Ardfinnan Freight Services - Security Questionnaire
Documentfinal Ardfinnan Freight Services: documents · security_questionnaire · final · 2024-12-24
Completed security questionnaire dated 24 Dec 2024, answered by Hannah Lowe for the Growth tier security review. It states TLS 1.3 in transit, 90-day audit log retention and security event notice within four business hours. It states no price or availability figure.
What it says
What this says
Current to 11 Oct 26Completed security questionnaire dated 24 Dec 2024, answered by Hannah Lowe for the Growth tier security review. It states TLS 1.3 in transit, 90-day audit log retention and security event notice within four business hours. It states no price or availability figure.
What it is: a BB-Demo answer sheet completed by Hannah Lowe, Solutions Engineer, on 24 Dec 2024 for Ardfinnan Freight Services. It is filed as final and the text carries no draft marking.
Commits: the answers state that "We hold SOC 2 Type II certification" and that BB-Demo "will notify you of any security events within four business hours". Audit logs are "retained for ninety days".
Unusual: nothing departs from standard terms. The backup answer is that "We do not hold independent backups", which relies on Snowflake's backup policy and may matter to a regulated or cautious reader.
Not settled: it is not a contract or order form and names no signatory for the customer. It is nearly two years old, so current controls and certification status are not confirmed here.
As found in this document
Current to 9 Oct 26- Data encryption in transitTLS 1.3Source: object_read:doc_127_001
- Audit log retentionninety daysSource: object_read:doc_127_001
- Security event notificationwithin four business hoursSource: object_read:doc_127_001
- ComplianceSOC 2 Type II certificationSource: object_read:doc_127_001
- Backup and recoverySnowflake's backup policy; no independent backups heldSnowflake's backup policy; no independent backups held · Source: object_read:doc_127_001
The document
Body
Ardfinnan Freight Services - Security Questionnaire
Completed: 24 Dec 2024
This questionnaire has been completed by Hannah Lowe (Solutions Engineer, BB-Demo) as part of the security review for the Growth tier implementation.
| Question | Answer |
|---|---|
| Data encryption in transit | All data transmitted to the BB-Demo cloud layer uses TLS 1.3 encryption. |
| Data encryption at rest | Data stored in your Snowflake account is encrypted using Snowflake's native encryption with keys under your control. |
| Access controls | Role-based access control is enforced. Admins manage permissions through the platform. |
| Audit logging | All access and system changes are logged. Logs are retained for ninety days and are available for audit. |
| Data residency | The brain runs inside your Snowflake account. No data is copied or stored outside your infrastructure. |
| Incident response | We have a documented incident response process and will notify you of any security events within four business hours. |
| Backup and recovery | Your data is protected by Snowflake's backup policy. We do not hold independent backups. |
| Compliance | We hold |
Read the whole document (1,487 characters)
SOC 2 Type II certification. Enterprise tier customers may request additional attestations. |
Summary
The Growth tier meets standard security requirements for mid-market organisations. No additional controls or exceptions are required for implementation to proceed.
Thanks, Hannah
Unusual terms
Current to 9 Oct 26- No independent backups held by BB-Demo