Hallam Ferrier - Security Questionnaire
Documentfinal Hallam Ferrier: documents · security_questionnaire · final · 2026-08-14
Security questionnaire answered by Theo Gallagher on 14 Aug 2026 for Hallam Ferrier's Growth tier evaluation. It commits no price or availability figure. Certifications, encryption and sub-processors are left unanswered.
What it says
What this says
Current to 11 Oct 26Security questionnaire answered by Theo Gallagher on 14 Aug 2026 for Hallam Ferrier's Growth tier evaluation. It commits no price or availability figure. Certifications, encryption and sub-processors are left unanswered.
What it is: a pre-sale security questionnaire, stored as final, prepared by Theo Gallagher for Hallam Ferrier, who are evaluating the Growth tier. It is not a contract and sets no price.
Commits: the nightly refresh "completes by 07:00 customer local time on business days". It says the Growth service level applies, with service credits for availability only, and that "The order form would set out the exact terms."
Unusual: section D declines to answer on certifications, encryption, logging, retention, sub-processors and exit plan. The only dated commitment is a written answer "with the order form pack if Hallam Ferrier proceeds".
Not settled: whether residency or SSO is required. SSO and SCIM are Enterprise only, so a requirement would change the tier under evaluation.
As found in this document
Current to 9 Oct 26- Nightly refreshcompletes by 07:00 customer local time on business dayscompletes by 07:00 customer local time on business days · Source: object_read:doc_090_001
- Service creditsservice credits for availability onlyservice credits for availability only · Source: object_read:doc_090_001
- Sub-processors and exit planwe will send a written answer with the order form pack if Hallam Ferrier proceedswe will send a written answer with the order form pack if Hallam Ferrier proceeds · Source: object_read:doc_090_001
The document
Body
Hallam Ferrier - Security Questionnaire
Prepared for: Hallam Ferrier Prepared by: Theo Gallagher, Solutions Engineer, BB-Demo BB-Demo account owner: Harvey Doyle Date: 14 Aug 2026 Tier under evaluation: Growth Status: Final
Scope
Hallam Ferrier is evaluating the Growth tier so that partners and client managers can see each client's work, queries and billing in one place. The answers below describe BB-Demo as it applies to that tier. Where a control needs evidence, the answer says so, and we can evidence that on request. Where an answer depends on the platform team, I have said so rather than guess.
A. Architecture and data location
Read the whole document (3,426 characters)
| Ref | Question | Answer |
|---|---|---|
| A-one | Where does the platform run? | Inside the customer's own Snowflake account. BB-Demo does not hold a separate copy of your data in its own environment. |
| A-two | Who owns the data? | Hallam Ferrier. The brain is built over your systems and stays in your account. |
| A-three | Can data residency be fixed to a region? | Dedicated EU or US data residency is an add-on. Please tell us if it is a requirement and we will scope it. |
| A-four | Which source systems can be connected? | Named systems include Salesforce, HubSpot, Zendesk, Xero, Gong, Microsoft 365, Google Workspace, Dropbox, SharePoint, Slack and Snowflake. The connector count is set by the Growth tier. |
B. Access control
| Ref | Question | Answer |
|---|---|---|
| B-one | How is access to the brain controlled? | Through roles in your Snowflake account, which you administer. |
| B-two | Is single sign-on supported? | SSO and SCIM are part of the Enterprise tier, not Growth. If they are a requirement, the evaluation should consider Enterprise. |
| B-three | Is there an administrator role for the customer? | Yes. Your own administrators manage users within the Growth user allowance. |
C. Availability and support
| Ref | Question | Answer |
|---|---|---|
| C-one | What availability is committed? | The standard Growth service level applies, with service credits for availability only. The order form would set out the exact terms. |
| C-two | How quickly is a priority-one issue answered? | The Growth first-response commitment applies, measured in business hours. Premium support, with a named engineer, is available as an add-on. |
| C-three | How fresh is the data? | The nightly refresh completes by 07:00 customer local time on business days. Freshness is a commitment on every tier, but credits for freshness apply to Enterprise only. |
D. Items we will not answer here
| Ref | Question | Position |
|---|---|---|
| D-one | Independent certifications and test reports | Not stated in this response. I will confirm what can be evidenced with the platform team before giving an answer. |
| D-two | Encryption, logging and retention specifics | Not stated in this response. These depend on your Snowflake configuration and on BB-Demo internal controls, and I will not overstate either. |
| D-three | Sub-processors and exit plan | Not stated in this response. Here is the dated commitment: we will send a written answer with the order form pack if Hallam Ferrier proceeds. |
Open findings and owners
- Certification evidence: Theo Gallagher.
- Residency requirement decision: Hallam Ferrier, with Harvey Doyle.
- Single sign-on requirement decision: Hallam Ferrier, with Harvey Doyle.
Thanks, Theo
Unusual terms
Current to 9 Oct 26- certifications not stated
- encryption and retention not stated
- written answer on sub-processors deferred to order form pack