Veenendrecht Payments - Security Questionnaire
Documentfinal Veenendrecht Payments · security questionnaire · final · 18 Nov 2025
BG-Demo's written security and architecture answers for Veenendrecht Payments, completed 18 Nov 2025 by Hannah Lowe for the Growth tier. It quotes a one business hour P1 response and a 07:00 nightly refresh. It states no price and is not a contract.
What it says
What this says
As at Fri 9 Oct 2026BG-Demo's written security and architecture answers for Veenendrecht Payments, completed 18 Nov 2025 by Hannah Lowe for the Growth tier. It quotes a one business hour P1 response and a 07:00 nightly refresh. It states no price and is not a contract.
What it is: a final questionnaire answered by Hannah Lowe, Solutions Engineer, for a Dutch payment service provider supervised by De Nederlandsche Bank. It covers architecture, access control, availability and assurance for the Growth tier.
Commits: it states "One business hour for a priority one issue on the Growth tier" and a nightly refresh "by 07:00 customer local time on business days". Growth credits cover availability only, not data freshness.
Unusual: nothing departs from standard terms. SSO, SCIM and Premium support are placed in Enterprise, and EU residency is an add-on.
Not settled: the document gives no availability percentage, no price and no credit percentage. It says the executed order form and the MSA "override this document", and the evidence does not show whether either was signed.
As found in this document
As at Fri 9 Oct 2026- P1 first response (Growth)One business hour for a priority one issue on the Growth tier.Source: the AI read of this record
- Nightly refreshcompletes by 07:00 customer local time on business days, on every tierSource: the AI read of this record
- Service credits (Growth)service credits for availability only, as a share of one month's feeSource: the AI read of this record
- Data freshness creditscredited on the Enterprise tier onlySource: the AI read of this record
Body
Veenendrecht Payments - Security Questionnaire
Status: Final Completed: 18 Nov 2025 Completed by: Hannah Lowe, Solutions Engineer, BG-Demo Prepared for: Veenendrecht Payments, Utrecht Tier under evaluation: Growth
This document records BG-Demo's answers to the security and architecture questions raised by Veenendrecht Payments, a payment service provider supervised by De Nederlandsche Bank. Where an answer depends on the order form or the MSA, that is said plainly. Anything not stated here is not claimed.
Architecture and data location
Read the whole document (3,757 characters)
| Question | Answer |
|---|---|
| Where does B-Glass run? | Inside your own Snowflake account. BG-Demo builds and runs the brain there, so the indexed data stays in an environment you already control. |
| Does BG-Demo keep a separate copy of customer data outside that account? | To be precise, the brain's data layer sits in your Snowflake account. The commercial terms in the MSA and order form govern anything beyond that, and I will put the detail in writing if your team needs it. |
| Is dedicated EU data residency available? | Yes, as an add-on. It is not part of the Growth tier by default and would be listed as a line in the order form. |
| Which source systems can be connected? | Systems such as Salesforce, HubSpot, Zendesk, Xero, Gong, Microsoft 365, Google Workspace, Dropbox, SharePoint and Slack. The Growth tier has a fixed connector allowance, which is a hard limit. |
Access control
| Question | Answer |
|---|---|
| Is single sign-on supported? | SSO and SCIM are included in the Enterprise tier, not in Growth. If your security team requires them, the Enterprise tier is the right comparison. |
| How is access to the brain granted? | By named users up to the Growth user allowance, which is a soft limit. Additional users are available in blocks as an add-on. |
| Can BG-Demo staff see customer data? | Access is limited to what is needed to implement and support the brain, and it takes place within your Snowflake account. The short answer is that we work inside your environment, not from a copy. The longer answer is in the MSA. |
Availability and support
| Question | Answer |
|---|---|
| What availability level applies? | The Growth availability level, as set out in the service levels. An executed order form can change it. |
| What is the first-response time for a critical incident? | One business hour for a priority one issue on the Growth tier. |
| When is data refreshed? | The nightly refresh completes by 07:00 customer local time on business days, on every tier. |
| What happens if availability is missed? | Growth carries service credits for availability only, as a share of one month's fee. Data freshness is credited on the Enterprise tier only. |
| Is named-engineer support available? | Premium support is an Enterprise feature from the second price book version. It is not part of Growth. |
Assurance and review
| Question | Answer |
|---|---|
| Does BG-Demo support a customer security review? | Yes. Security review support is part of Enterprise implementation. For this Growth evaluation, this questionnaire is the written record. |
| Is a sandbox available for testing? | The Sandbox is available as an add-on and is included in Enterprise from the second price book version. |
| How are further questions handled? | Send them to me and I will answer in writing. If I am not certain of an answer I will check before replying, rather than guess. |
Notes
- No open items remain on this version.
- Answers describe the Growth tier only. Any differences for another tier are noted where they matter.
- Contractual commitments are set by the executed order form and the MSA, which override this document.
Thanks, Hannah