Bayard Lane Payments - Security Questionnaire
Documentfinal Bayard Lane Payments: documents · security_questionnaire · final · 2026-01-19
Security questionnaire prepared by Hannah Lowe on 19 Jan 2026 assessing the Growth tier for Bayard Lane Payments. It quotes 99.5% availability and a 1-business-hour P1 first response. No price is stated.
What it says
What this says
Current to 11 Oct 26Security questionnaire prepared by Hannah Lowe on 19 Jan 2026 assessing the Growth tier for Bayard Lane Payments. It quotes 99.5% availability and a 1-business-hour P1 first response. No price is stated.
What it is: a pre-sale security and compliance assessment of the Growth tier for a New York payment facilitator, prepared by Hannah Lowe, Solutions Engineer. It is not a contract and states no price.
Commits: it lists the Growth tier as 40 users, 8 data connectors, "99.5% availability SLA" and "1-business-hour P1 response time". It also states daily refresh "complete by 07:00 customer local time".
Unusual: question 7 says SSO is "available on Growth tier via SAML 2.0; SCIM for user provisioning". Our standard terms place SSO and SCIM in Enterprise, so this needs checking.
Not settled: the identity provider, the US data residency choice and whether Premium support is wanted. The questionnaire does not say whether any order form followed.
As found in this document
Current to 9 Oct 26- Availability99.5% availability SLASource: object_read:doc_098_001
- P1 first response (Growth)1-business-hour P1 response timeSource: object_read:doc_098_001
- Data refreshDaily refresh complete by 07:00 customer local timeDaily refresh complete by 07:00 customer local time · Source: object_read:doc_098_001
- Users and connectors (Growth)40 users and 8 data connectorsSource: object_read:doc_098_001
- Service creditsService credits for availability breachesService credits for availability breaches · Source: object_read:doc_098_001
- Premium support (optional add-on)named engineer, 07:00–20:00 UK hours, 1-hour P1 responsenamed engineer, 07:00–20:00 UK hours, 1-hour P1 response · Source: object_read:doc_098_001
The document
Body
Security Questionnaire
Organisation: Bayard Lane Payments Prepared by: Hannah Lowe, Solutions Engineer Date: 19 Jan 2026
Organisation Profile
Bayard Lane Payments is a payment facilitator for healthcare and education software platforms based in New York. This questionnaire assesses suitability of the Growth tier licence for the organisation's security and compliance environment.
Security Assessment
Read the whole document (2,746 characters)
| # | Question | Response |
|---|---|---|
| 1 | What is your primary industry and regulatory environment? | Payment facilitator for healthcare and education sector software platforms |
| 2 | What data classifications does your organisation maintain? | Merchant credentials, transaction data, platform volumes; customer data may be health or education related where applicable to hosted platforms |
| 3 | Are you subject to external compliance standards? | Yes, PCI DSS for payment processing; customers may be HIPAA or FERPA regulated |
| 4 | Do you require multi-factor authentication? | Yes, best practice for all administrative and sensitive access |
| 5 | What encryption standard is required at rest? | Industry standard; AES-256 preferred |
| 6 | What encryption standard is required in transit? | TLS 1.2 minimum; TLS 1.3 supported |
| 7 | Do you require single sign-on (SSO)? | Yes, available on Growth tier via SAML 2.0; SCIM for user provisioning |
| 8 | Do you conduct annual security assessments? | Yes, third-party penetration testing supported |
| 9 | What is your incident response protocol? | Incident contact provided; Growth tier offers 1-business-hour P1 first response |
| 10 | Where must data be hosted? | US data residency available as add-on; default is multi-region UK |
| 11 | Are you SOC 2 or ISO 27001 certified? | BB-Demo holds SOC 2 Type II certification |
| 12 | Do you require dedicated support? | Premium support available: named engineer, 07:00–20:00 UK hours, 1-hour P1 response |
| 13 | What data refresh frequency do you require? | Daily refresh complete by 07:00 customer local time; Sandbox available for testing |
Growth Tier Suitability
Bayard Lane Payments' PCI DSS and sector-specific compliance requirements align well with the Growth tier offering. The tier includes:
- 40 users and 8 data connectors
- Dashboard builder and quarterly business reviews
- SAML SSO and user provisioning
- 99.5% availability SLA
- 1-business-hour P1 response time
- Service credits for availability breaches
Recommended Next Steps
- Confirm SAML/SSO requirements and identity provider
- Establish US data residency preference (add-on cost applies)
- Review Premium support coverage hours (optional add-on)
- Schedule technical architecture workshop with Hannah Lowe
Unusual terms
Current to 9 Oct 26- SSO via SAML 2.0 and SCIM stated as Growth tier
- US data residency as add-on, default multi-region UK