Whitlingham Wealth - Security Questionnaire
Documentfinal Whitlingham Wealth · security_questionnaire · final · 2024-09-23
BB-Demo's answers to Whitlingham Wealth's security questionnaire, dated 23 Sep 2024, assessed for the Growth tier by Hannah Lowe. It is final and not a contract. It states no availability, response time or price.
What it says
What this says
Current to 13 Oct 26BB-Demo's answers to Whitlingham Wealth's security questionnaire, dated 23 Sep 2024, assessed for the Growth tier by Hannah Lowe. It is final and not a contract. It states no availability, response time or price.
What it is: A ten-question security and compliance assessment completed by Hannah Lowe, Solutions Engineer, for Whitlingham Wealth. It is marked Final and carries one date, 23 Sep 2024.
States: Data in transit uses "TLS 1.2 or higher" and BB-Demo is "ISO 27001 certified". Processing runs under the BB-Demo Data Processing Agreement.
Tier limits: "The Growth tier does not include SSO." SCIM provisioning and granular role-based access control are Enterprise only, and full penetration test results go to Enterprise customers under NDA.
Not settled: It names no signatory on the customer side, sets no service levels and carries no price. Incident response is only referred to the MSA, so the questionnaire does not show the P1 response time.
As found in this document
Current to 9 Oct 26- Data encryption in transitencrypted using TLS 1.2 or higherencrypted using TLS 1.2 or higher · Source: object_read:doc_182_001
- Compliance certificationBB-Demo is ISO 27001 certifiedSource: object_read:doc_182_001
- Incident responseIncidents receive priority support. Incident response procedures are documented in the MSA.Incidents receive priority support. Incident response procedures are documented in the MSA. · Source: object_read:doc_182_001
The document
Body
Whitlingham Wealth - Security Questionnaire
Status: Final
Date: 23 September 2024
Security and Compliance Assessment
| Question | Answer |
|---|---|
| Data encryption in transit | All data in transit to and from the Cloud Brain is encrypted using TLS 1.2 or higher. Queries are sent over encrypted channels and responses returned encrypted. |
| Data encryption at rest | Data at rest within the customer's Snowflake account is encrypted by Snowflake at the storage layer. The customer controls encryption keys via Snowflake native key management. |
| Single Sign-On (SSO) | The Growth tier does not include SSO. SAML 2.0 SSO is available on the Enterprise tier. |
| User provisioning and deprovisioning | Users are provisioned manually via the admin console. Deprovisioning is immediate: user accounts can be disabled or deleted by the customer admin at any time. Automated provisioning (SCIM) is available on the Enterprise tier. |
| Role-based access control | The Company Brain supports admin and user roles. Admins can create connectors, manage users and reset credentials. Users can query data and build pages. Granular role-based access con |
Read the whole document (2,223 characters)
trol is available on the Enterprise tier. | | Data residency | By default, all data is held within the customer's Snowflake account in their region. Dedicated data residency add-ons are available to meet regional compliance requirements (EU or US). | | Audit logging | Customer admins can audit user access via the Company Brain activity log. Detailed API audit logs are available through the customer's Snowflake account. | | Compliance certifications | BB-Demo is ISO 27001 certified. All processing is under the BB-Demo Data Processing Agreement, which is GDPR-compliant. | | Incident response | Incidents receive priority support. Incident response procedures are documented in the MSA. | | Security testing | BB-Demo undergoes annual third-party penetration testing. Results are available to Enterprise customers under NDA. Growth customers may request a summary on application. |
Assessed by: Hannah Lowe, Solutions Engineer, BB-Demo
For: Whitlingham Wealth (Growth tier assessment)