What it says
What this says
Current to 13 Oct 26Security questionnaire answered for Oosterdijk Logistiek on 23 Oct 2025, Growth tier, requested by Hannah Lowe. It states TLS 1.2 and above in transit, AES-256 at rest and a P1 response within one business hour. No price or dates beyond the document date.
What it is: a BB-Demo answer sheet to the customer's security questions, prepared by Hannah Lowe, Solutions Engineer. It covers encryption, access, compliance and incident response for the Growth tier.
Commits: it states that "Growth tier support responds to priority one issues within one business hour" and that data stays "Inside your own Snowflake account in the region you choose". It also says BB-Demo "does not hold a copy of your decryption keys".
Unusual: nothing off standard terms. SSO and SCIM are stated as Enterprise only, so a request for them would be an upgrade conversation.
Not settled: it is not a contract, carries no price and names no signatory. The availability figure and service credits are not stated, only a pointer to the service level agreement. The stored status is final, but the text gives no sign-off.
As found in this document
Current to 9 Oct 26- P1 response (Growth tier)within one business hourSource: object_read:doc_176_001
- Encryption in transitTLS 1.2 and aboveSource: object_read:doc_176_001
- Encryption at restAES-256 encryptionSource: object_read:doc_176_001
- Data locationInside your own Snowflake account in the region you chooseInside your own Snowflake account in the region you choose · Source: object_read:doc_176_001
- Security assessmentsannual third-party security assessmentsannual third-party security assessments · Source: object_read:doc_176_001
The document
Body
Oosterdijk Logistiek - Security Questionnaire
Date: 23 Oct 2025 Tier: Growth Requested by: Hannah Lowe, Solutions Engineer, BB-Demo
Data Security and Encryption
| Question | Answer |
|---|---|
| How is data encrypted in transit? | All data is encrypted in transit using TLS 1.2 and above to your Snowflake account. The brain runs inside your own Snowflake warehouse. |
| How is data encrypted at rest? | Data at rest is encrypted by Snowflake using AES-256 encryption. BB-Demo does not hold a copy of your decryption keys. |
| Where is my data stored? | Inside your own Snowflake account in the region you choose. No copies are held outside your account. |
Access and Authentication
Read the whole document (1,860 characters)
| Question | Answer |
|---|---|
| Who can access my data? | Only your assigned users can access the brain. Authentication is via your Snowflake identity. Growth tier supports basic role-based access; Enterprise tier adds SSO and SCIM. |
| What happens when a user leaves? | Remove them from your Snowflake user list and revoke their brain licence. |
| How are API keys managed? | All connector credentials are stored encrypted in your Snowflake account and rotated per your policy. |
Compliance and Incident Response
| Question | Answer |
|---|---|
| Which compliance standards do you meet? | The brain runs in your Snowflake account, so your existing Snowflake compliance certifications (SOC 2, ISO 27001, GDPR, etc.) apply. BB-Demo meets SOC 2 Type II. |
| What is your incident response process? | Growth tier support responds to priority one issues within one business hour. Details in your service level agreement. |
| Do you conduct security audits? | Yes. We conduct annual third-party security assessments. |
Questions?
Contact Hannah Lowe (hannah.lowe@bb-demo.example) to discuss any aspect of this questionnaire.