Brinkerhof Distributie - Security Questionnaire
Documentfinal Brinkerhof Distributie: documents · security_questionnaire · final · 2025-08-12
Final security questionnaire completed by Hannah Lowe on 12 Aug 2025 for the Growth tier. It states that the brain runs in the customer's own Snowflake account and that SSO and SCIM are not on Growth. It is not a contract and states no price or availability figure.
What it says
What this says
Current to 11 Oct 26Final security questionnaire completed by Hannah Lowe on 12 Aug 2025 for the Growth tier. It states that the brain runs in the customer's own Snowflake account and that SSO and SCIM are not on Growth. It is not a contract and states no price or availability figure.
What it is: a pre-sale answer sheet from BB-Demo to Brinkerhof Distributie, completed by Hannah Lowe and marked Final. It covers hosting, data ownership, access, and operations for the Growth tier only.
Commits: it describes controls rather than binding terms. Credits are stated as "Growth credits apply to availability only, not to data freshness." Refresh is described as nightly, before the start of the business day in the customer's local time.
Unusual: nothing off the standard Growth terms. Availability is deliberately not quoted: "The exact percentage is stated there and I would rather not paraphrase it here."
Not settled: whether EU residency is bought as an add-on, and whether SSO is a hard requirement, which would move the deal to Enterprise. The document gives no price, no signature and no dates beyond 12 Aug 2025.
As found in this document
Current to 9 Oct 26- Service creditsGrowth credits apply to availability only, not to data freshness.Growth credits apply to availability only, not to data freshness. · Source: object_read:doc_086_001
- Data freshnessNightly, completed before the start of the business day in the customer's local time on business days.Nightly, completed before the start of the business day in the customer's local time on business days. · Source: object_read:doc_086_001
- Incident responseThrough the helpdesk, with the Growth first-response commitment for the most serious incidents.Through the helpdesk, with the Growth first-response commitment for the most serious incidents. · Source: object_read:doc_086_001
- AvailabilityThe standard Growth service level in the order form.The standard Growth service level in the order form. · Source: object_read:doc_086_001
The document
Body
Brinkerhof Distributie - Security Questionnaire
Status: Final
Completed by: Hannah Lowe, Solutions Engineer, BB-Demo
Date: 12 Aug 2025
Tier under review: Growth
Account owner: Matteo Ricci
Customer success manager: Elena Novak
About this document
This questionnaire answers the security and data-handling questions raised by Brinkerhof Distributie, a wholesaler of electrical installation materials based in Eindhoven. It covers the Growth tier of the company brain as BB-Demo would deliver it. Where an answer depends on how Brinkerhof Distributie configures its own systems, I say so. To be precise, I have only stated controls that apply to the Growth tier and I have not stretched any answer beyond that.
Architecture and data location
Read the whole document (3,556 characters)
| Area | Question | Answer |
|---|---|---|
| Hosting | Where does the brain run? | Inside Brinkerhof Distributie's own Snowflake account. BB-Demo does not copy the data into a separate BB-Demo platform. |
| Data ownership | Who owns the data the brain indexes? | Brinkerhof Distributie. BB-Demo processes it only to deliver the service under the order form and the MSA. |
| Data residency | Can the data be kept in the EU? | The short answer is yes: the data stays in the Snowflake account and region that Brinkerhof Distributie chooses. A dedicated EU residency add-on exists for customers who want it contracted explicitly, and I'll put that in writing if you want it priced. |
| Source systems | Which systems does the brain connect to? | Only the systems Brinkerhof Distributie chooses to connect, for example the CRM, the helpdesk, the accounting system and the call recorder. Each connector is configured and can be switched off by the customer. |
Access and identity
| Area | Question | Answer |
|---|---|---|
| User access | How are users given access? | Named users are set up by the customer's administrators. Access is limited to the people the customer licenses. |
| Single sign-on | Is SSO or SCIM provisioning available? | Not on Growth. SSO and SCIM are part of the Enterprise tier. If that is a requirement, we should talk about Enterprise instead. |
| Administrators | Who administers the brain? | The customer's own administrators. BB-Demo staff do not hold standing access to the customer's data. |
| Support access | How does BB-Demo reach the environment for support? | Only through access the customer grants, for the purpose of resolving a ticket. |
Operations and service
| Area | Question | Answer |
|---|---|---|
| Availability | What availability is committed? | The standard Growth service level in the order form. The exact percentage is stated there and I would rather not paraphrase it here. |
| Data freshness | How often is the data refreshed? | Nightly, completed before the start of the business day in the customer's local time on business days. |
| Incident response | How are priority incidents handled? | Through the helpdesk, with the Growth first-response commitment for the most serious incidents. |
| Service credits | Are there credits for a breach? | Growth credits apply to availability only, not to data freshness. |
Open items for the buyer
The answers above are final for this version. Two points sit with Brinkerhof Distributie rather than with BB-Demo:
- Decide whether EU residency needs to be contracted as an add-on or whether the chosen Snowflake region is sufficient.
- Confirm whether single sign-on is a hard requirement, since that would move the proposal from Growth to Enterprise.
Thanks, Hannah