Haverkamp Kontraktlogistik - Security Questionnaire
Documentfinal Haverkamp Kontraktlogistik: documents · security_questionnaire · final · 2026-03-10
Security questionnaire completed by Theo Gallagher on 10 Mar 2026 for the Enterprise tier. States the nightly refresh completes by 07:00 customer local time on business days. Availability and P1 response figures are left to the executed order form.
What it says
What this says
Current to 11 Oct 26Security questionnaire completed by Theo Gallagher on 10 Mar 2026 for the Enterprise tier. States the nightly refresh completes by 07:00 customer local time on business days. Availability and P1 response figures are left to the executed order form.
What it is: a final set of answers on architecture, access, availability, support and exit, written for the Enterprise tier. It says "Nothing below should be read as a commitment beyond the order form."
Commits: the only stated service figure is the refresh time, "The nightly refresh completes by 07:00 customer local time on business days." Enterprise credits cover availability and freshness.
Not settled: availability % and P1 response time are deferred to "The executed order form states it." Supplier access to data and certifications are marked not answered, and are open for the security review.
Status: the file is filed as final, but the document does not show whether an order form was signed or whether the security review has happened.
As found in this document
Current to 9 Oct 26- Nightly refreshThe nightly refresh completes by 07:00 customer local time on business days.The nightly refresh completes by 07:00 customer local time on business days. · Source: object_read:doc_092_001
- Service creditsEnterprise receives service credits for availability and for data freshness.Enterprise receives service credits for availability and for data freshness. · Source: object_read:doc_092_001
- AvailabilityThe Enterprise availability commitment, the highest we offer. The executed order form states it.The Enterprise availability commitment, the highest we offer. The executed order form states it. · Source: object_read:doc_092_001
- P1 first responseEnterprise has the fastest P1 first-response time we offer. The executed order form states it.Enterprise has the fastest P1 first-response time we offer. The executed order form states it. · Source: object_read:doc_092_001
The document
Body
Haverkamp Kontraktlogistik - Security Questionnaire
Respondent: Theo Gallagher, Solutions Engineer, BB-Demo Date: 10 Mar 2026 Status: Final Tier under review: Enterprise
Scope of these answers
These answers describe the Enterprise company brain as it would be deployed for Haverkamp Kontraktlogistik, for its key-account teams. Where a control is described, we can evidence that on request. Where an answer depends on the executed order form, it says so. Nothing below should be read as a commitment beyond the order form.
A. Architecture and data location
Read the whole document (4,369 characters)
| Control reference | Question | Answer | Evidence |
|---|---|---|---|
| ARCH-A | Where does the solution run and where is customer data held? | BB-Demo is built and run inside the customer's own Snowflake account. Customer data is held in that account and is not copied to a BB-Demo-owned data store. | Deployment description in the architecture pack |
| ARCH-B | Can data be kept in the EU? | Dedicated EU data residency is available as an add-on. It would be named in the order form if chosen. | Add-on description; order form |
| ARCH-C | Which source systems can be connected? | Customer-selected systems such as Salesforce, HubSpot, Zendesk, Xero, Gong, Microsoft 365, Google Workspace, Dropbox, SharePoint and Slack. Enterprise allows more connectors than the lower tiers. | Connector list |
B. Access and identity
| Control reference | Question | Answer | Evidence |
|---|---|---|---|
| IAM-A | Is single sign-on supported? | Yes. SSO is included in Enterprise. | Tier description |
| IAM-B | Is automated user provisioning supported? | Yes. SCIM is included in Enterprise, so joiners and leavers can follow your identity provider. | Tier description |
| IAM-C | Who at the supplier can access customer data? | Not answered in this document. Access by BB-Demo staff to the customer's Snowflake account is a matter for the customer's own role grants, and we would set out the proposed roles during the security review. | To be agreed in the security review |
C. Availability and freshness
| Control reference | Question | Answer | Evidence |
|---|---|---|---|
| AVL-A | What availability is committed? | The Enterprise availability commitment, the highest we offer. The executed order form states it. | Service level schedule |
| AVL-B | How quickly do you respond to a critical incident? | Enterprise has the fastest P1 first-response time we offer. The executed order form states it. | Service level schedule |
| AVL-C | How fresh is the data? | The nightly refresh completes by 07:00 customer local time on business days. | Service level schedule |
| AVL-D | What happens if the commitments are missed? | Enterprise receives service credits for availability and for data freshness. Availability and freshness are separate measures: a brain can be available and still be stale. | Service credit terms |
D. Support
| Control reference | Question | Answer | Evidence |
|---|---|---|---|
| SUP-A | Is there a named executive contact? | Yes. Enterprise includes an executive sponsor. | Tier description |
| SUP-B | Is enhanced support available? | Premium support, with a named engineer, is available as an add-on. It is not assumed in this questionnaire. | Add-on description |
E. Assurance, exit and open items
| Control reference | Question | Answer | Evidence |
|---|---|---|---|
| ASSR-A | Which independent certifications does the supplier hold? | Not stated in this document. We will not describe a certification here that we have not attached evidence for. We will provide the current position and the supporting documents with the security review. | Supporting pack, to follow |
| EXIT-A | What happens to our data if we leave? | Because the data is held in your Snowflake account, it stays with you. The detail of the exit steps, including removal of BB-Demo's components, is set out in the contract and would be agreed before signing. | Contract exit clause |
| OPEN-A | Are there open findings? | No open findings are recorded against the answers above. Items marked as not answered are open for the security review, with the owner shown in the evidence column. | This document |
Sign-off
Completed by Theo Gallagher, Solutions Engineer, BB-Demo, on 10 Mar 2026.
Questions on any control reference can be sent to me directly.
Thanks, Theo
Unusual terms
Current to 9 Oct 26- Availability and P1 figures deferred to order form
- Supplier data access not answered
- Certifications not stated