Rastrick Precision Components - Security Questionnaire
Documentfinal Rastrick Precision Components · security_questionnaire · final · 2026-08-29
Completed security questionnaire for the Growth tier, signed off by Theo Gallagher on 29 Aug 2026. Data stays in the customer's Snowflake account in the UK region, refreshed nightly on business days. Critical incidents get a response within one business hour.
What it says
What this says
Current to 13 Oct 26Completed security questionnaire for the Growth tier, signed off by Theo Gallagher on 29 Aug 2026. Data stays in the customer's Snowflake account in the UK region, refreshed nightly on business days. Critical incidents get a response within one business hour.
What it is: a customer-facing security questionnaire completed by BB-Demo's Solutions Engineer, Theo Gallagher, dated 29 Aug 2026. It is stored as final, but it is a set of answers, not a signed contract.
Commits: "Inside your Snowflake account in the UK region. No data leaves the UK." Refresh is "Nightly on business days." Incident response is "within one business hour", which matches the Growth P1 first response in the standard terms.
Unusual: the compliance answer is general ("annual independent security audits") and names no certification. Data classification is left to the customer's admin.
Not settled: the document states no price, term, service credits, availability percentage or refresh deadline time. It does not show whether the customer has accepted it or whether an order form relies on it.
As found in this document
Current to 9 Oct 26- Data residencyInside your Snowflake account in the UK region. No data leaves the UK.Inside your Snowflake account in the UK region. No data leaves the UK. · Source: object_read:doc_188_001
- Data refreshNightly on business days.Source: object_read:doc_188_001
- Incident responseWe respond to critical incidents within one business hour and notify you immediately.We respond to critical incidents within one business hour and notify you immediately. · Source: object_read:doc_188_001
- SubprocessorsOnly BB-Demo and Snowflake.Source: object_read:doc_188_001
The document
Body
Rastrick Precision Components - Security Questionnaire
Overview
This document outlines the security architecture and controls for Rastrick Precision Components' use of BB-Demo Growth tier.
| Area | Question | Response |
|---|---|---|
| Data Residency | Where will our data reside? | Inside your Snowflake account in the UK region. No data leaves the UK. |
| Access Control | How do you control access to our data? | Role-based access control in Snowflake, managed by your admins. |
| Encryption | How is data protected in transit and at rest? | Data is encrypted throughout. Encryption keys are managed by your cloud provider. |
| Authentication | Can we enforce multi-factor authentication? | Yes. You control MFA policy through your identity provider or Snowflake. |
| Audit and Logging | Can we audit who accesses our data? | Yes. Snowflake logs all access and queries. We also log admin actions in BB-Demo. |
| Data Refresh | How often is our data refreshed? | Nightly on business days. |
| Data Classification | Can we mark sensitive data as restricted? | Access is controlled through Snowflake's role-based permissions. We recommend working with your admin t |
Read the whole document (1,840 characters)
o classify sensitive data appropriately. | | Compliance | What certifications do you maintain? | We undergo annual independent security audits. For customers in regulated sectors, we discuss additional controls and attestations. | | Subprocessors | Who has access to our data? | Only BB-Demo and Snowflake. Your data flows through your Snowflake account; we do not store or copy it. | | Incident Response | How do you respond to security incidents? | We respond to critical incidents within one business hour and notify you immediately. |
Completed by: Theo Gallagher, Solutions Engineer, BB-Demo Date: 29 Aug 2026
Unusual terms
Current to 9 Oct 26- No named certification
- Data classification left to customer admin