What it says
What this says
As at Fri 9 Oct 2026Completed security questionnaire dated 27 Nov 2024 for the Growth tier. Data stays in the customer's own Snowflake account, with TLS 1.2 minimum, SOC 2 Type II and incident reporting within 4 business hours. It states no price, availability or P1 response figure.
What it is: a BG-Demo answer sheet to the customer's security questions, filed under the customer's Security folder and stored as final. It was prepared for Pasir Laut Logistics and names Hannah Lowe as the contact for clarifications.
Commits: it states "TLS 1.2 minimum for all connections" and deletion "within 5 business days". Security incidents are reported "Within 4 business hours to your primary contact".
Unusual: the answers say users are "Integrated with your identity provider via SSO (SAML/OIDC)", yet the document is marked Growth tier, where SSO is not listed in the standard tier map.
Not settled: it is not a contract and does not say whether the customer accepted the answers. It gives no price, availability or P1 response figures, and it is dated 27 Nov 2024, so later practice may differ.
As found in this document
As at Fri 9 Oct 2026- Data in transitTLS 1.2 minimum for all connectionsSource: the AI read of this record
- Data deletion on requestYes, purged from Snowflake and all indexes within 5 business daysSource: the AI read of this record
- Security incident reportingWithin 4 business hours to your primary contactSource: the AI read of this record
- User deprovisioningYes, same-day removal via admin panel or CSM requestSource: the AI read of this record
The document
Body
Pasir Laut Logistics, Security Questionnaire
Date: 27 Nov 2024 Tier: Growth
Data Location and Encryption
| Aspect | Answer |
|---|---|
| Where is customer data stored? | Inside your Snowflake account, in your designated cloud region |
| How is data protected in transit? | TLS 1.2 minimum for all connections |
| How is data encrypted at rest? | Snowflake native encryption at the storage layer |
| Can BG-Demo staff access customer data? | Only with explicit customer permission for support purposes |
User Access and Audit Controls
| Aspect | Answer |
|---|---|
| How are user identities managed? | Integrated with your identity provider via SSO (SAML/OIDC) |
| Can users be provisioned and deprovisioned quickly? | Yes, same-day removal via admin panel or CSM request |
| Are user actions logged for audit? | Yes, complete audit trail in Snowflake activity logs |
| Is multi-factor authentication enforced? | Yes, inherited from your identity provider configuration |
Data Retention and Deletion
Read the whole document (2,127 characters)
| Aspect | Answer |
|---|---|
| How long is data retained? | Per your data retention policy, which BG-Demo implements |
| Can customers delete data on request? | Yes, purged from Snowflake and all indexes within 5 business days |
| Are deletions logged? | Yes, for audit and compliance purposes |
Compliance and Standards
| Aspect | Answer |
|---|---|
| Is BG-Demo SOC 2 Type II certified? | Yes, annual certification |
| Is BG-Demo GDPR compliant? | Yes, with data processing agreements as needed |
| Are subprocessor agreements provided? | Yes, included in the Master Service Agreement |
Incident Response
| Aspect | Answer |
|---|---|
| How quickly are security incidents reported? | Within 4 business hours to your primary contact |
| Is there a documented incident response procedure? | Yes, defined in the MSA with clear notification timelines |
Please review these answers against your security policy. Any clarifications can be discussed with Hannah Lowe (Solutions Engineer, hannah.lowe@bg-demo.example) or your assigned CSM.
Unusual terms
As at Fri 9 Oct 2026- SSO stated on a Growth tier questionnaire