Security review: finding a time

Hello Nadia, Thank you for your note last week. I'd like to set up a working session for Fenmoor's security review, and before we do I'd find it helpful to know what you most need to know, so I can bring the right material. To be precise about what I plan to cover: the architecture of the brain and where it sits (it runs inside your own Snowflake account), how access is controlled, and how connectors authenticate to your systems. I'll put the answers in writing so that you have a paper trail for your auditors, rather than relying on anything said on the call. Would Thursday afternoon suit you, say 15:00? If it doesn't, give me two or three alternatives and I'll work around you. Thanks, Hannah Hannah Lowe Solutions Engineer, BG-Demo

Dear Hannah, Thank you. Thursday at 15:00 is fine for me. So that we use the time well, these are the open items I would like to cover: First, can you evidence how access is controlled and logged, and who at BG-Demo can see anything inside our Snowflake account? Second, where our data resides, and whether anything leaves our environment at any point. Third, how credentials for each connector are stored and rotated. I'll need all of that in the questionnaire, for the audit trail. Please note I can't agree a sign-off date until our capacity providers have seen the pack, so I would rather we agreed the content first and the timing afterwards. Kind regards, Nadia