Carrowkeel Software - Security Questionnaire
Documentfinal Carrowkeel Software · security questionnaire · final · 16 Jun 2025
Security questionnaire completed by Hannah Lowe on 16 Jun 2025 for the proposed Growth tier. It commits to the one business hour P1 response and the 07:00 nightly refresh. Staff access, certification and Irish and UK data terms are left open.
What it says
What this says
As at Fri 9 Oct 2026Security questionnaire completed by Hannah Lowe on 16 Jun 2025 for the proposed Growth tier. It commits to the one business hour P1 response and the 07:00 nightly refresh. Staff access, certification and Irish and UK data terms are left open.
What it is: a pre-sale security questionnaire, marked Final, completed by Hannah Lowe on 16 Jun 2025 for the Growth tier proposed to Carrowkeel Software. It is not a contract or order form.
Commits: "Growth carries a first response target of one business hour for a priority one issue." The nightly refresh "completes by 07:00 customer local time on business days". Availability is the standard Growth level, credited for availability only, with no figure stated.
Unusual: SSO and SCIM are stated as Enterprise only and "not included in the proposed scope". EU residency is an add-on.
Not settled: staff access controls and logging, any certification evidence, and data processing terms for Irish and UK users remain open under section 4. The document itself says anything not covered should be treated as not yet answered.
As found in this document
As at Fri 9 Oct 2026- P1 first response (Growth)one business hour for a priority one issueSource: the AI read of this record
- Nightly refreshcompletes by 07:00 customer local time on business days, as on every tierSource: the AI read of this record
- Availability service levelThe standard Growth availability service level applies, with service credits for availability only.Source: the AI read of this record
The document
Body
Carrowkeel Software - Security Questionnaire
Final | Completed by Hannah Lowe, Solutions Engineer, BG-Demo | 16 Jun 2025
This questionnaire covers the Growth tier proposed to Carrowkeel Software. Account owner: Sophie Ling. Customer Success Manager: Marcus Bell.
Where an answer depends on a detail I have not yet confirmed, I have said so rather than guess. I will put those points in writing separately.
1. Architecture and data location
| # | Question | Answer |
|---|---|---|
| 1.1 | Where does the product run? | To be precise, BG-Demo is built and run inside the customer's own Snowflake account. Carrowkeel data does not move into a separate BG-Demo data store. |
| 1.2 | Which systems does it read from? | Only the systems Carrowkeel chooses to connect, such as the CRM, the helpdesk, calls, email and finance. The number of connectors is set by the Growth tier. |
| 1.3 | Can data stay in the EU? | Dedicated EU data residency is available as an add-on. Because the brain runs in your Snowflake account, the region is the one you choose for that account. |
2. Access control
Read the whole document (2,645 characters)
| # | Question | Answer |
|---|---|---|
| 2.1 | Is single sign-on supported? | SSO and SCIM are part of the Enterprise tier, not Growth. They are not included in the proposed scope. |
| 2.2 | How are user permissions managed? | Users are managed by Carrowkeel administrators. The brain reads data through the connections Carrowkeel sets up. |
| 2.3 | Who at BG-Demo can see customer data? | The short answer is that access is limited to staff working on the account. The longer answer, including how that access is granted and removed, I will put in writing after checking with our security lead. |
3. Service levels and support
| # | Question | Answer |
|---|---|---|
| 3.1 | What availability is committed? | The standard Growth availability service level applies, with service credits for availability only. |
| 3.2 | What is the response time for a serious incident? | Growth carries a first response target of one business hour for a priority one issue. |
| 3.3 | How fresh is the data? | The nightly refresh completes by 07:00 customer local time on business days, as on every tier. |
4. Items to confirm in writing
| # | Item | Owner |
|---|---|---|
| 4.1 | Detail of staff access controls and logging | Hannah Lowe |
| 4.2 | Any formal certification evidence Carrowkeel requires | Hannah Lowe, after checking internally |
| 4.3 | Data processing terms for Irish and UK users | Sophie Ling |
5. Notes
No overstated claims have been made in this document. Anything not covered above should be treated as not yet answered.
Unusual terms
As at Fri 9 Oct 2026- SSO and SCIM excluded from proposed scope
- EU data residency only as an add-on