Lathom Sands Leisure Parks - Security Questionnaire
Documentfinal Lathom Sands Leisure Parks · security_questionnaire · final · 2025-08-23
Completed security questionnaire from 23 Aug 2025 answering twelve questions on encryption, access, incident response and uptime. It quotes 99.5% monthly availability for Growth tier and incident notification within four hours. It is not a contract.
What it says
What this says
Current to 11 Oct 26Completed security questionnaire from 23 Aug 2025 answering twelve questions on encryption, access, incident response and uptime. It quotes 99.5% monthly availability for Growth tier and incident notification within four hours. It is not a contract.
What it is: a question and answer sheet filed under the customer's Security folder, with BB-Demo answers only. No customer signature or approval is shown.
Commits: the Growth tier uptime answer reads "99.5% monthly availability; service credits for outages exceeding the SLA." Incident handling reads "escalated to security team within two business hours; customer notification within four."
Unusual: nothing departs from the standard Growth terms. Breach notification within 72 hours and 12 months minimum audit log retention are stated as practice.
Not settled: the questionnaire gives no price, term or renewal date, and does not say which order form it supports. Answers dated 23 Aug 2025 may need rechecking before reuse.
As found in this document
Current to 9 Oct 26- Growth tier availability99.5% monthly availability; service credits for outages exceeding the SLA.99.5% monthly availability; service credits for outages exceeding the SLA. · Source: object_read:doc_137_001
- Incident responseSuspected incidents escalated to security team within two business hours; customer notification within four.Suspected incidents escalated to security team within two business hours; customer notification within four. · Source: object_read:doc_137_001
- Data breach notificationAffected customers notified within 72 hours; detailed forensics and remediation plan provided.Affected customers notified within 72 hours; detailed forensics and remediation plan provided. · Source: object_read:doc_137_001
- Audit log retention12 months minimum; longer retention available on request.12 months minimum; longer retention available on request. · Source: object_read:doc_137_001
The document
Body
Lathom Sands Leisure Parks - Security Questionnaire
| Question | Answer |
|---|---|
| What encryption protocols do you use for data in transit? | TLS 1.2 and above for all communications. |
| How is data encrypted at rest? | AES-256 encryption for all data stored in Snowflake. |
| Who can access customer data? | BB-Demo engineers with operational need; your own Snowflake account administrators. |
| How frequently are access logs reviewed? | Automated monitoring daily; manual review weekly. |
| What is your incident response process? | Suspected incidents escalated to security team within two business hours; customer notification within four. |
| Do you conduct penetration testing? | Yes, quarterly external penetration tests and monthly vulnerability scans. |
| How is employee access to systems governed? | Multi-factor authentication required; role-based access provisioning via identity management. |
| What is your data breach notification procedure? | Affected customers notified within 72 hours; detailed forensics and remediation plan provided. |
| How long are audit logs retained? | 12 months minimum; longer retention available on request. |
| Is the service SaaS or self-hosted |
Read the whole document (1,483 characters)
? | SaaS, hosted in your own Snowflake account. | | What is the uptime commitment for Growth tier? | 99.5% monthly availability; service credits for outages exceeding the SLA. | | Are there relevant certifications or compliance reports? | SOC 2 Type II report available on request. |