Quillmark Health / BB-Demo – Negotiation
Callcompleted
Quillmark Health · 2026-06-29 17:00
Quillmark Health told BB-Demo on the 29 Jun 2026 call that it will not proceed and has selected another vendor. The decision is final for this evaluation, and any future contact goes through procurement.
What was said
What this says
Current to 13 Oct 26Quillmark Health told BB-Demo on the 29 Jun 2026 call that it will not proceed and has selected another vendor. The decision is final for this evaluation, and any future contact goes through procurement.
What happened: Tasha Greene, Procurement Director, said the review was complete and the committee had met. Owen Tallis offered to discuss the first term on the £155k proposal and was told nothing is negotiated until security has cleared a vendor.
Customer view: Megan Alvarez, Chief Information Security Officer, said the outcome rests on risk posture and that she does not accept best effort on remediation. She also said BB-Demo's incident disclosure was complete and came before Quillmark had to find it.
Commercial: Tasha said the client-services need for one view of each hospital client has not gone away. Any future contact goes through procurement, and security would review afresh.
Watch: Quillmark said a vendor that closes its findings with documented evidence is better placed in a fresh review.
Themes
Current to 9 Oct 26Theme
Enterprise deal lost
Importance
cancellation
Sentiment
negative
Voice
decision-maker
Who was there
BB-Demo
CRMmade from
Them
CRMmade from
Follow-up
Next steps
Current to 9 Oct 26- Jordan Pike confirms in writing this week that the evaluation environment is wound down, with the removal date and role.
- Owen Tallis marks the deal as lost in the CRM the next day with no close date left on it.
- BB-Demo closes the open security findings with documented evidence, and routes any contact through procurement.
Risks
Current to 9 Oct 26- The Enterprise proposal at £155,000 is lost, and Quillmark will not negotiate commercial terms.
- Megan Alvarez does not accept best effort on remediation timelines, which blocks a future review.
- Contact is restricted to procurement, not the client-services teams.
Opportunities
Current to 9 Oct 26- Tasha Greene said the client-services need for one view of each hospital client persists.
- A fresh review would consider findings closed with documented evidence.
- Quillmark's CISO credited BB-Demo's early and complete incident disclosure.
Transcript
Jordan Pike NoneHi, everybody. Can you hear me okay? I see Tasha and Megan, and I think Owen is just joining.
Owen Tallis NoneI'm here, Jordan. Sorry, my audio picked the wrong headset. Better now?- Jordan Pike NoneLoud and clear. Thanks, all, for making the time at the end of the day. I know it's been a long Monday.
Tasha Greene NoneThank you, Jordan. Before we begin, I'd like to confirm the evaluation timeline, per our process. This call is the final scheduled step ahead of Tuesday 30 June 2026.- Jordan Pike NoneUnderstood. Here's where we are. One-line agenda: commercial terms on the Enterprise proposal, any open items from security, and next steps. We have twenty-five minutes, so I'll watch the clock.
Megan Alvarez NoneIf I may, I'd like to restate scope and the open findings first, for the record. The commercial discussion depends on them.- Jordan Pike NoneOf course. Please go ahead, Megan.
- Megan Alvarez NoneThank you. The scope of the review was the Enterprise offering running inside a customer-controlled Snowflake account, handling data from our client-services teams, which falls under HIPAA. There were three open findings at the last checkpoint. One, the written response on incidents in the last ninety days. Two, the evidence on how access is separated within the customer's Snowflake account. Three, the remediation timeline for the items the review identified.
- Jordan Pike NoneRight. And to be transparent, we sent written responses on all three. On the first one, we disclosed what we had to disclose, and we didn't wait for you to ask twice.
- Megan Alvarez NoneThat is noted, and I'll come back to it. Tasha, I think it's better if you speak to where we are.
- Tasha Greene NoneYes. Thank you, Megan.
- Tasha Greene NoneJordan, Owen, I want to be direct, because I think that is fairer to you than a long preamble. The review has been completed and the committee has met. At this time, Quillmark Health has decided not to proceed with BB-Demo. We have selected another vendor.
- Jordan Pike NoneOkay. Mm. Thank you for telling us straight, Tasha. I appreciate that.
- Owen Tallis NoneYes, thank you. Can I just confirm I've understood? The decision is final, not a hold pending the findings?
- Tasha Greene NoneIt is a final decision for this evaluation. You will receive a decision letter in writing. It will be short.
- Owen Tallis NoneUnderstood. And you'll forgive me, I'll ask once and then I'll leave it. We had the proposal at £155,000, implementation included. If price had any part in this, I can talk about the first term. What's the next dated step if there is a path?
