Haverlanden Assurantiën - Security Questionnaire
Documentfinal Haverlanden Assurantiën · security_questionnaire · final · 2025-02-22
Security questionnaire answers for a Growth tier customer, created 22 Feb 2025. It states 99.5% uptime, first response to critical issues in one business hour, and a nightly refresh by 07:00 local time. It is not a contract and states no price.
What it says
What this says
Current to 13 Oct 26Security questionnaire answers for a Growth tier customer, created 22 Feb 2025. It states 99.5% uptime, first response to critical issues in one business hour, and a nightly refresh by 07:00 local time. It is not a contract and states no price.
What it is: a completed security questionnaire stored as final, covering authentication, encryption, access control, audit logging, availability, refresh and vulnerability management. It was filed in the customer's Security folder on 22 Feb 2025.
Commits: it states "99.5% uptime (Growth tier)" with first response to critical issues of "one business hour". Data refresh is "completed by 07:00 your local time on business days".
Unusual: it lists "SAML 2.0 single sign-on (SSO) and optional SCIM user provisioning" under a Growth tier answer. SSO and SCIM are normally Enterprise features.
Not settled: the document names no signatory, no price and no term. It does not show which tier or features the order form actually grants.
As found in this document
Current to 9 Oct 26- Availability99.5% uptime (Growth tier)Source: object_read:doc_211_001
- First response to critical issuesone business hourSource: object_read:doc_211_001
- Data refreshNightly refresh, completed by 07:00 your local time on business daysNightly refresh, completed by 07:00 your local time on business days · Source: object_read:doc_211_001
- Encryption in transitTLS 1.2 or higherSource: object_read:doc_211_001
- Audit log retentionLogs retained for twelve monthsSource: object_read:doc_211_001
The document
Body
Haverlanden Assurantiën - Security Questionnaire
Overview
This questionnaire addresses the security, data protection and operational controls that BB-Demo provides to Growth tier customers. Your data is stored and processed inside your Snowflake account, giving you direct control and visibility.
Security Controls
| Control Area | Question | Response |
|---|---|---|
| User Authentication | How are users authenticated? | SAML 2.0 single sign-on (SSO) and optional SCIM user provisioning. Multi-factor authentication is supported through your identity provider. |
| Data Encryption | Is data encrypted in transit and at rest? | Yes. Transit: TLS 1.2 or higher. At rest: Snowflake AES-256 encryption. BB-Demo does not hold encryption keys. |
| Access Control | How is access managed? | Role-based access control (RBAC). Your admins define which users can access which data connectors and dashboards. Access is driven by your identity provider. |
| Audit Logging | What activity is logged? | All logins, questions asked, data exports and admin configuration changes are logged with user and timestamp. Logs retained for twelve months. |
| **Data Av |
Read the whole document (1,801 characters)
ailability | What is the availability SLA? | 99.5% uptime (Growth tier). First response to critical issues: one business hour. | | Data Refresh | How often is data updated? | Nightly refresh, completed by 07:00 your local time on business days. | | Vulnerability Management** | How do you manage security risks? | Regular vulnerability scanning, penetration testing and code review. |
Architecture
The company brain runs as code inside your Snowflake account. Your data does not leave your environment. Connectors authenticate directly to your source systems using credentials you manage.
Unusual terms
Current to 9 Oct 26- SSO and SCIM listed for a Growth tier customer