Kentmere Underwriting - Security Questionnaire
Documentfinal Kentmere Underwriting · security questionnaire · final · 26 Dec 2024
Hannah Lowe's answers to Kentmere Underwriting's security questions, dated 26 Dec 2024 and assessed at Enterprise tier. It states a 30 minute P1 response and refresh by 07:00. It states no price, and leaves encryption and penetration testing open.
What it says
What this says
As at Fri 9 Oct 2026Hannah Lowe's answers to Kentmere Underwriting's security questions, dated 26 Dec 2024 and assessed at Enterprise tier. It states a 30 minute P1 response and refresh by 07:00. It states no price, and leaves encryption and penetration testing open.
What it is: a BG-Demo reply to a customer questionnaire, marked "Status: Final", prepared by Hannah Lowe and assessed against the Enterprise tier. It is an information document, not an order form.
Commits: it states "Thirty minutes" for first response to a priority one incident and a nightly refresh "By 07:00 your local time on business days". It also says service credits cover "availability and data freshness".
Unusual: nothing departs from standard Enterprise terms. Hosting is inside the customer's own Snowflake account, and EU or US residency is an add-on.
Not settled: encryption relies on "the controls of your Snowflake account", with detail promised in writing. The penetration test scope is unconfirmed pending a check with the security lead. The text does not show whether either follow-up was sent. It gives no availability percentage and no price, and it is not a contract.
As found in this document
As at Fri 9 Oct 2026- P1 first responseThirty minutesSource: the AI read of this record
- Nightly refreshBy 07:00 your local time on business daysSource: the AI read of this record
- Service creditsThe Enterprise availability commitment, with service credits for availability and data freshnessSource: the AI read of this record
Body
Kentmere Underwriting - Security Questionnaire
Prepared by Hannah Lowe, Solutions Engineer, BG-Demo Date: 26 Dec 2024 Tier assessed: Enterprise Status: Final
Thanks for these questions. The short answer is that B-Viz runs inside your own Snowflake account. The longer answer follows. Where a question goes beyond what we can evidence today, I say so rather than overstate a control.
Hosting and data location
| Question | Answer |
|---|---|
| Where is our data held? | Inside your own Snowflake account. B-Viz is built and run there. |
| Is the default hosting in the UK? | Yes. Dedicated EU or US data residency is available as an add-on. |
Identity and access
| Question | Answer |
|---|---|
| Do you support single sign-on? | Yes. Single sign-on and SCIM provisioning are part of the Enterprise tier. |
| Who can hold admin rights? | Admin access is limited to named people in your team. We recommend a review whenever someone changes role or leaves. |
| Is there a named executive sponsor? | Yes. BG-Demo assigns an executive sponsor to Enterprise accounts. |
Availability and resilience
Read the whole document (2,063 characters)
| Question | Answer |
|---|---|
| What availability commitment applies? | The Enterprise availability commitment, with service credits for availability and data freshness. |
| When is the nightly refresh complete? | By 07:00 your local time on business days. |
| What is the first response time for a priority one incident? | Thirty minutes. |
Security review and encryption
| Question | Answer |
|---|---|
| Is security review support available? | Yes. It is included in the Enterprise implementation. |
| Is data encrypted in transit and at rest? | Protection relies on the controls of your Snowflake account. I will put the detailed position in writing once the account set-up is confirmed. |
| Can you provide a list of subprocessors? | Yes, on request. |
Points to confirm
For the penetration test scope, I need to check the current position with our security lead before I confirm it. I will come back to you in writing.
Thanks, Hannah