Brakkevoort Logistics - Security Questionnaire
Documentfinal Brakkevoort Logistics · security questionnaire · final · 2 Feb 2025
Pre-sale security questionnaire, version one, dated 2 Feb 2025, written by Hannah Lowe for Brakkevoort Logistics on the Growth tier. It is not a contract. Growth includes a P1 first response within one business hour, and four open items remain before signature.
What it says
What this says
As at Fri 9 Oct 2026Pre-sale security questionnaire, version one, dated 2 Feb 2025, written by Hannah Lowe for Brakkevoort Logistics on the Growth tier. It is not a contract. Growth includes a P1 first response within one business hour, and four open items remain before signature.
What it is: a questionnaire prepared by Hannah Lowe, Solutions Engineer, describing how the brain would be deployed and operated on Growth. It states "Answers describe the Growth tier only." It is filed as final, but several answers are deferred.
Commits: it states a P1 first response "within one business hour on Growth" and a nightly refresh "by 07:00 customer local time on business days". It also states up to forty users and up to eight connectors. No price is stated.
Unusual: nothing off standard terms. Freshness is "a target on Growth" and credits for freshness are an Enterprise feature, which matters if the customer expects freshness credits.
Not settled: hosting region and the EU residency add-on, write access per connector, certifications and sub-processors, and whether SSO is required. The text lists these as open items before signature. The evidence does not show whether they were closed.
As found in this document
As at Fri 9 Oct 2026- P1 first response (Growth)within one business hour on GrowthSource: the AI read of this record
- Nightly refreshcompletes by 07:00 customer local time on business days, on every tierSource: the AI read of this record
- Availability service creditsservice credits for availability breaches onlySource: the AI read of this record
- Users includedup to forty usersSource: the AI read of this record
- Connectors includedup to eight connectorsSource: the AI read of this record
The document
Body
Brakkevoort Logistics - Security Questionnaire
Status: Final, version one Date: 2 Feb 2025 Prepared by: Hannah Lowe, Solutions Engineer, BG-Demo Prepared for: Brakkevoort Logistics, Rotterdam Tier under discussion: Growth
Purpose and scope
This questionnaire sets out how BG-Demo's B-Glass would be deployed and operated for Brakkevoort Logistics. The brain brings shipper accounts, exception tickets and calls together for account managers. Answers describe the Growth tier only. Where a control belongs to a different tier or an add-on, the answer says so plainly.
Where an answer says it will be confirmed in writing, that is deliberate: I would rather give you a precise answer later than an approximate one now.
Architecture and data location
Read the whole document (4,842 characters)
| Area | Question | Answer |
|---|---|---|
| Hosting | Where does the brain run? | Inside your own Snowflake account. BG-Demo builds and runs the brain there, so the data stays within your environment rather than being copied to a separate BG-Demo platform. |
| Data residency | Can data be held in a specific region? | The short answer is yes. Dedicated EU data residency is available as an add-on. Whether it is needed depends on where your Snowflake account is hosted, and I will put that in writing once we have confirmed it with your IT team. |
| Data sources | Which systems connect to the brain? | Only the sources you choose. Typical examples are your CRM, helpdesk, call recorder, email and accounting system. The Growth tier includes up to eight connectors. |
| Direction of data | Does the brain write back to source systems? | To be precise, this depends on how each connector is configured. I will confirm the position per connector in the design stage before anything goes live. |
Access control
| Area | Question | Answer |
|---|---|---|
| Authentication | Is single sign-on supported? | Single sign-on and SCIM provisioning are part of the Enterprise tier, not Growth. On Growth, access is managed with the brain's own user administration. If SSO is a requirement for Brakkevoort Logistics, we should talk about the Enterprise tier. |
| User allowance | How many users are included? | Growth includes up to forty users. Additional blocks of ten users are available as an add-on. |
| Administrators | Who administers the brain? | Your nominated administrators. BG-Demo staff do not hold standing administrator rights in your environment unless you grant them for a specific piece of work. |
| Least privilege | Can access be limited by team? | Access is set by user and by team, so account managers can be given what they need without exposing everything. Detailed role design is agreed during implementation. |
Service levels and operations
| Area | Question | Answer |
|---|---|---|
| Availability | What availability is committed? | The standard Growth service level applies, with service credits for availability breaches only. |
| Support response | How fast is a priority incident acknowledged? | For a P1, first response is within one business hour on Growth. Premium support, with a named engineer, is an optional add-on. |
| Data freshness | When is data refreshed? | The nightly refresh completes by 07:00 customer local time on business days, on every tier. Freshness is a target on Growth. Service credits for freshness are an Enterprise feature. |
| Test environment | Is there a separate sandbox? | A Sandbox is available as an add-on. It is not included in Growth. |
Governance and assurance
| Area | Question | Answer |
|---|---|---|
| Formal security review | Is a dedicated security review included? | Dedicated security review support is part of the Enterprise implementation. For Growth, this questionnaire and a follow-up call with me are the review. |
| Independent certifications | Which certifications does BG-Demo hold? | I do not want to overstate this. I will confirm in writing exactly which certifications and reports I can share, rather than answer from memory here. |
| Sub-processors | Are third parties involved in processing? | Because the brain runs in your Snowflake account, the main processing platform is one you already contract with. I will list any further parties in writing with the data processing terms. |
| Incident notification | How are incidents communicated? | Through the support process for your tier. The exact notification wording belongs in the contract and will be agreed there. |
Open items before signature
- Confirm the hosting region of the Snowflake account and whether the EU residency add-on is required.
- Confirm the list of connectors and whether any need write access.
- Decide whether single sign-on is a firm requirement, which would point to the Enterprise tier.
- Hannah to send written confirmation on certifications and sub-processors.
Thanks, Hannah
Unusual terms
As at Fri 9 Oct 2026- Freshness is a target only on Growth
- Several answers deferred to written confirmation