Wabash Crossing Logistics - Security Questionnaire
Documentfinal Wabash Crossing Logistics · security questionnaire · final · 3 Feb 2026
BG-Demo's responses to a security questionnaire filed under Wabash Crossing Logistics. It states SSO via SAML 2.0, TLS 1.2 or higher, AES-256 at rest, nightly refresh by 07:00 and an Enterprise SLA of 99.9% availability. It is not a contract.
What it says
What this says
As at Fri 9 Oct 2026BG-Demo's responses to a security questionnaire filed under Wabash Crossing Logistics. It states SSO via SAML 2.0, TLS 1.2 or higher, AES-256 at rest, nightly refresh by 07:00 and an Enterprise SLA of 99.9% availability. It is not a contract.
What it is: a completed security questionnaire, stored as final, dated 3 Feb 2026. It sets out BG-Demo's controls for an Enterprise customer, with the brain running "inside the customer's Snowflake account".
Commits: it restates the standard Enterprise terms: "Enterprise SLA commits to 99.9% availability and 10% service credit per month for freshness breaches". Refresh is "completed by 07:00 customer local time on business days". Audit logs are "retained for twelve months".
Unusual: nothing departs from the standard Enterprise terms in the company brief. The document does not state a price, a P1 response time, parties, a signature or a renewal date.
Not settled: whether the customer accepted these answers, and which order form these terms sit under. The author is not named in the text; Hannah Lowe, Solutions Engineer, is the only person resolved for it.
As found in this document
As at Fri 9 Oct 2026- Availability99.9% availabilitySource: the AI read of this record
- Service credit for freshness breaches10% service credit per month for freshness breachesSource: the AI read of this record
- Nightly refreshcompleted by 07:00 customer local time on business daysSource: the AI read of this record
- Encryption in transitTLS 1.2 or higherSource: the AI read of this record
- Audit log retentiontwelve monthsSource: the AI read of this record
Body
Wabash Crossing Logistics - Security Questionnaire
Overview
This questionnaire describes how BG-Demo protects data and complies with Enterprise customer requirements. B-Glass runs inside the customer's Snowflake account; this design ensures your data remains in your environment.
Security Controls
| Area | Question | BG-Demo Response |
|---|---|---|
| Authentication | Do you support single sign-on (SSO)? | Yes. All Enterprise customers have SSO enabled via SAML 2.0 and optional SCIM for user lifecycle management. |
| Authentication | What authentication methods are supported? | SAML 2.0, SCIM, multi-factor authentication (MFA) where the identity provider supports it. |
| Data Encryption | Is data encrypted in transit? | Yes. All data in transit uses TLS 1.2 or higher. |
| Data Encryption | Is data encrypted at rest? | Data at rest is encrypted by Snowflake using AES-256. BG-Demo does not hold encryption keys. |
| Access Control | How is access controlled? | Role-based access control (RBAC) within the brain; integration with your identity provider via SSO. Admins control who sees which data sources and pages. |
| **Audit Loggin |
Read the whole document (2,163 characters)
g | What audit logs are available? | All page views, questions asked, data exports and admin actions are logged with timestamp and user. Logs are retained for twelve months. | | Data Freshness | How often is data refreshed? | Nightly refresh, completed by 07:00 customer local time on business days. Enterprise SLA commits to 99.9% availability and 10% service credit per month for freshness breaches. | | Data Residency | Where is data stored? | Inside the customer's Snowflake account in the customer's chosen region. BG-Demo code and connectors run in the customer's environment. | | Backup & Recovery | What disaster recovery exists? | Data recovery via Snowflake's backup and time-travel features, which the customer controls. | | Vulnerability Management** | How are vulnerabilities managed? | BG-Demo runs regular vulnerability scanning, penetration testing and code reviews. Enterprise customers receive a security review before go-live. |