What this says
As at Fri 9 Oct 2026A completed security questionnaire answering ten questions for Lindesvik Logistik, stored as final. It states the data stays in the customer's own Snowflake account, that Growth tier has no single sign-on, and that BG-Demo is audited to SOC 2 Type II standards. It states no price or service levels.
What it is: a one-sheet security questionnaire of BG-Demo's answers, filed in the customer's Security folder, created and modified on 18 Sep 2026. It names Hannah Lowe, Solutions Engineer, as the BG-Demo person involved.
Commits: it describes the security approach rather than binding terms. Key statements: "BG-Demo stores no copy of your data" and "BG-Demo does not hold encryption keys". Backup is the customer's: "Data is not backed up separately by BG-Demo".
Unusual: the access answer says "Growth tier does not include single sign-on, which is available in Enterprise", which suggests the customer is on or being offered Growth. That is an upgrade point if SSO matters to them.
Not settled: the incident answer promises notice "within a defined timeframe" without giving it. Vulnerability testing is described only as "regular". No signatory, contract, price or renewal date appears, and the document does not say who at Lindesvik Logistik asked the questions.
The document
Body
Lindesvik Logistik, Security Questionnaire
BG-Demo Security and Compliance
| Question | Answer |
|---|---|
| Data location and residency | Your data layer runs inside your own Snowflake account in your chosen region. BG-Demo stores no copy of your data; our system reads and indexes only what you permit. |
| Encryption in transit | All communication between your systems and the BG-Demo service uses TLS 1.2 or higher. |
| Encryption at rest | Data at rest is encrypted using your Snowflake account's encryption settings; BG-Demo does not hold encryption keys. |
| Access controls | User access to the data layer is managed through your Snowflake identity provider; Growth tier does not include single sign-on, which is available in Enterprise. |
| Audit logging | All queries to the data layer are logged in your Snowflake account and available for audit. |
| Backup and recovery | Data is not backed up separately by BG-Demo; your Snowflake backup and recovery policy applies. |
| Vulnerability management | We conduct regular security testing and maintain a vulnerability disclosure programme. |
| Compliance certifications | BG-Demo is audited |
Read the whole document (1,534 characters)
to SOC 2 Type II standards. | | Incident response | We maintain a documented incident response process and will notify you of any incident affecting your data within a defined timeframe. | | Subprocessors and third parties | BG-Demo uses only Snowflake and cloud infrastructure services; a full list is available on request. |
Unusual terms
As at Fri 9 Oct 2026- No single sign-on on Growth tier
- Incident notice within a defined timeframe, not specified
- No separate backup by BG-Demo