- Tasha Greene NoneI appreciate the offer, Owen. Per our process, I don't negotiate commercial terms until security has cleared a vendor, and that is not where this ended. So there is nothing to negotiate at this time.
- Owen Tallis NoneFair enough. Understood.
- Jordan Pike NoneCan I ask one question, and tell me if it's out of bounds? What would have made this a yes?
- Tasha Greene NoneI understand the question. I'm not able to provide detailed feedback on the outcome, and I don't give it in writing either. That is a matter of keeping the process fair to every vendor who took part.
- Jordan Pike NoneSure. That makes sense, and I respect it.
- Megan Alvarez NoneI can add something within my remit. For the record, the outcome rests on our risk posture, and I don't share the scoring of a review with any vendor. I won't depart from that.
- Owen Tallis NoneNo, understood, and we wouldn't expect you to.
- Megan Alvarez NoneHowever, I also want it on the record that your disclosure on incidents was complete and was provided before we had to find it ourselves. Many vendors do not behave that way. Jordan was straightforward throughout, and that was not lost on us.
- Jordan Pike NoneThank you, Megan. That means something to me, honestly. We'd rather be the vendor that tells you early.
- Megan Alvarez NoneThat is the correct approach for a vendor handling patient data. Please continue to take it.
- Owen Tallis NoneWe will. And I'll say, from my side, I've read the security correspondence, and the team's answers were what they were because the facts were what they were. We don't dress things up.
- Megan Alvarez NoneI agree that they were not dressed up. I'd note, though, that I do not accept best effort as an answer on remediation, and a timeline that depends on best effort is not something I can put in front of the board risk committee.
- Jordan Pike NoneUnderstood. And I'm not going to argue it on this call. That's your call to make.
- Tasha Greene NoneThank you. I'd like to be clear that the evaluation team valued the time that your people put in. Several demonstrations, the sessions with our client-services teams, the document requests. We appreciate your time and effort.
- Owen Tallis NoneThat's kind. Those sessions were useful for us too. The client-services people had a clear picture of what they wanted: one view of each hospital client.
- Tasha Greene NoneThey did. That need has not gone away, and I would not want you to read this decision as a judgement on the need.
- Jordan Pike NoneThat's helpful to hear. Can I ask about housekeeping, then? A few practical things so we leave your environment tidy.
- Tasha Greene NonePlease do.
- Jordan Pike NoneFirst, we'll wind down the evaluation environment and any sample data connected to it. I'll confirm in writing when that's done so Megan has it for her file. Second, we'll withdraw the proposal. Third, anything your team shared under the evaluation, we'll treat as confidential, as before.
- Megan Alvarez NonePlease include in that confirmation the date the access was removed and who performed the removal. I'll need it for the vendor file.
- Jordan Pike NoneWill do. Date and role of the person who did it. You'll have it from me this week.
- Owen Tallis NoneAnd I'll make sure our side closes the record properly. I'll mark the deal as lost in our CRM tomorrow, with no hopeful close date left sitting on it.
- Tasha Greene NoneThat is appreciated. For my part, the decision letter will go out in writing, and the vendor file remains with procurement.
- Jordan Pike NonePerfect. Tasha, one more, and it's a small one. Is it all right if I keep in touch with your team, say, once in a while, not selling, just a note?
- Tasha Greene NoneI would ask that any contact go through procurement at this time, rather than directly to the client-services teams. If circumstances change, we would begin from the process again, and security would review afresh.
- Jordan Pike NoneUnderstood. We'll go through you.
- Megan Alvarez NoneI would also say, for the record, that a fresh review would consider what has changed in the interval. A vendor that closes its findings with evidence and documents the closure is in a better position than one that does not.
- Owen Tallis NoneThat's a fair thing to say, and we'll take it as a to-do on our side. Closing the findings properly matters whether or not Quillmark is the customer.
- Megan Alvarez NoneGood. Then I have nothing further.
- Jordan Pike NoneTasha, anything you need from us for the file before we drop off? Documents, a signed acknowledgement, anything like that?
- Tasha Greene NoneNot at this time. If I need anything, I will write to you. I would only ask that you not circulate the letter beyond the people on this call.
- Owen Tallis NoneOf course. It stays with the three of us.
- Jordan Pike NoneThen I think we're covered, and we're well inside the time. Thank you, both of you. I know this is not the easy call to run for either side.
- Tasha Greene NoneThank you, Jordan. Thank you, Owen. We appreciate the professionalism.
- Owen Tallis NoneLikewise. Take care, both.
- Megan Alvarez NoneGoodbye. Thank you.
Callsmade from