Ellerby Dental Group - Security Questionnaire
Documentfinal Ellerby Dental Group · security_questionnaire · final · 2025-03-01
Security questionnaire dated 1 Mar 2025 completed by Hannah Lowe. It records 99.5% uptime, 1 business hour P1 first response and a nightly refresh by 07:00 UK time, and confirms Growth tier meets Ellerby's requirements. It states no price.
What it says
What this says
Current to 13 Oct 26Security questionnaire dated 1 Mar 2025 completed by Hannah Lowe. It records 99.5% uptime, 1 business hour P1 first response and a nightly refresh by 07:00 UK time, and confirms Growth tier meets Ellerby's requirements. It states no price.
What it is: a customer security questionnaire for Ellerby Dental Group, completed by Hannah Lowe, Solutions Engineer, on 1 Mar 2025. Stored status is final, but the text carries no signature or countersignature.
Commits: BB-Demo "confirms that the Growth tier, configured as above, meets the security, compliance and operational requirements of Ellerby Dental Group." The stated levels are 99.5% uptime, 1 business hour P1 first response and a nightly refresh complete by 07:00 UK time on business days.
Unusual: nothing departs from standard Growth terms. Data must reside in the United Kingdom, audit logs must be kept for a minimum of 3 years, and NHS DSPT applies.
Not settled: it is not an order form, so it sets no price, term, connector dates or service credits. A standard DPA is said to be executed before go-live, and the text does not show that it was.
As found in this document
Current to 9 Oct 26- Availability99.5% uptime (Growth tier standard)99.5% uptime (Growth tier standard) · Source: object_read:doc_095_001
- P1 first response1 business hour first response (Growth tier standard)1 business hour first response (Growth tier standard) · Source: object_read:doc_095_001
- Data refreshNightly, complete by 07:00 UK time on business daysNightly, complete by 07:00 UK time on business days · Source: object_read:doc_095_001
- Data residencyUnited KingdomSource: object_read:doc_095_001
- Audit log retentionMinimum 3 yearsSource: object_read:doc_095_001
- Data Processing Agreementstandard DPA will be executed before go-livestandard DPA will be executed before go-live · Source: object_read:doc_095_001
The document
Body
Ellerby Dental Group - Security Questionnaire
Date: 1 Mar 2025
Security and Data Handling
| Question | Answer |
|---|---|
| Where is patient and operational data currently stored? | In practice-management systems and call recordings across the practice group. |
| What encryption standard is required for data in transit and at rest? | TLS 1.2 or higher for transit; AES-256 for rest. |
| What compliance framework applies to your organisation? | NHS Data Security and Protection Toolkit (DSPT) for NHS-contracted practices. |
| Do you require single sign-on access? | No; standard Growth tier access control is sufficient. |
| What audit log retention period is required? | Minimum 3 years. |
Data Residency and Service Levels
| Question | Answer |
|---|---|
| Where must data reside? | United Kingdom. |
| What availability SLA is required? | 99.5% uptime (Growth tier standard). |
| What is the maximum acceptable data refresh interval? | Nightly, complete by 07:00 UK time on business days. |
Support and Compliance
Read the whole document (1,667 characters)
| Question | Answer |
|---|---|
| What is the P1 incident response time required? | 1 business hour first response (Growth tier standard). |
| Is a Data Processing Agreement required? | Yes; standard DPA will be executed before go-live. |
| Are third-party security audits required? | Not required for standard Growth tier; available as an add-on. |
Confirmation
BB-Demo confirms that the Growth tier, configured as above, meets the security, compliance and operational requirements of Ellerby Dental Group. Implementation will proceed on this basis.
Completed by: Hannah Lowe, Solutions Engineer, BB-Demo
Date: 1 Mar 2025
Unusual terms
Current to 9 Oct 26- UK data residency required
- Audit log retention minimum 3 years
- NHS DSPT compliance framework