Strathcorran Renewables - Security Questionnaire
Documentfinal Strathcorran Renewables: documents · security_questionnaire · final · 2026-09-22
Completed security questionnaire for Strathcorran Renewables, answered by Hannah Lowe on 22 Sep 2026. States TLS 1.2 or higher in transit, AES-256 at rest, SSO login, twelve-month audit logs and breach notification within 24 hours.
What it says
What this says
Current to 11 Oct 26Completed security questionnaire for Strathcorran Renewables, answered by Hannah Lowe on 22 Sep 2026. States TLS 1.2 or higher in transit, AES-256 at rest, SSO login, twelve-month audit logs and breach notification within 24 hours.
What it is: a completed security questionnaire filed under the customer's Security folder, answered by Hannah Lowe, Solutions Engineer at BB-Demo, on 22 Sep 2026. It is a set of vendor assurances, not an order form.
Commits: "will notify you of any breach within 24 hours" is the only dated commitment, tied to this questionnaire dated 22 September 2026. Encryption is stated as "TLS 1.2 or higher" in transit and "AES-256" at rest, with the customer owning the keys.
Unusual: the answers promise SSO, which the brief lists as an Enterprise feature, so the tier the customer is on is worth checking. It also states SOC 2 Type II certification and GDPR compliance without giving a report date or reference.
Not settled: the document does not say which tier or contract it sits under, who at Strathcorran asked for it, or whether it forms part of the order form. It carries no price or service levels, and no customer reply is recorded.
As found in this document
Current to 9 Oct 26- Data in transitTLS 1.2 or higher encryptionSource: object_read:doc_071_001
- Data at restSnowflake's default AES-256 encryptionSnowflake's default AES-256 encryption · Source: object_read:doc_071_001
- Audit log retentionLogs are retained for twelve monthsLogs are retained for twelve months · Source: object_read:doc_071_001
- Breach notificationwill notify you of any breach within 24 hourswill notify you of any breach within 24 hours · Source: object_read:doc_071_001
The document
Body
Strathcorran Renewables, Security Questionnaire
Completed: 22 September 2026
Data Protection and Encryption
| Question | Answer |
|---|---|
| Data in transit | To be precise, all data transmitted between Strathcorran and BB-Demo uses TLS 1.2 or higher encryption. Snowflake enforces encrypted connections; we can evidence that in our control reference SEC-001. |
| Data at rest | Your data is stored in your Snowflake account with Snowflake's default AES-256 encryption. You own and control the encryption keys throughout. |
Access Management
| Question | Answer |
|---|---|
| User authentication | The short answer is that you control who logs in. BB-Demo integrates with your identity provider via SSO. Every login is logged in both the brain and your Snowflake audit trail. |
| Data permissions | Your admins assign users to teams and control which data sources each team can query. We log every query with the user, timestamp and data sources accessed. |
Compliance and Audit
Read the whole document (1,587 characters)
| Question | Answer |
|---|---|
| Audit trail | Every question asked is logged with the user who asked it, the timestamp, data sources queried and result set size. Logs are retained for twelve months. |
| Incident response | We have a documented incident response plan and will notify you of any breach within 24 hours. Here is the dated commitment: this questionnaire dated 22 September 2026. |
| Compliance | BB-Demo is SOC 2 Type II certified and GDPR compliant. |
Completed by Hannah Lowe, Solutions Engineer, BB-Demo Date: 22 September 2026
Unusual terms
Current to 9 Oct 26- Breach notification within 24 hours
- SSO stated as available
- SOC 2 Type II claim