Ashlowe Medical Group - Security Questionnaire
Documentfinal Ashlowe Medical Group: documents · security_questionnaire · final · 2025-08-19
Security questionnaire answers prepared by Hannah Lowe on 19 Aug 2025. It states data stays in the customer's own Snowflake account, nightly refresh completes by 07:00 each business day, and incidents are notified within 4 business hours. No price or availability figure is stated.
What it says
What this says
Current to 11 Oct 26Security questionnaire answers prepared by Hannah Lowe on 19 Aug 2025. It states data stays in the customer's own Snowflake account, nightly refresh completes by 07:00 each business day, and incidents are notified within 4 business hours. No price or availability figure is stated.
What it is: a customer-facing security questionnaire, version 1, stored as final, prepared by Hannah Lowe, Solutions Engineer at BB-Demo, dated 19 Aug 2025. It answers questions on storage, access, audit and support.
Commits: "The nightly refresh completes by 07:00 each business day (UK time)." and "We notify you and your account team within 4 business hours." Support access to the account is only "with your prior written consent", and all such access is logged.
Unusual: the login answer says "Email and password by default. SAML/SSO is available on request." The brief lists SSO and SCIM as an Enterprise feature, so the tier this applies to is not clear. The document also refers to a Data Processing Agreement addendum for healthcare organisations.
Not settled: it is not an order form. It states no price, availability percentage, service credits, term or renewal date, and does not say whether the customer signed or accepted it.
As found in this document
Current to 9 Oct 26- Nightly refreshThe nightly refresh completes by 07:00 each business day (UK time).The nightly refresh completes by 07:00 each business day (UK time). · Source: object_read:doc_043_001
- Security incident notificationWe notify you and your account team within 4 business hours.We notify you and your account team within 4 business hours. · Source: object_read:doc_043_001
- Support access to customer accountBB-Demo support may access your account only with your prior written consent to diagnose technical issues.BB-Demo support may access your account only with your prior written consent to diagnose technical issues. · Source: object_read:doc_043_001
- Access loggingAll such access is logged.Source: object_read:doc_043_001
The document
Body
Ashlowe Medical Group - Security Questionnaire
Data Protection and Storage
| Question | Answer |
|---|---|
| Where is my data stored? | All your data is stored in your own Snowflake account. BB-Demo runs as code inside Snowflake; we do not hold or process data outside your cloud environment. |
| Is data encrypted? | Data is encrypted in transit and at rest. Encryption at rest is managed by Snowflake. |
| Who can access my data? | Your administrators control user access. BB-Demo support may access your account only with your prior written consent to diagnose technical issues. All such access is logged. |
User Access and Audit
| Question | Answer |
|---|---|
| How is user access controlled? | Users see only the connectors and pages their administrator assigns them. No user can access data from another organisation. |
| Are queries logged? | Yes. All queries, logins and administrative changes are logged within your Snowflake account, where you retain full access. |
| What is the login method? | Email and password by default. SAML/SSO is available on request. |
Support and Compliance
Read the whole document (1,699 characters)
| Question | Answer |
|---|---|
| When is data refreshed? | The nightly refresh completes by 07:00 each business day (UK time). |
| What happens in a security incident? | We notify you and your account team within 4 business hours. Your MSA outlines our response procedure. |
| What compliance support is available? | We provide a Data Processing Agreement addendum for regulated customers and healthcare organisations. Compliance documentation is available during onboarding. |
Prepared by Hannah Lowe, Solutions Engineer, BB-Demo 19 Aug 2025
Unusual terms
Current to 9 Oct 26- SAML/SSO available on request
- DPA addendum for healthcare organisations