Lathom Sands Leisure Parks - Security Questionnaire
Documentfinal Lathom Sands Leisure Parks · security questionnaire · final · 23 Aug 2025
Completed security questionnaire from 23 Aug 2025 answering twelve questions on encryption, access, incident response and uptime. It quotes 99.5% monthly availability for Growth tier and incident notification within four hours. It is not a contract.
What it says
What this says
As at Fri 9 Oct 2026Completed security questionnaire from 23 Aug 2025 answering twelve questions on encryption, access, incident response and uptime. It quotes 99.5% monthly availability for Growth tier and incident notification within four hours. It is not a contract.
What it is: a question and answer sheet filed under the customer's Security folder, with BG-Demo answers only. No customer signature or approval is shown.
Commits: the Growth tier uptime answer reads "99.5% monthly availability; service credits for outages exceeding the SLA." Incident handling reads "escalated to security team within two business hours; customer notification within four."
Unusual: nothing departs from the standard Growth terms. Breach notification within 72 hours and 12 months minimum audit log retention are stated as practice.
Not settled: the questionnaire gives no price, term or renewal date, and does not say which order form it supports. Answers dated 23 Aug 2025 may need rechecking before reuse.
As found in this document
As at Fri 9 Oct 2026- Growth tier availability99.5% monthly availability; service credits for outages exceeding the SLA.Source: the AI read of this record
- Incident responseSuspected incidents escalated to security team within two business hours; customer notification within four.Source: the AI read of this record
- Data breach notificationAffected customers notified within 72 hours; detailed forensics and remediation plan provided.Source: the AI read of this record
- Audit log retention12 months minimum; longer retention available on request.Source: the AI read of this record
Body
Lathom Sands Leisure Parks - Security Questionnaire
| Question | Answer |
|---|---|
| What encryption protocols do you use for data in transit? | TLS 1.2 and above for all communications. |
| How is data encrypted at rest? | AES-256 encryption for all data stored in Snowflake. |
| Who can access customer data? | BG-Demo engineers with operational need; your own Snowflake account administrators. |
| How frequently are access logs reviewed? | Automated monitoring daily; manual review weekly. |
| What is your incident response process? | Suspected incidents escalated to security team within two business hours; customer notification within four. |
| Do you conduct penetration testing? | Yes, quarterly external penetration tests and monthly vulnerability scans. |
| How is employee access to systems governed? | Multi-factor authentication required; role-based access provisioning via identity management. |
| What is your data breach notification procedure? | Affected customers notified within 72 hours; detailed forensics and remediation plan provided. |
| How long are audit logs retained? | 12 months minimum; longer retention available on request. |
| Is the service SaaS or self-hosted |
Read the whole document (1,483 characters)
? | SaaS, hosted in your own Snowflake account. | | What is the uptime commitment for Growth tier? | 99.5% monthly availability; service credits for outages exceeding the SLA. | | Are there relevant certifications or compliance reports? | SOC 2 Type II report available on request. |