Thackwray Logistics - Security Questionnaire
Documentfinal Thackwray Logistics · security_questionnaire · final · 2025-01-24
Final security questionnaire completed 24 Jan 2025 by Hannah Lowe for a Growth subscription. It states nightly refresh by 07:00 customer local time and defers availability and P1 response to the order form. SSO and SCIM are Enterprise only.
What it says
What this says
Current to 14 Oct 26Final security questionnaire completed 24 Jan 2025 by Hannah Lowe for a Growth subscription. It states nightly refresh by 07:00 customer local time and defers availability and P1 response to the order form. SSO and SCIM are Enterprise only.
What it is: a completed questionnaire, version 1, answering Thackwray Logistics' security questions ahead of a Growth subscription. It is not a contract and states no price.
Commits: "The refresh completes by 07:00 customer local time on business days, on every tier." Growth credits apply to availability only; freshness credits are an Enterprise term.
Unusual: nothing off standard terms. It says SSO and SCIM "are Enterprise features. They are not included in Growth", and dedicated regional data residency is an add-on.
Not settled: the availability figure, P1 first-response time and connector list are left to the order form. Open onboarding points: which client-brand sources go live first, the role layout in Thackwray's Snowflake account, and the written connector list.
As found in this document
Current to 9 Oct 26- Data refreshThe refresh completes by 07:00 customer local time on business days, on every tier.The refresh completes by 07:00 customer local time on business days, on every tier. · Source: object_read:doc_157_001
- Service credits on GrowthService credits on Growth apply to availability only.Service credits on Growth apply to availability only. · Source: object_read:doc_157_001
- AvailabilityThe Growth availability commitment stated in the order form.The Growth availability commitment stated in the order form. · Source: object_read:doc_157_001
- P1 first responseThe Growth first-response commitment for P1 issues, measured in business hours and set out in the order form.The Growth first-response commitment for P1 issues, measured in business hours and set out in the order form. · Source: object_read:doc_157_001
The document
Body
Thackwray Logistics - Security Questionnaire
Status: Final, version 1 Completed: 24 Jan 2025 Prepared by: Hannah Lowe, Solutions Engineer, BB-Demo Prepared for: Thackwray Logistics (account owner at BB-Demo: Sophie Ling; customer success manager: Amara Obi) Tier under discussion: Growth
Purpose and scope
This document answers the security questions raised by Thackwray Logistics ahead of a Growth subscription. Thackwray plans to bring each client brand's orders, returns tickets and service reviews into one place for its client managers. Where an answer depends on the order form, it says so. Where a control belongs to Thackwray's own Snowflake account rather than to BB-Demo, it says that too.
1. Architecture and data location
Read the whole document (3,586 characters)
| # | Question | Answer |
|---|---|---|
| 1.1 | Where does the product run? | Inside the customer's own Snowflake account. BB-Demo does not copy Thackwray's data into a separate BB-Demo platform. |
| 1.2 | Who owns the data? | Thackwray Logistics. The brain is built and run in its account, so the data stays under its control. |
| 1.3 | Which sources can be connected? | Systems such as Salesforce, HubSpot, Zendesk, Xero, Gong, Microsoft 365, Google Workspace, Dropbox, SharePoint and Slack. The connectors in scope are listed in the order form. |
| 1.4 | Is dedicated regional data residency available? | Yes, as an add-on. It is not part of the Growth tier as standard. |
2. Access control
| # | Question | Answer |
|---|---|---|
| 2.1 | How are users managed? | Users are provisioned for the Growth user allowance. Access to the brain follows the roles Thackwray sets up in its own Snowflake account. |
| 2.2 | Is single sign-on available? | To be precise, SSO and SCIM are Enterprise features. They are not included in Growth. |
| 2.3 | Can access be limited by team? | Yes. Thackwray can restrict what each team sees through its own role design. I'll put the proposed role layout in writing during onboarding. |
3. Data refresh and availability
| # | Question | Answer |
|---|---|---|
| 3.1 | How often is data refreshed? | Nightly. The refresh completes by 07:00 customer local time on business days, on every tier. |
| 3.2 | What availability commitment applies? | The Growth availability commitment stated in the order form. |
| 3.3 | What happens if freshness is missed? | Availability and freshness are separate. Service credits on Growth apply to availability only. Freshness credits are an Enterprise term. |
| 3.4 | What support response applies to a priority incident? | The Growth first-response commitment for P1 issues, measured in business hours and set out in the order form. |
4. Connectors and integrations
| # | Question | Answer |
|---|---|---|
| 4.1 | Do connectors write back to source systems? | The short answer is no for the standard connectors. The longer answer is that any write-back would be agreed separately and in writing. |
| 4.2 | What if a source system changes? | A connector can stop loading after a change in the source. We monitor record counts and will raise it with Thackwray's named contact. |
5. Items outside the Growth tier
- SSO and SCIM (Enterprise).
- Executive sponsor (Enterprise).
- Premium support and the Sandbox (Enterprise, or as add-ons).
- Dedicated data residency (add-on).
6. Open points for onboarding
- Thackwray to confirm which client-brand sources go live first.
- Thackwray's IT contact to confirm the role layout in its Snowflake account.
- BB-Demo to send the written connector list with the order form.
Thanks, Hannah