Ostwalder Versicherungsmakler - Security Questionnaire
Documentfinal Ostwalder Versicherungsmakler · security questionnaire · final · 5 Jan 2026
A completed security questionnaire for Ostwalder Versicherungsmakler, stored as final, answered by BG-Demo. It states 99.5% monthly availability for the Growth tier with service credits, and quarterly external penetration tests. It states no price.
What it says
What this says
As at Fri 9 Oct 2026A completed security questionnaire for Ostwalder Versicherungsmakler, stored as final, answered by BG-Demo. It states 99.5% monthly availability for the Growth tier with service credits, and quarterly external penetration tests. It states no price.
What it is: a twelve-question security questionnaire with BG-Demo's answers, created and modified on 5 Jan 2026. It is not a contract, and the text does not say who at Ostwalder asked or signed.
Commits: availability is answered as "99.5% monthly availability; service credits for outages exceeding the SLA." Incident escalation is within two business hours and customer notification within four, and breach notification is within 72 hours.
Unusual: nothing departs from the standard Growth terms in the brief. The four-hour incident notification and the 12-month audit log minimum are stated here rather than in the standard service levels.
Not settled: it gives no P1 response time, refresh deadline, price or term. The executed order form decides contracted terms, and this document does not replace it.
As found in this document
As at Fri 9 Oct 2026- Availability (Growth tier)99.5% monthly availability; service credits for outages exceeding the SLA.Source: the AI read of this record
- Incident responseSuspected incidents escalated to security team within two business hours; customer notification within four.Source: the AI read of this record
- Data breach notificationAffected customers notified within 72 hours; detailed forensics and remediation plan provided.Source: the AI read of this record
- Audit log retention12 months minimum; longer retention available on request.Source: the AI read of this record
- Penetration testingYes, quarterly external penetration tests and monthly vulnerability scans.Source: the AI read of this record
The document
Body
Ostwalder Versicherungsmakler - Security Questionnaire
| Question | Answer |
|---|---|
| What encryption is used for data in transit? | TLS 1.2 and above for all communications. |
| How is data encrypted at rest? | AES-256 encryption for all data stored in Snowflake. |
| Who can access customer data? | BG-Demo engineers with operational need; your own Snowflake account administrators. |
| How frequently are access logs reviewed? | Automated monitoring daily; manual review weekly. |
| What is your incident response process? | Suspected incidents escalated to security team within two business hours; customer notification within four. |
| Do you conduct penetration testing or security audits? | Yes, quarterly external penetration tests and monthly vulnerability scans. |
| How is employee access to systems governed? | Multi-factor authentication required; role-based access provisioning via identity management. |
| What is your data breach notification procedure? | Affected customers notified within 72 hours; detailed forensics and remediation plan provided. |
| How long are audit logs retained? | 12 months minimum; longer retention available on request. |
| Is the service SaaS or se |
Read the whole document (1,560 characters)
lf-hosted? | SaaS, hosted in your own Snowflake account in your preferred region. | | What is the uptime commitment for Growth tier? | 99.5% monthly availability; service credits for outages exceeding the SLA. | | Are there relevant certifications or compliance reports? | SOC 2 Type II report available; GDPR and German data protection compliance confirmed. |
Unusual terms
As at Fri 9 Oct 2026- Customer notification of incidents within four business hours
- Audit logs retained 12 months minimum