Strathcorran Renewables - Security Questionnaire
Documentfinal Strathcorran Renewables · security questionnaire · final · 22 Sep 2026
Completed security questionnaire for Strathcorran Renewables, answered by Hannah Lowe on 22 Sep 2026. States TLS 1.2 or higher in transit, AES-256 at rest, SSO login, twelve-month audit logs and breach notification within 24 hours.
What it says
What this says
As at Fri 9 Oct 2026Completed security questionnaire for Strathcorran Renewables, answered by Hannah Lowe on 22 Sep 2026. States TLS 1.2 or higher in transit, AES-256 at rest, SSO login, twelve-month audit logs and breach notification within 24 hours.
What it is: a completed security questionnaire filed under the customer's Security folder, answered by Hannah Lowe, Solutions Engineer at BG-Demo, on 22 Sep 2026. It is a set of vendor assurances, not an order form.
Commits: "will notify you of any breach within 24 hours" is the only dated commitment, tied to this questionnaire dated 22 September 2026. Encryption is stated as "TLS 1.2 or higher" in transit and "AES-256" at rest, with the customer owning the keys.
Unusual: the answers promise SSO, which the brief lists as an Enterprise feature, so the tier the customer is on is worth checking. It also states SOC 2 Type II certification and GDPR compliance without giving a report date or reference.
Not settled: the document does not say which tier or contract it sits under, who at Strathcorran asked for it, or whether it forms part of the order form. It carries no price or service levels, and no customer reply is recorded.
As found in this document
As at Fri 9 Oct 2026- Data in transitTLS 1.2 or higher encryptionSource: the AI read of this record
- Data at restSnowflake's default AES-256 encryptionSource: the AI read of this record
- Audit log retentionLogs are retained for twelve monthsSource: the AI read of this record
- Breach notificationwill notify you of any breach within 24 hoursSource: the AI read of this record
The document
Body
Strathcorran Renewables, Security Questionnaire
Completed: 22 September 2026
Data Protection and Encryption
| Question | Answer |
|---|---|
| Data in transit | To be precise, all data transmitted between Strathcorran and BG-Demo uses TLS 1.2 or higher encryption. Snowflake enforces encrypted connections; we can evidence that in our control reference SEC-001. |
| Data at rest | Your data is stored in your Snowflake account with Snowflake's default AES-256 encryption. You own and control the encryption keys throughout. |
Access Management
| Question | Answer |
|---|---|
| User authentication | The short answer is that you control who logs in. BG-Demo integrates with your identity provider via SSO. Every login is logged in both the brain and your Snowflake audit trail. |
| Data permissions | Your admins assign users to teams and control which data sources each team can query. We log every query with the user, timestamp and data sources accessed. |
Compliance and Audit
Read the whole document (1,587 characters)
| Question | Answer |
|---|---|
| Audit trail | Every question asked is logged with the user who asked it, the timestamp, data sources queried and result set size. Logs are retained for twelve months. |
| Incident response | We have a documented incident response plan and will notify you of any breach within 24 hours. Here is the dated commitment: this questionnaire dated 22 September 2026. |
| Compliance | BG-Demo is SOC 2 Type II certified and GDPR compliant. |
Completed by Hannah Lowe, Solutions Engineer, BG-Demo Date: 22 September 2026
Unusual terms
As at Fri 9 Oct 2026- Breach notification within 24 hours
- SSO stated as available
- SOC 2 Type II claim