Lindqvarn Retail - Security Questionnaire
Documentfinal Lindqvarn Retail · security questionnaire · final · 22 Feb 2025
Final security questionnaire prepared by Hannah Lowe on 22 Feb 2025 for Lindqvarn Retail ahead of the Enterprise order form. It describes product design and defers service levels and data residency to the order form. It states no figures.
What this says
As at Fri 9 Oct 2026Final security questionnaire prepared by Hannah Lowe on 22 Feb 2025 for Lindqvarn Retail ahead of the Enterprise order form. It describes product design and defers service levels and data residency to the order form. It states no figures.
What it is: a BG-Demo answer sheet to Lindqvarn Retail's security questions, marked Final, covering architecture, access control, service levels and support for the Enterprise tier.
Commits: it commits to little itself. It says "The figure is written into the order form" for availability, and that the access list "is agreed with your IT team during the security review, and I will put that in writing."
Unusual: nothing off standard terms. It confirms credits apply "for both availability and data freshness" on Enterprise, and that EU residency is an add-on.
Not settled: availability percentage, P1 response time, data residency choice and BG-Demo access list. The document says contractual commitments "are only binding once they appear in the executed order form", and the evidence does not show that order form.
Body
Lindqvarn Retail - Security Questionnaire
Status: Final Prepared by: Hannah Lowe, Solutions Engineer, BG-Demo Prepared for: Lindqvarn Retail, Stockholm Date: 22 Feb 2025 Tier under review: Enterprise
Purpose
This document answers the security questions raised by Lindqvarn Retail ahead of the Enterprise order form. Answers describe how B-Glass is built and run by BG-Demo. Where a control is agreed in the order form rather than fixed by the product, the answer says so. Anything that needs a written commitment is marked as such, and I will put it in writing as part of the contract.
Architecture and data location
Read the whole document (3,805 characters)
| Question | Answer |
|---|---|
| Where does the brain run? | Inside your own Snowflake account. BG-Demo builds and operates the brain there; it is not a separate multi-tenant store holding a copy of your data. |
| Which source systems connect? | Only the systems you choose to connect, for example your CRM, helpdesk, accounting system and call recorder. Each connector is configured and agreed with your team during implementation. |
| Can data be held in a specific region? | Yes. Dedicated EU data residency is available as an add-on, and it would be confirmed in the order form if you want it. |
| Is customer data used for anything other than your own queries? | No. The brain exists to answer your own teams' questions over your own data. |
Access control
| Question | Answer |
|---|---|
| Is single sign-on supported? | Yes. SSO and SCIM provisioning are part of the Enterprise tier. |
| How are leavers handled? | With SCIM in place, removing a person in your identity system removes their access to the brain. |
| Who at BG-Demo can reach your environment? | Named BG-Demo staff working on your implementation and support. To be precise, the exact access list is agreed with your IT team during the security review, and I will put that in writing. |
| Can access be limited by team? | Yes. The brain respects the permissions you set on each connected source and the user groups you define. |
Availability and service levels
| Question | Answer |
|---|---|
| What availability is committed? | The Enterprise availability level, which is the highest of our tiers. The figure is written into the order form. |
| How quickly do you respond to a serious incident? | Enterprise carries the fastest first-response commitment we offer, measured in minutes rather than business hours. The exact wording sits in the order form. |
| How fresh is the data? | The nightly refresh completes before the start of your business day, on business days. |
| Are there service credits? | Yes. On Enterprise, credits apply for both availability and data freshness. |
Support and security review
| Question | Answer |
|---|---|
| Is security review support included? | Yes. Enterprise implementation includes support for your security review, and I run that review myself. |
| Is Premium support available? | Yes, as an add-on: a named engineer during extended UK hours. |
| Is a test environment available? | A Sandbox is available as an add-on. |
Open points and limits
- This questionnaire states what the product does by design. It does not replace your own assessment, and I would expect your IT team to test the answers against what they see in the demo environment.
- Any control not described above has not been claimed. If your team asks a question this document does not cover, I will check the answer before replying rather than guess.
- Contractual commitments, including service levels and any data residency choice, are only binding once they appear in the executed order form.
Contact
Questions on any answer above should go to Hannah Lowe. Commercial questions should go to Tom Ashdown, your account executive.
Thanks, Hannah