Ardcarne Life Assurance

Ardcarne Life Assurance signed an Enterprise MSA, DPA and order form on 4 Sep 2026: £125k per year from 1 Oct 2026 to 30 Sep 2027, 99.9% availability, P1 response 0.5 hours. Four drafts are superseded, and connector go-live dates are still not set.

Executed: Three documents are executed, all dated 4 Sep 2026: the MSA, the DPA and the order form. The order form, signed by Ronan Tierney for Ardcarne and Matteo Ricci for BB-Demo, sets the Enterprise tier at £125k per year from 1 Oct 2026 to 30 Sep 2027.

The order form's £155k total contract value includes the one-off implementation and is not an annual price. The signed MSA states the implementation fee as £30k.

Service levels in the order form are 99.9% availability, P1 first response in 0.5 hours and the nightly refresh complete by 07:00. A credit of 10% of one month's fee applies per breach month, for availability and for stale data.

Open items: Four drafts are on file: security questionnaire v1 of 5 May 2026, proposal v1 of 10 Jun 2026, MSA v2 of 24 Jul 2026 and MSA v1 of 20 Aug 2026. The executed copies of 4 Sep 2026 supersede them and the final proposals of 23 Mar 2026 and 15 Jun 2026.

The onboarding plan of 4 Oct 2026 sets four phases but no dates and no connector go-live commitments. The signed MSA leaves connector dates to the implementation plan, so they remain open.

Contradictions:

• Draft MSA v1 of 20 Aug 2026 promised incident notification within twenty-four hours and two post-incident actions by year end. The executed DPA says only "without undue delay".
• MSA v2 is dated 24 Jul 2026, before MSA v1 of 20 Aug 2026, so the version labels do not follow the drafting order.
• The onboarding plan words the refresh as by the start of the business day, Dublin time. The order form fixes 07:00 customer local time, and the order form prevails.

Commitments: BB-Demo bills annually in advance on 30-day terms and delivers a twelve-week implementation for up to twelve connectors. Under the DPA it keeps data in Ardcarne's Snowflake account and gives written notice before any sub-processor change.

Gaps: This roll-up covers all 11 documents. The documents do not show whether the dated incident notification commitment promised in the 27 Feb 2026 security questionnaire reached the executed MSA.

No renewal notice period is stated, and renewal is by agreement of both parties. The plan's 150 licensed users and its £125k contracted figure are not cross-checked against the order form, which states no user number.

AI · claude-opus-5-5 · 13 Oct 2026