Saltdean Hart Insurance Brokers - Security Questionnaire
Documentfinal Saltdean Hart Insurance Brokers · security questionnaire · final · 1 Oct 2024
BG-Demo's written answers to Saltdean Hart's security questions ahead of a Growth subscription, dated 1 Oct 2024. It states no figures for availability, P1 response or price, and no order form is drawn up in it.
What it says
What this says
As at Fri 9 Oct 2026BG-Demo's written answers to Saltdean Hart's security questions ahead of a Growth subscription, dated 1 Oct 2024. It states no figures for availability, P1 response or price, and no order form is drawn up in it.
What it is: a final set of written security answers prepared by Hannah Lowe, Solutions Engineer, for a Brighton commercial insurance broker considering Growth. It is not a contract.
Commits: data stays in the customer's own Snowflake account, and "nothing is indexed unless a connector is switched on for it". Service levels are referred to only as the Growth commitments, with no figures.
Unusual: nothing off standard terms. Single sign-on, SCIM and an executive sponsor are placed with Enterprise, not Growth.
Not settled: role design, the precise arrangement for BG-Demo staff access ("I'll put the precise arrangement in writing in the order documents"), and which claims sources are connected first. It dates from 2024, so it may not reflect current terms.
As found in this document
As at Fri 9 Oct 2026- Data locationthe brain's tables, indexes and logs sit in the customer's environment, not in a BG-Demo-owned data storeSource: the AI read of this record
- Indexing scopenothing is indexed unless a connector is switched on for itSource: the AI read of this record
- AvailabilityThe Growth availability commitment in the BG-Demo service levels, with service credits for availability only.Source: the AI read of this record
- Serious incident responseThe Growth first-response commitment for the highest-priority tickets, measured in business hours.Source: the AI read of this record
- Data freshness creditsNot on Growth. Freshness credits apply to Enterprise only.Source: the AI read of this record
Body
Saltdean Hart Insurance Brokers - Security Questionnaire
Status: Final Date: 1 Oct 2024 Prepared by: Hannah Lowe, Solutions Engineer, BG-Demo Account owner: Priya Raman Customer success manager: Marcus Bell Tier under discussion: Growth
This document records BG-Demo's written answers to the security questions raised by Saltdean Hart Insurance Brokers, a Brighton commercial insurance broker, ahead of a Growth subscription for its account executives and claims team. Where a control depends on the customer's own Snowflake account, the answer says so. Where a feature belongs to a different tier, that is stated plainly rather than implied.
Architecture and data location
Read the whole document (4,241 characters)
| Question | Answer |
|---|---|
| Where does the customer's data live? | BG-Demo runs inside the customer's own Snowflake account. To be precise, the brain's tables, indexes and logs sit in the customer's environment, not in a BG-Demo-owned data store. |
| Does BG-Demo hold a separate copy of customer data? | No separate copy is held as a matter of design. Connectors read from the customer's systems and write into the customer's Snowflake account. |
| Can data residency be fixed to a region? | Dedicated EU or US data residency is available as an add-on. For a UK customer on Growth, the data stays in the region of the customer's own Snowflake account. |
| Which systems can be connected? | Salesforce, HubSpot, Zendesk, Xero, Gong, Microsoft 365, Google Workspace, Dropbox, SharePoint and Slack, plus the customer's own Snowflake data. The connector allowance depends on the tier. |
Access and identity
| Question | Answer |
|---|---|
| How do users sign in? | Growth users sign in with the credentials provisioned for the customer's workspace. Single sign-on and SCIM provisioning are part of Enterprise, not Growth. |
| Can access be limited by team? | Yes. The brain is configured with the customer's own roles, so account executives and the claims team can be given different views. The exact role design is agreed during implementation. |
| Who at BG-Demo can reach the customer's environment? | Only named BG-Demo staff working on the account, and only for implementation and support. I'll put the precise arrangement in writing in the order documents. |
| Is there an executive sponsor? | An executive sponsor is an Enterprise feature. Growth accounts have a named customer success manager, which for this account is Marcus Bell. |
Handling of claims and personal data
| Question | Answer |
|---|---|
| Will the brain index claims records and customer emails? | Only the sources the customer chooses to connect. The short answer is that nothing is indexed unless a connector is switched on for it. The longer answer is that the claims team should decide, source by source, what is in scope. |
| Can a source be excluded later? | Yes. A connector can be paused or removed, and the customer can then decide what happens to previously indexed content within their own Snowflake account. |
| Does BG-Demo make claims about regulatory approval for insurance broking? | No. BG-Demo does not give legal or regulatory advice. The customer's compliance function should confirm how its own obligations apply to the data it connects. |
Service levels relevant to security
| Question | Answer |
|---|---|
| What availability applies on Growth? | The Growth availability commitment in the BG-Demo service levels, with service credits for availability only. |
| What response applies to a serious incident? | The Growth first-response commitment for the highest-priority tickets, measured in business hours. |
| Is data freshness credited? | Not on Growth. Freshness credits apply to Enterprise only. The nightly refresh target applies to every tier. |
Open items for the customer
- Confirm which claims-team sources should be connected first, and which should be left out.
- Confirm who at Saltdean Hart will own access decisions after go-live.
- Tell us if the compliance function wants any further questions answered before an order form is drawn up.
If a question here was answered more generally than you needed, ask again and I will check the detail with our security lead before answering.
Thanks, Hannah