Skip to content

Vossberg Logistik - Security Questionnaire

Documentfinal

Vossberg Logistik · security questionnaire · final · 2 Nov 2025

Security questionnaire answers for Vossberg Logistik, version 1, dated 2 Nov 2025 and marked Final. Data stays in the customer's own Snowflake account, and Enterprise adds SSO, SCIM and audit logging. No availability percentage, P1 response time or price is stated.

What it says

What this says

As at Fri 9 Oct 2026

Security questionnaire answers for Vossberg Logistik, version 1, dated 2 Nov 2025 and marked Final. Data stays in the customer's own Snowflake account, and Enterprise adds SSO, SCIM and audit logging. No availability percentage, P1 response time or price is stated.

What it is: BG-Demo's answers to a customer security questionnaire, covering architecture, encryption, access, compliance, incident response, backup and vendors. Hannah Lowe, Solutions Engineer, is the resolved author.

Commits: it states that "nightly refresh must complete by 07:00 your local time on business days, with service credits for breaches". It also states Enterprise security incidents are "acknowledged within thirty minutes", with a full response plan within four business hours.

Unusual: the availability commitment is described as "our highest availability commitment" with no percentage. The P1 response time is called "the fastest" with no figure.

Not settled: it is not an order form and states no price, term or renewal. It does not say which tier Vossberg Logistik holds, and it promises a further dedicated security review session without a date.

AI · claude-sonnet-5-5 · as at Fri 9 Oct 2026

As found in this document

As at Fri 9 Oct 2026

Availability (Enterprise)Enterprise tier guarantees our highest availability commitment, with service credits for breaches.
Data freshness (Enterprise)nightly refresh must complete by 07:00 your local time on business days, with service credits for breaches.
Security incident acknowledgement (Enterprise)investigated and acknowledged within thirty minutes
Security incident response planA full response plan is provided within four business hours.
Incident updatesupdates every two hours until resolution
Rebuild after total data losswe can rebuild your brain within one business day
Encryption in transitTLS 1.2 or higher
Offboarding with SCIMautomatically revokes BG-Demo access within minutes

The document

Body

Vossberg Logistik, Security Questionnaire

Version: 1 Date: 2 November 2025 Status: Final

Architecture and Data Residency

Question	Answer
Where does BG-Demo store our data?	Your data remains in your own Snowflake account, in your chosen AWS, Azure or Google Cloud region. BG-Demo runs as a managed application inside your Snowflake instance. We do not copy, cache or store your data outside Snowflake.
Can data residency be restricted to a specific region?	Yes. With Enterprise tier, dedicated EU data residency is available as an add-on, ensuring all compute and metadata remain within your chosen EU region.
How are data flows managed?	Your Snowflake account connects to your source systems (CRM, call recordings, emails, finance, HR) via connectors you authorise. All connectors run inside your Snowflake account or your secure network. BG-Demo queries your data; we do not pull raw data to external infrastructure.

Encryption and Data Protection

Read the whole document (5,482 characters)

Question	Answer
Is data encrypted in transit?	Yes. All communication between your systems and Snowflake is encrypted using TLS 1.2 or higher.
Is data encrypted at rest?	Data at rest is protected according to your Snowflake security configuration and your cloud provider's encryption. BG-Demo does not control this; it remains your responsibility and follows your standards.
Who has encryption key management?	You retain full control of encryption keys via your cloud provider and Snowflake configuration. BG-Demo has no access to or control over key material.

Access Control and Identity

Question	Answer
Do you support Single Sign-On (SSO)?	Yes. Enterprise tier includes SAML 2.0 SSO and SCIM for user provisioning and lifecycle management.
How are permissions enforced?	Role-based access control is built in. Your admins configure which users can see which data sources, pages and dashboards. Permissions sync with your identity provider via SCIM.
Can we audit user access?	Yes. Enterprise includes comprehensive audit logging: who logged in, when, what they accessed, what queries they ran. All audit logs are retained and queryable.
What happens if a team member leaves?	With SCIM enabled, offboarding in your identity provider automatically revokes BG-Demo access within minutes. Manual de-provisioning is also available.

