly refreshBy 07:00 your local time on business days.Source: the AI read of this record
- P1 first responseOne business hour.Source: the AI read of this record
Body
Sheepscar Health - Security Questionnaire
Prepared by Hannah Lowe, Solutions Engineer, BG-Demo Date: 18 Apr 2024 Tier assessed: Growth Status: Final
Thanks for sending these over. To be precise, every answer below describes B-Viz on the Growth tier unless it says otherwise. The short answer is that B-Viz runs inside your own Snowflake account. The longer answer is in the tables, and where a point needs confirming I have said so rather than guessing.
Hosting and data location
| Question | Answer |
|---|---|
| Where is our data held? | B-Viz is built and run inside your own Snowflake account, so your data stays in that account. |
| Is the default hosting in the UK? | Yes. Dedicated EU or US data residency is an add-on and is not part of the Growth tier. |
Access and identity
| Question | Answer |
|---|---|
| Do you support single sign-on? | Single sign-on and SCIM provisioning are part of the Enterprise tier. On Growth, user accounts are managed within B-Viz. |
| Who can hold admin rights? | Admin access is limited to named people in your team. I would recommend a review whenever someone changes role or leaves. |
Availability and support
Read the whole document (2,059 characters)
| Question | Answer |
|---|---|
| What availability commitment applies? | The Growth availability commitment, with service credits for availability only. |
| When is the nightly refresh complete? | By 07:00 your local time on business days. |
| What is the first response time for a priority one incident? | One business hour. |
Encryption and subprocessors
| Question | Answer |
|---|---|
| Is data encrypted in transit and at rest? | Protection relies on the controls of your Snowflake account. I will put the detailed position in writing once the account set-up is confirmed. |
| Can you provide a list of subprocessors? | Yes, on request. |
Points to confirm
For the penetration test scope, I need to check the current position with our security lead before I confirm it. Please ask again if it is not covered above, and I will come back to you in writing.
Thanks, Hannah