Ashwell Mercer Interiors - Security Questionnaire
Documentfinal Ashwell Mercer Interiors · security questionnaire · final · 13 Jun 2024
Final, version one security questionnaire prepared by Hannah Lowe on 13 Jun 2024 ahead of a Growth order form. It records answers on data location, connectors, access, support and exit. It states no price, availability percentage or P1 response time.
What it says
What this says
As at Fri 9 Oct 2026Final, version one security questionnaire prepared by Hannah Lowe on 13 Jun 2024 ahead of a Growth order form. It records answers on data location, connectors, access, support and exit. It states no price, availability percentage or P1 response time.
What it is: BG-Demo's answers to the security and data-handling questions raised by Ashwell Mercer Interiors, prepared by Hannah Lowe and signed off by Priya Raman on 13 Jun 2024. It is a pre-contract answer sheet, not an order form.
Commits: the nightly refresh is "complete by 07:00 customer local time on business days". Service credits are "for availability only on Growth". Data stays in the customer's own Snowflake account.
Unusual: nothing departs from standard Growth terms. It states plainly that SSO, SCIM, Sandbox and Premium support are not part of Growth.
Not settled: the availability figure and P1 response time are described only as the Growth service level, with no numbers. The connector list, go-live commitments and data processing agreement are left to the order form, and certification evidence is to be supplied separately.
As found in this document
As at Fri 9 Oct 2026- Nightly refreshA nightly refresh, complete by 07:00 customer local time on business days.Source: the AI read of this record
- Service creditsYes, for availability only on Growth. Credits for data freshness are an Enterprise feature.Source: the AI read of this record
- Data locationThe brain is built and run inside your own Snowflake account.Source: the AI read of this record
- Data processing agreementA data processing agreement sits alongside the order form, and its clauses will be agreed before go-live.Source: the AI read of this record
Body
Ashwell Mercer Interiors - Security Questionnaire
Status: Final, version one Date: 13 June 2024 (13 Jun 2024) Prepared by: Hannah Lowe, Solutions Engineer, BG-Demo Account owner: Priya Raman Customer success manager: Marcus Bell Prospective tier: Growth
1. Purpose and scope
This questionnaire records BG-Demo's answers to the security and data-handling questions raised by Ashwell Mercer Interiors, a fit-out contractor based in Reading, ahead of an order form for the Growth tier. It covers B-Glass as deployed for Growth: the connectors, the storage location, access, support and service levels.
Where a control is not part of Growth, the answer says so plainly rather than implying coverage. Anything that needs a written supporting document is marked as such, and I will put it in writing.
2. Architecture and data location
Read the whole document (5,708 characters)
| # | Question | Answer |
|---|---|---|
| 1 | Where is our data stored and processed? | The brain is built and run inside your own Snowflake account. BG-Demo does not copy your data into a separate BG-Demo data store. To be precise, the data stays under your account's own controls and your own Snowflake region. |
| 2 | Who owns the data? | Ashwell Mercer Interiors. The brain is a layer over your systems, and the underlying data remains yours. |
| 3 | Is data residency configurable? | Your data sits where your Snowflake account sits. Dedicated EU or US data residency is a separate add-on and is not needed for a UK-hosted account. |
| 4 | Is there a separate test environment? | A Sandbox is not part of Growth. It is available to Enterprise customers and can be discussed separately if you want one. |
3. Connectors and source systems
| # | Question | Answer |
|---|---|---|
| 5 | Which source systems will be connected? | Those you choose within the Growth connector allowance, drawn from systems such as Salesforce, HubSpot, Zendesk, Xero, Gong, Microsoft 365, Google Workspace, Dropbox, SharePoint and Slack. The final list is set in the order form. |
| 6 | How do connectors authenticate? | Each connector uses an access grant that you create in the source system, scoped to what you decide to share. Your administrators can revoke a grant at any time, which stops that source loading. |
| 7 | Can we limit what each connector reads? | Yes. The scope is set by the permissions you give the grant. We recommend starting narrow, for example project, commercial and credit-control records, and widening later. |
| 8 | How often is data refreshed? | A nightly refresh, complete by 07:00 customer local time on business days. |
4. Access control and identity
| # | Question | Answer |
|---|---|---|
| 9 | How are users authenticated? | Users sign in through the standard sign-in provided with the product. Single sign-on and SCIM provisioning are Enterprise features and are not included in Growth. |
| 10 | Can access be restricted by team? | Yes. The short answer is that pages, chat and search respect the access you configure. The longer answer is that, because the brain sits in your Snowflake account, your own role and grant design is the backstop, and we will walk your IT contact through it during implementation. |
| 11 | Who at BG-Demo can see our data? | Only the BG-Demo staff working on your implementation and support, and only through the access you grant inside your own account. You can remove that access whenever you wish. |
| 12 | Are administrator actions recorded? | Administrative changes are logged. I will put the exact log contents in writing as a supporting note rather than summarise them here. |
5. Availability, support and service credits
| # | Question | Answer |
|---|---|---|
| 13 | What availability applies? | The Growth service level, which is the standard service level for Starter and Growth. |
| 14 | What is the response commitment for a priority incident? | The Growth first-response commitment for a P1 issue, measured in business hours. It is faster than Starter and slower than Enterprise. |
| 15 | Are service credits offered? | Yes, for availability only on Growth. Credits for data freshness are an Enterprise feature. A nightly refresh that runs late is therefore not a credit event on Growth, although we would still treat it as a support matter. |
| 16 | Is Premium support included? | No. Premium support with a named engineer is an add-on and is not part of Growth. |
6. Data lifecycle and exit
| # | Question | Answer |
|---|---|---|
| 17 | What happens to our data when the contract ends? | Because the brain lives in your Snowflake account, your source data remains with you. BG-Demo's access is removed and the brain's objects can be removed from your account at your instruction. |
| 18 | Can we export what the brain has indexed? | Yes, since it is held in your account. |
| 19 | Is personal data processed? | Some source systems will hold personal data about your clients and staff. A data processing agreement sits alongside the order form, and its clauses will be agreed before go-live. |
7. Open points and what this questionnaire does not cover
- Formal certification evidence and independent test reports are not reproduced here. They can be supplied separately if your IT team needs them, and I will confirm the position in writing.
- Any control marked as Enterprise only would need a tier change to apply.
- The exact connector list and any commitments on how soon each connector goes live belong in the order form, not in this document.
8. Sign-off
| Role | Name | Date |
|---|---|---|
| Prepared by, Solutions Engineer, BG-Demo | Hannah Lowe | 13 June 2024 |
| Commercial owner, BG-Demo | Priya Raman | 13 June 2024 |
Thanks, Hannah