Whitlingham Wealth - Security Questionnaire
Documentfinal Whitlingham Wealth · security questionnaire · final · 23 Sep 2024
BG-Demo's answers to Whitlingham Wealth's security questionnaire, dated 23 Sep 2024, assessed for the Growth tier by Hannah Lowe. It is final and not a contract. It states no availability, response time or price.
What it says
What this says
As at Fri 9 Oct 2026BG-Demo's answers to Whitlingham Wealth's security questionnaire, dated 23 Sep 2024, assessed for the Growth tier by Hannah Lowe. It is final and not a contract. It states no availability, response time or price.
What it is: A ten-question security and compliance assessment completed by Hannah Lowe, Solutions Engineer, for Whitlingham Wealth. It is marked Final and carries one date, 23 Sep 2024.
States: Data in transit uses "TLS 1.2 or higher" and BG-Demo is "ISO 27001 certified". Processing runs under the BG-Demo Data Processing Agreement.
Tier limits: "The Growth tier does not include SSO." SCIM provisioning and granular role-based access control are Enterprise only, and full penetration test results go to Enterprise customers under NDA.
Not settled: It names no signatory on the customer side, sets no service levels and carries no price. Incident response is only referred to the MSA, so the questionnaire does not show the P1 response time.
As found in this document
As at Fri 9 Oct 2026- Data encryption in transitencrypted using TLS 1.2 or higherSource: the AI read of this record
- Compliance certificationBG-Demo is ISO 27001 certifiedSource: the AI read of this record
- Incident responseIncidents receive priority support. Incident response procedures are documented in the MSA.Source: the AI read of this record
Body
Whitlingham Wealth - Security Questionnaire
Status: Final
Date: 23 September 2024
Security and Compliance Assessment
| Question | Answer |
|---|---|
| Data encryption in transit | All data in transit to and from the Cloud Brain is encrypted using TLS 1.2 or higher. Queries are sent over encrypted channels and responses returned encrypted. |
| Data encryption at rest | Data at rest within the customer's Snowflake account is encrypted by Snowflake at the storage layer. The customer controls encryption keys via Snowflake native key management. |
| Single Sign-On (SSO) | The Growth tier does not include SSO. SAML 2.0 SSO is available on the Enterprise tier. |
| User provisioning and deprovisioning | Users are provisioned manually via the admin console. Deprovisioning is immediate: user accounts can be disabled or deleted by the customer admin at any time. Automated provisioning (SCIM) is available on the Enterprise tier. |
| Role-based access control | B-Glass supports admin and user roles. Admins can create connectors, manage users and reset credentials. Users can query data and build pages. Granular role-based access control is av |
Read the whole document (2,203 characters)
ailable on the Enterprise tier. | | Data residency | By default, all data is held within the customer's Snowflake account in their region. Dedicated data residency add-ons are available to meet regional compliance requirements (EU or US). | | Audit logging | Customer admins can audit user access via B-Glass activity log. Detailed API audit logs are available through the customer's Snowflake account. | | Compliance certifications | BG-Demo is ISO 27001 certified. All processing is under the BG-Demo Data Processing Agreement, which is GDPR-compliant. | | Incident response | Incidents receive priority support. Incident response procedures are documented in the MSA. | | Security testing | BG-Demo undergoes annual third-party penetration testing. Results are available to Enterprise customers under NDA. Growth customers may request a summary on application. |
Assessed by: Hannah Lowe, Solutions Engineer, BG-Demo
For: Whitlingham Wealth (Growth tier assessment)