Kenmure Business Telecom - Security Questionnaire
Documentfinal Kenmure Business Telecom · security_questionnaire · final · 2025-07-06
BB-Demo's answers to Kenmure Business Telecom's security review for the Enterprise tier, signed off by Anya Petrova on 6 Jul 2025. No exceptions were raised. It states no figures for availability, P1 response or price, and defers them to the order form.
What it says
What this says
Current to 13 Oct 26BB-Demo's answers to Kenmure Business Telecom's security review for the Enterprise tier, signed off by Anya Petrova on 6 Jul 2025. No exceptions were raised. It states no figures for availability, P1 response or price, and defers them to the order form.
What it is: a final, version 1 security questionnaire prepared for the Enterprise evaluation while Kenmure was still a prospect. It covers architecture, access, data protection, service and governance.
Commits: the brain runs in the customer's own Snowflake account, "Customer data is used only to answer that customer's own questions", and SSO, SCIM and an executive sponsor come with Enterprise. A data processing agreement is agreed alongside the order form.
Unusual: nothing off standard terms. Service answers are deliberately generic, for example "The exact figure is stated in the order form."
Not settled: availability, P1 response time, price, connectors and add-ons are not stated. It is not a contract, and it records contracted annual recurring revenue of £0 at that date.
As found in this document
Current to 9 Oct 26- Data locationThe company brain is built and run inside the customer's own Snowflake account.The company brain is built and run inside the customer's own Snowflake account. · Source: object_read:doc_156_001
- Model trainingNo. Customer data is used only to answer that customer's own questions.No. Customer data is used only to answer that customer's own questions. · Source: object_read:doc_156_001
- Data freshnessThe nightly refresh completes before the working day starts, customer local time, on business days. Enterprise is also credited for data freshness.The nightly refresh completes before the working day starts, customer local time, on business days. Enterprise is also credited for data freshness. · Source: object_read:doc_156_001
- Security incident reportingThe customer is told without undue delay, with a written summary of timeline, impact, cause and actions.The customer is told without undue delay, with a written summary of timeline, impact, cause and actions. · Source: object_read:doc_156_001
The document
Body
Kenmure Business Telecom - Security Questionnaire
Status: Final, version 1 Date: 6 Jul 2025 Prepared by: Anya Petrova, Solutions Engineer, BB-Demo Account owner: Tom Ashdown Customer success manager: Marcus Bell Tier under review: Enterprise
This questionnaire records BB-Demo's answers to the security review for Kenmure Business Telecom, a business telecoms and connectivity provider in Glasgow. It supports the Enterprise evaluation, where account management, provisioning and the service desk would see each business customer's circuits, faults and bills together. Where an answer depends on the final order form, it says so.
1. Architecture and data location
Read the whole document (4,784 characters)
| # | Question | Answer |
|---|---|---|
| 1.1 | Where does the platform run? | The company brain is built and run inside the customer's own Snowflake account. BB-Demo does not copy customer data into a separate BB-Demo data store. |
| 1.2 | Who controls the data? | Kenmure Business Telecom remains the owner and controller of its data. Access is granted through roles in its own Snowflake account and can be withdrawn by Kenmure at any time. |
| 1.3 | Can data residency be fixed to a region? | Yes. Dedicated EU or US data residency is available as an add-on. For a UK customer running in its own Snowflake account, the region is the one Kenmure chooses for that account. |
| 1.4 | Which source systems connect? | Connectors read from systems such as Salesforce, HubSpot, Zendesk, Xero, Gong, Microsoft 365, Google Workspace, Dropbox, SharePoint and Slack. The connectors used would be listed in the order form. |
2. Access control and identity
| # | Question | Answer |
|---|---|---|
| 2.1 | Is single sign-on supported? | Yes. SSO and SCIM provisioning are part of the Enterprise tier. |
| 2.2 | How are joiners and leavers handled? | With SCIM, accounts follow the customer's identity provider, so a leaver loses access when their directory account is disabled. |
| 2.3 | Is access role based? | Yes. Users see only the sources and pages their role allows. Administrators are named by the customer. |
| 2.4 | Does BB-Demo staff access customer data? | Only when the customer asks for support or implementation help, and only through access the customer grants and can revoke. |
3. Data protection
| # | Question | Answer |
|---|---|---|
| 3.1 | Is data encrypted? | Data is protected in transit and at rest using the controls of the customer's Snowflake account and of the connected source systems. |
| 3.2 | Is customer data used to train shared models? | No. Customer data is used only to answer that customer's own questions. |
| 3.3 | How is data returned or deleted at the end of the contract? | Because the brain sits in the customer's own account, the customer keeps its data. BB-Demo components are removed on request when the contract ends. |
| 3.4 | Is a data processing agreement available? | Yes. It is agreed alongside the order form under the MSA. |
4. Service and resilience
| # | Question | Answer |
|---|---|---|
| 4.1 | What availability is committed? | The Enterprise service level applies, as set out in the order form. It is higher than the Growth and Starter tiers. |
| 4.2 | How quickly are priority incidents answered? | Enterprise carries the fastest first-response commitment of the three tiers. The exact figure is stated in the order form. |
| 4.3 | How fresh is the data? | The nightly refresh completes before the working day starts, customer local time, on business days. Enterprise is also credited for data freshness. |
| 4.4 | Is there a safe place to test changes? | The Sandbox is available for Enterprise customers on the current price book. |
5. Governance and support
| # | Question | Answer |
|---|---|---|
| 5.1 | Is there a named contact for security matters? | Yes. Anya Petrova supports the review, and Marcus Bell is the customer success manager after signature. |
| 5.2 | Is there an executive sponsor? | Yes, an executive sponsor is part of the Enterprise tier. |
| 5.3 | What support hours apply? | Standard support applies by default. Premium support, with a named engineer and extended UK hours, is an optional add-on. |
| 5.4 | How are security incidents reported to the customer? | The customer is told without undue delay, with a written summary of timeline, impact, cause and actions. |
6. Review outcome
- All questions in sections one to five have been answered and agreed with the Kenmure review team.
- No exceptions were raised.
- Contracted annual recurring revenue is £0 at this date, because Kenmure Business Telecom is still a prospect.
- Any change to service levels or add-ons is made only through an executed order form.
Signed off for BB-Demo: Anya Petrova, Solutions Engineer, 6 Jul 2025.