Kingdon Diagnostics - Security Questionnaire
Documentfinal Kingdon Diagnostics · security questionnaire · final · 27 Oct 2024
Final security questionnaire prepared by Hannah Lowe on 27 Oct 2024 for the Growth tier. Data stays in the customer's own Snowflake account. Nightly refresh completes by 07:00 customer local time; no price or availability figure is stated.
What it says
What this says
As at Fri 9 Oct 2026Final security questionnaire prepared by Hannah Lowe on 27 Oct 2024 for the Growth tier. Data stays in the customer's own Snowflake account. Nightly refresh completes by 07:00 customer local time; no price or availability figure is stated.
What it is: a question-and-answer security response from Hannah Lowe, Solutions Engineer, to Kingdon Diagnostics ahead of the Growth subscription. Account owner is Lewis Kerr and customer success manager is Marcus Bell.
Commits: "The nightly refresh completes by 07:00 customer local time on business days, on every tier." Service credits for Growth "cover availability only", and incidents are answered within the Growth first-response service level.
Unusual: nothing off standard terms. SSO and SCIM are stated as Enterprise only, and dedicated residency as a separate add-on, so both would be a change of tier or add-on.
Not settled: the availability percentage and P1 response time are left to the order form. The connector list and permission model are open items for onboarding, and the document is not a contract.
As found in this document
As at Fri 9 Oct 2026- Nightly refreshThe nightly refresh completes by 07:00 customer local time on business days, on every tier.Source: the AI read of this record
- Service credits (Growth)Service credits for Growth cover availability only.Source: the AI read of this record
- Incident responseanswered within the Growth first-response service level for urgent issuesSource: the AI read of this record
Body
Kingdon Diagnostics - Security Questionnaire
Status: Final Prepared for: Kingdon Diagnostics, Newcastle upon Tyne Prepared by: Hannah Lowe, Solutions Engineer, BG-Demo Date: 27 Oct 2024 Tier under review: Growth BG-Demo contacts: Lewis Kerr (account owner), Marcus Bell (customer success manager)
This document answers the security questions raised by Kingdon Diagnostics ahead of the Growth subscription. Where a control depends on your own Snowflake account configuration, the answer says so. To be precise, I have described only what BG-Demo does and what the Growth tier includes.
1. Architecture and data location
Read the whole document (3,754 characters)
| # | Question | Answer |
|---|---|---|
| 1.1 | Where is our data stored? | B-Glass is built and run inside Kingdon Diagnostics' own Snowflake account. Your data is not copied into a BG-Demo-owned data store. |
| 1.2 | Does BG-Demo hold a separate copy of our data? | No. BG-Demo works with the data where it sits in your account. Connectors read from your source systems into your Snowflake account. |
| 1.3 | Can we choose a data residency region? | Your Snowflake account's region sets where the data lives. Dedicated EU or US residency is a separate add-on and is not part of this Growth scope. |
| 1.4 | Which source systems will be connected? | Those agreed in the order form. Systems such as your CRM, helpdesk and accounting system are typical; the final list is confirmed during implementation. |
2. Access control
| # | Question | Answer |
|---|---|---|
| 2.1 | How is user access controlled? | Access to the brain is managed per user, with admins able to control who can see which content. Role design is agreed with your team during onboarding. |
| 2.2 | Is single sign-on supported? | SSO and SCIM are part of the Enterprise tier, not Growth. Growth users sign in with the standard method. If SSO becomes a requirement, an upgrade would be the route. |
| 2.3 | Who at BG-Demo can reach our environment? | Only the named implementation and support staff working on your account, and only as needed for delivery and support. |
| 2.4 | Can contract managers see only the trusts they cover? | Yes, in principle, by permission design on the content. I will put the agreed permission model in writing during implementation. |
3. Data protection
| # | Question | Answer |
|---|---|---|
| 3.1 | Is data encrypted? | Encryption at rest and in transit is provided by the Snowflake platform in your account and by the connectors' secure connections. Your account settings govern the detail. |
| 3.2 | Will patient-identifiable data be needed? | The Growth use case is contract management: referrals, reporting-turnaround tickets and invoices. We recommend scoping connectors so that clinical records are not brought in. |
| 3.3 | What happens to data when the contract ends? | Because the data lives in your account, you retain it. BG-Demo's access and connectors are removed at the end of the agreement. |
4. Service and resilience
| # | Question | Answer |
|---|---|---|
| 4.1 | What availability is committed? | The standard Growth availability service level applies, as set out in the order form. Service credits for Growth cover availability only. |
| 4.2 | How fresh is the data? | The nightly refresh completes by 07:00 customer local time on business days, on every tier. |
| 4.3 | How are incidents handled? | Incidents are logged through the helpdesk and answered within the Growth first-response service level for urgent issues. |
5. Open items
- Final connector list and permission model: to be agreed with Kingdon Diagnostics during onboarding.
- Any request for SSO, SCIM or dedicated residency: handled as a change of tier or add-on, via Lewis Kerr.
Thanks, Hannah