Hvidbjerg Logistik - Security Questionnaire
Documentfinal Hvidbjerg Logistik · security questionnaire · final · 3 Apr 2026
Completed security questionnaire for the Growth tier deployment, finished 3 Apr 2026 and marked final. It states no availability figure, no P1 response time and no price. Answers on encryption, access, logging and incident response are general.
What it says
What this says
As at Fri 9 Oct 2026Completed security questionnaire for the Growth tier deployment, finished 3 Apr 2026 and marked final. It states no availability figure, no P1 response time and no price. Answers on encryption, access, logging and incident response are general.
What it is: a customer security questionnaire answered by BG-Demo, version 1, completed 3 Apr 2026. It reflects "the control environment for the Growth tier deployment" and says all responses were reviewed and accepted.
Commits: it states TLS 1.2 or higher for data in transit and processing under a Data Processing Agreement in the customer's chosen region. It also says SSO is available only at the Enterprise tier.
Unusual: nothing off the standard terms. Incident and logging answers use soft wording such as "promptly" and "swift remediation plan" with no times attached.
Not settled: it is not a contract. It sets no service levels, credits, price or renewal date, and the evidence does not show who at the customer accepted the responses.
As found in this document
As at Fri 9 Oct 2026- Encryption in transitAll data in transit to and from your Snowflake account uses TLS 1.2 or higher encryption.Source: the AI read of this record
- Single Sign-OnSingle Sign-On is available at the Enterprise tier.Source: the AI read of this record
- Data processing and regionYour data is processed under a Data Processing Agreement and remains in your chosen region.Source: the AI read of this record
Body
Hvidbjerg Logistik, Security Questionnaire
Organisation: Hvidbjerg Logistik Questionnaire completed: 3 April 2026 Version: 1 (Final)
Data Protection and Encryption
| Question | Answer |
|---|---|
| How is data encrypted in transit? | All data in transit to and from your Snowflake account uses TLS 1.2 or higher encryption. |
| How is data encrypted at rest? | Data at rest within Snowflake is encrypted by the platform. Encryption keys are managed by the cloud provider. |
| Who has access to encryption keys? | Encryption keys are managed by the cloud provider. Your account remains isolated and accessible only to your authorised users. |
Access Control
Read the whole document (2,876 characters)
| Question | Answer |
|---|---|
| How are user permissions managed? | Users are provisioned via your own identity provider or manually by your administrator. Roles and permissions match your team structure. |
| Can you implement SSO? | Single Sign-On is available at the Enterprise tier. For the Growth tier, we support username and password authentication with two-factor authentication. |
| How do you handle off-boarding? | When a user leaves, your administrator revokes their access immediately. The user account is disabled and cannot be reactivated. |
Audit and Logging
| Question | Answer |
|---|---|
| Are access logs retained? | All access is logged with timestamp and user identity. Logs are retained for an extended period and available for review via your administrative interface. |
| Can you provide audit trails? | Yes. All data queries, user logins, configuration changes and exports are logged. |
| How do you detect anomalies? | The system monitors for unusual access patterns and alerts your administrators to suspicious activity. |
Incident Response
| Question | Answer |
|---|---|
| What is your incident response process? | Incidents are logged immediately. We assess severity and notify you promptly for critical issues. |
| How do you prioritise incident response? | Critical incidents receive our full attention with a swift remediation plan. |
| Can we observe your response? | Yes. You can view incident status in real time via your administrative dashboard. We provide detailed post-incident reports. |
Compliance
| Question | Answer |
|---|---|
| Do you support GDPR compliance? | Yes. BG-Demo is GDPR-compliant. Your data is processed under a Data Processing Agreement and remains in your chosen region. |
| What compliance certifications do you hold? | We are ISO 27001 certified and comply with GDPR and UK data protection law. |
| Can you provide evidence of controls? | Yes. Control evidence, audit reports and compliance certificates are available to your security team. |
Status
This questionnaire reflects the control environment for the Growth tier deployment. All responses have been reviewed and accepted.
Completed: 3 April 2026