Kingdon Diagnostics - Security Questionnaire
Documentfinal Kingdon Diagnostics: documents · security_questionnaire · final · 2024-10-27
Final security questionnaire completed on 27 Oct 2024 by Hannah Lowe ahead of a Growth subscription. Data stays in the customer's own Snowflake account; no SSO, no freshness credit on Growth. It states no availability figure, P1 time or price.
What it says
What this says
Current to 11 Oct 26Final security questionnaire completed on 27 Oct 2024 by Hannah Lowe ahead of a Growth subscription. Data stays in the customer's own Snowflake account; no SSO, no freshness credit on Growth. It states no availability figure, P1 time or price.
What it is: a pre-sale answer sheet covering hosting, access, connected systems and support, for Growth only. It describes design intent, not an audited result.
Commits: the nightly refresh is "designed to complete by 07:00 customer local time on business days, on every tier". Growth service credits "cover availability only".
Unusual: nothing off the standard terms. Residency is an add-on and not in scope; SSO, SCIM, Premium support and the sandbox sit in Enterprise.
Not settled: availability percentage and P1 response time are left to the order form. Certifications, penetration testing and sub-processors are not answered, and row-level restrictions are deferred to onboarding.
As found in this document
Current to 9 Oct 26- Nightly refreshdesigned to complete by 07:00 customer local time on business days, on every tierdesigned to complete by 07:00 customer local time on business days, on every tier · Source: object_read:doc_083_001
- Growth service creditsService credits on Growth cover availability onlyService credits on Growth cover availability only · Source: object_read:doc_083_001
- Freshness creditNot on Growth. Availability and freshness are different things, and only Enterprise carries a freshness credit.Not on Growth. Availability and freshness are different things, and only Enterprise carries a freshness credit. · Source: object_read:doc_083_001
- Data residencyDedicated EU or US data residency is available as an add-on. It is not included in GrowthDedicated EU or US data residency is available as an add-on. It is not included in Growth · Source: object_read:doc_083_001
The document
Body
Kingdon Diagnostics - Security Questionnaire
Status: Final Completed: 27 Oct 2024 Prepared by: Hannah Lowe, Solutions Engineer, BB-Demo Account owner: Lewis Kerr Customer success manager: Amara Obi Tier under discussion: Growth
Purpose and scope
This questionnaire answers the security and data-handling questions raised by Kingdon Diagnostics, an independent diagnostic imaging network, ahead of a Growth subscription. The brain would bring each trust's referrals, reporting-turnaround tickets and invoices together for contract managers. Answers describe the Growth tier only. Where a control belongs to a different tier, the answer says so plainly.
To be precise, these answers describe how the product is designed to be run. Anything that depends on a choice Kingdon Diagnostics makes in its own Snowflake account is marked as such.
Section A: Hosting and data location
Read the whole document (4,365 characters)
| Ref | Question | Answer |
|---|---|---|
| A1 | Where is our data stored? | In your own Snowflake account. BB-Demo builds and runs the brain inside the customer's Snowflake account, so the indexed data stays within an environment you already control. |
| A2 | Does BB-Demo keep a separate copy of our data? | The brain is built and run inside your Snowflake account. This questionnaire does not describe any separate BB-Demo-hosted copy, and none is part of the Growth proposal. |
| A3 | Can data be held in a specific region? | Dedicated EU or US data residency is available as an add-on. It is not included in Growth and is not part of the current scope. |
| A4 | Is the data processed outside the United Kingdom? | Processing happens inside your Snowflake account, in the region you have chosen for it. |
Section B: Access and identity
| Ref | Question | Answer |
|---|---|---|
| B1 | How do users sign in? | Growth does not include single sign-on or automated user provisioning. Those come with the Enterprise tier. |
| B2 | Can we limit who sees which data? | Access to the brain is managed by your administrators. The short answer is yes for who can use it; the longer answer is that row-level restrictions depend on how the source systems and your Snowflake account are configured, and I will put the detail in writing during onboarding. |
| B3 | Who at BB-Demo can reach our environment? | Only the BB-Demo staff working on your implementation and support. Access is agreed with you as part of onboarding. |
Section C: Connected systems
| Ref | Question | Answer |
|---|---|---|
| C1 | Which systems does the brain connect to? | Systems your teams already use, for example your CRM, helpdesk, accounting system, call recorder and email or file storage. The exact connectors are agreed in the order form, within the Growth connector allowance. |
| C2 | Does the brain write back to source systems? | The brain is a query layer over your data. This questionnaire does not describe write-back to source systems. |
| C3 | How fresh is the data? | The nightly refresh is designed to complete by 07:00 customer local time on business days, on every tier. |
Section D: Availability and support
| Ref | Question | Answer |
|---|---|---|
| D1 | What availability do you commit to? | The standard Growth service level applies, as set out in the order form. Service credits on Growth cover availability only. |
| D2 | Are we credited if the data is stale? | Not on Growth. Availability and freshness are different things, and only Enterprise carries a freshness credit. |
| D3 | How quickly do you respond to a serious incident? | The Growth priority one first response time applies, as set out in the order form. Premium support is an add-on and is not included. |
Section E: Points to be clear about
- No control described here should be read as stronger than stated. Where an answer says "designed to", it describes design intent, not an audited result.
- Questions about certifications, penetration testing and sub-processors are not answered in this version. I will put those in writing separately if Kingdon Diagnostics needs them for its trust customers.
- If Kingdon Diagnostics later needs single sign-on, automated provisioning, Premium support or a sandbox, those sit in the Enterprise tier and would change the order form.
Sign-off
Completed by Hannah Lowe, Solutions Engineer, BB-Demo, on 27 Oct 2024.
Thanks, Hannah