Dunholm Precision - Security Questionnaire
Documentfinal Dunholm Precision: documents · security_questionnaire · final · 2024-08-01
BB-Demo's final answers to Dunholm Precision's security and data-handling questions, completed 1 Aug 2024 by Hannah Lowe for the Growth tier. It states no availability %, P1 response time or price; those are deferred to the order form.
What it says
What this says
Current to 11 Oct 26BB-Demo's final answers to Dunholm Precision's security and data-handling questions, completed 1 Aug 2024 by Hannah Lowe for the Growth tier. It states no availability %, P1 response time or price; those are deferred to the order form.
What it is: a questionnaire completed on 1 Aug 2024 by Hannah Lowe, Solutions Engineer, during evaluation. It answers architecture, access control, support and data protection questions for the Growth tier.
Commits: the only firm service figure is "The nightly refresh completes by 07:00 customer local time on business days, on every tier." It also says data stays in the customer's own Snowflake account and is not used to train models for other customers.
Unusual: no non-standard terms. SSO and SCIM are stated as Enterprise only, and Sandbox is an add-on.
Not settled: availability, P1 response and service credit figures are deferred to the order form. Certifications are not listed, and two open items remain: an architecture diagram and written confirmation of staff access arrangements. It is a 2024 document, so check the executed order form for current terms.
As found in this document
Current to 9 Oct 26- Nightly refreshThe nightly refresh completes by 07:00 customer local time on business days, on every tier.The nightly refresh completes by 07:00 customer local time on business days, on every tier. · Source: object_read:doc_018_001
- Data locationYour data stays in your account and is not copied into a shared BB-Demo store.Your data stays in your account and is not copied into a shared BB-Demo store. · Source: object_read:doc_018_001
- Model trainingYour data is used only to answer your own questions inside your own account.Your data is used only to answer your own questions inside your own account. · Source: object_read:doc_018_001
The document
Body
Dunholm Precision - Security Questionnaire
Status: Final Completed: Thursday 1 August 2024 Prepared by: Hannah Lowe, Solutions Engineer, BB-Demo Account owner: Tom Ashdown Customer success manager: Daniel Okafor Tier discussed: Growth
Purpose
This questionnaire records BB-Demo's answers to the security and data-handling questions raised by Dunholm Precision, a Sheffield manufacturer evaluating the brain to bring customer orders, quality tickets and sales-engineer calls into one place. Where an answer depends on the order form, it says so. Anything not covered here will be put in writing separately.
Architecture and data location
Read the whole document (3,970 characters)
| Question | Answer |
|---|---|
| Where does the brain run and where is our data held? | The brain is built and run inside Dunholm Precision's own Snowflake account. Your data stays in your account and is not copied into a shared BB-Demo store. |
| Does BB-Demo keep a separate copy of our data? | No. To be precise, BB-Demo works on the data where it sits in your Snowflake account. |
| Can data be held in a specific region? | Dedicated EU or US data residency is available as an add-on. Dunholm Precision is UK based and the default is your own Snowflake account location. |
| Which systems can be connected? | Typical sources are the CRM, the helpdesk, the call recorder, email and the accounting system. Named systems we support include Salesforce, HubSpot, Zendesk, Xero, Gong, Microsoft 365, Google Workspace, Dropbox, SharePoint and Slack. The Growth tier has a hard limit on connectors, which will be set out in the order form. |
Access control
| Question | Answer |
|---|---|
| How do users sign in? | Growth users are provisioned by your administrators within the product. Single sign-on and automated user provisioning (SSO and SCIM) are part of the Enterprise tier, not Growth. |
| Can we limit who sees which data? | Access to the brain follows the permissions set in your Snowflake account and in the connected source systems. We will walk your IT team through the design during connector planning. |
| Who at BB-Demo can access our environment? | Access is limited to the people working on your implementation and support. The short answer is yes, it is restricted; the longer answer is that I will put the exact arrangement in writing for your IT team. |
Support and service levels
| Question | Answer |
|---|---|
| What availability is committed? | The Growth tier carries the standard Growth availability commitment, with service credits for availability only. The exact figures sit in the order form. |
| How quickly do you respond to a serious incident? | The Growth tier has its own first-response time for the highest priority issues, shorter than Starter and longer than Enterprise. It will be stated in the order form. |
| When is data refreshed? | The nightly refresh completes by 07:00 customer local time on business days, on every tier. |
| Is there a test environment? | A Sandbox is available as an add-on. It is included in Enterprise only from the second version of that tier. |
Data protection and compliance
| Question | Answer |
|---|---|
| Do you act as a processor? | Yes. Dunholm Precision remains the controller of its data. A data processing agreement sits alongside the master agreement. |
| Which certifications do you hold? | I will not list certifications in this document. Any attestation will be confirmed in writing, with the supporting evidence, rather than summarised here. |
| Do you use our data to train models for other customers? | No. Your data is used only to answer your own questions inside your own account. |
Open items
- A short architecture diagram for Dunholm Precision's IT team will follow separately.
- Written confirmation of BB-Demo staff access arrangements, as noted above.
Sign-off
Answers completed and checked by Hannah Lowe, Solutions Engineer, BB-Demo, on Thursday 1 August 2024.
Thanks, Hannah