What it says
What this says
Current to 11 Oct 26A version 1 security questionnaire dated 1 Mar 2026 for the proposed Growth subscription. It holds 16 questions across five topics and every answer cell is empty. It states no price, availability or response-time terms.
What it is: a customer-facing security questionnaire marked Final, filed under the customer's Security folder, covering the "proposed Growth subscription". It is addressed to the customer for completion and return to the Solutions Engineering team.
Commits: nothing. The text sets no service levels, price, billing terms or connector dates, and it names no signatory or parties.
Unusual: the stored status is final, but no question has an answer, so the document is an unanswered form rather than a completed record.
Not settled: whether the customer ever returned it, who would answer, and whether a security review closed. The evidence does not show a completed copy. Hannah Lowe, Solutions Engineer, is the resolved author on the BB-Demo side.
As found in this document
The document
Body
Auerhain Industrietechnik - Security Questionnaire
Version: 1 Status: Final Date: 1 March 2026 Tier: Growth
Instructions
This questionnaire covers security and compliance topics relevant to the proposed Growth subscription. Answers should be complete and accurate. Where a question requests an attachment or document, please provide or reference it separately.
Security Program
| # | Question | Answer |
|---|---|---|
| 1 | Does your organisation have a documented information security policy? | |
| 2 | Who is responsible for information security decisions within your team? | |
| 3 | Have you conducted a security risk assessment in the last 12 months? | |
| 4 | Do you require encryption of data in transit between your systems and external services? |
Access Control
| # | Question | Answer |
|---|---|---|
| 5 | How do you manage user access and provisioning to business systems? | |
| 6 | Do you use multi-factor authentication (MFA) for user access? | |
| 7 | What is your user offboarding process? | |
| 8 | Are there documented role-based access control (RBAC) policies in place? |
Data Protection and Privacy
Read the whole document (2,094 characters)
| # | Question | Answer |
|---|---|---|
| 9 | Are you subject to GDPR, CCPA or other privacy regulations? | |
| 10 | Do you have a Data Processing Agreement with your CRM or ticket system vendor? | |
| 11 | How long do you retain customer support tickets and related correspondence? |
Incident Response
| # | Question | Answer |
|---|---|---|
| 12 | Do you have a documented incident response plan? | |
| 13 | How would you report a suspected security incident to BB-Demo? | |
| 14 | Are external incident response services engaged, and if so, by whom? |
Compliance and Audit
| # | Question | Answer |
|---|---|---|
| 15 | Are you required to undergo external security audits or compliance certifications? | |
| 16 | Have you reviewed BB-Demo's security documentation and approach? |
Please return this completed questionnaire to the Solutions Engineering team at your earliest convenience.
Unusual terms
Current to 9 Oct 26- Marked Final but all answers blank