Compliance, Standards and Certifications

Question	Answer
Are you SOC 2 Type II certified?	Yes. BG-Demo maintains SOC 2 Type II compliance. Detailed certification reports are available under our standard NDA.
Do you comply with GDPR?	Yes. BG-Demo is fully GDPR compliant. A Data Processing Addendum (DPA) is included with your contract to define data processing terms in line with GDPR requirements.
Is a DPA provided?	Yes. Our standard DPA covers data processing, sub-processors, international transfers and data subject rights. It can be customised for regulated customers.
Do you work with regulated industries?	Yes. We work with financial services, healthcare and other regulated sectors. Security review and compliance customisation are standard for Enterprise tier.

Incident Response and Support

Question	Answer
What is your incident response time?	Security incidents affecting Enterprise customers are investigated and acknowledged within thirty minutes. A full response plan is provided within four business hours.
How are we notified of incidents?	We notify your security contact and technical account manager immediately, with updates every two hours until resolution.
What is your uptime SLA?	Enterprise tier guarantees our highest availability commitment, with service credits for breaches. Data freshness SLA is also included: nightly refresh must complete by 07:00 your local time on business days, with service credits for breaches.
What is your support model?	Enterprise includes a dedicated executive sponsor, a named technical account manager, and the fastest P1 response time. Optional Premium support adds a dedicated named engineer available 07:00–20:00 UK time.

Backup, Disaster Recovery and Data Loss Prevention

Question	Answer
Is disaster recovery included?	Your data is protected by Snowflake's native backup and replication. BG-Demo's configuration is version-controlled and recoverable. In the event of total data loss, we can rebuild your brain within one business day.
Can we perform a backup audit?	Yes. You can audit your Snowflake backups at any time. We can walk you through recovery procedures.

Vendor and Third-Party Risk

Question	Answer
Who are your sub-processors and vendors?	BG-Demo runs inside your Snowflake account and uses only your authorised cloud provider (AWS, Azure or Google Cloud). We do not use additional third-party data processors. A full vendor list is provided in our security documentation.
Can we audit your vendors?	Yes. Vendor security assessments and certifications are available for review.

Next Steps

Please review this questionnaire and raise any further questions with our security team. We will schedule a dedicated security review session to walk through controls in depth and address any concerns specific to your environment or regulatory requirements.

Documentsmade from

Unusual terms

As at Fri 9 Oct 2026

Availability commitment without a stated percentage
Premium support 07:00–20:00 UK time as optional add-on
Encryption at rest left to the customer's responsibility

BG-Demo is a fictional company; every organisation and person here is invented. B-Glass is the tool. Data as of Fri 9 Oct 2026. Help & Support

Help & Support

Help & Support

B-Glass is one place to read everything the company knows about its customers: the CRM, calls, emails, support tickets, product usage, invoices, documents, news and HR. Every page is built from those systems and the data is current to Fri 9 Oct 2026.

How to use the site

Summary is the landing page: what happened this week, the calls just held and the calls coming up, the risks and the renewals due.
Organisations lists every customer. Open one to see its key facts, the AI assessment and next step, platform usage, the ARR journey, deals, documents, contacts and activity, and the lineage of every block.
Conversations, Commercial, People, News and Documents cut the same data by topic. System explains how the site is built and where each figure comes from.
Every card ends with a small made from link: it opens the lineage explorer focused on that card, so you can walk from the figure down to the raw rows it came from.
Use the sun and moon button at the top right to choose dark or light. Choose your device's own mode again to go back to following the device.

How to ask

Press Ask B (the speech bubble) in the header, or open the Ask B page. Type a question, or pick one of the suggestions.

Ask B sends your question to Claude through the B-Glass connector. Claude answers from the same records as these pages, read-only, and links each claim to its source page.
Find (the box in the header) finds the organisations, people, calls, emails, tickets, documents and news that match your words, with links to their pages.
The same connector works in Claude Desktop or the B-Glass Claude Project, with the same answers and sources.

What the data covers

Data	Records
Organisations	225
People at customers	862
BG-Demo staff records (in post and leavers)	58
Calls	1,995
Email threads	3,013
Support tickets	1,159
Documents	1,218
Deals	315
Invoices	285
Events	49
News items	119

Data as of Fri 9 Oct 2026. Text marked AI was written by the AI from the records listed in its made-from link; an AI output that cannot cite its evidence is refused and the previous text kept. Where two systems disagree (for example a contract and the CRM), the key facts show both values and mark the difference.

BG-Demo is a fictional company: every organisation, person and figure here is invented for this demonstration. B-Glass is the tool that reads its data.

Who to contact

Email info@b-glass.uk or talk to your B-Glass account team. Tell us the page address and what looked wrong; a screenshot helps.