Sandusky Bay Mutual Insurance - Security Questionnaire
Documentfinal Sandusky Bay Mutual Insurance · security questionnaire · final · 12 Sep 2026
Completed security questionnaire for the Enterprise tier, marked Final on 12 Sep 2026. It quotes 99.9% availability, a 30 minutes P1 first response and a 10% of one month's fee service credit. It is a questionnaire, not an executed order form.
What it says
What this says
As at Fri 9 Oct 2026Completed security questionnaire for the Enterprise tier, marked Final on 12 Sep 2026. It quotes 99.9% availability, a 30 minutes P1 first response and a 10% of one month's fee service credit. It is a questionnaire, not an executed order form.
What it is: a customer-facing security questionnaire, completed 12 Sep 2026 and stored as final. Theo Gallagher, Solutions Engineer, is the only person named in the record; the text names no customer signatory.
Commits: it states "Enterprise tier: 99.9% availability" with a service credit of "10% of one month's fee per month with an availability or data freshness breach". It also states a 30 minutes P1 first response and a nightly refresh "by 07:00 UK local time on business days".
Unusual: nothing departs from the standard Enterprise terms. The answer on assessments says customers "are responsible for their own security governance", with no independent certification named.
Not settled: the document states no price, term, renewal date or signature, so the executed order form decides contracted terms. It does not say whether the buyer accepted the answers.
As found in this document
As at Fri 9 Oct 2026- Availability99.9%Source: the AI read of this record
- P1 first response30 minutes first responseSource: the AI read of this record
- Nightly refreshcompletes by 07:00 UK local time on business days, every tierSource: the AI read of this record
- Service credit10% of one month's fee per month with an availability or data freshness breachSource: the AI read of this record
Body
Sandusky Bay Mutual Insurance - Security Questionnaire
Completed: 12 Sep 2026 Tier: Enterprise Status: Final
Data Protection
| Question | Answer |
|---|---|
| How is data encrypted in transit to the brain? | All connections use TLS 1.2 or higher. BG-Demo does not store encryption keys; Snowflake manages encryption in the customer's own account. |
| How is data encrypted at rest? | Customer data resides in the customer's Snowflake account and is encrypted using Snowflake's default managed-key encryption. The customer controls key access. |
| What happens to data if a user is removed? | User removal does not delete historical data. Access control reference: SCIM provisioning (Enterprise tier). |
Access Control
Read the whole document (2,563 characters)
| Question | Answer |
|---|---|
| How are users provisioned and de-provisioned? | Enterprise tier includes SCIM and Single Sign-On (SSO). User lifecycle is managed through the customer's identity provider; BG-Demo does not hold user credentials. |
| Can administrators audit user access? | Yes. All user actions are logged by the brain and accessible to account administrators. |
| What authentication methods are supported? | SSO via SAML 2.0 (Enterprise tier standard) or password-based login for lower tiers. |
Incident Response and Support
| Question | Answer |
|---|---|
| What is the response time for a P1 security issue? | Enterprise tier: 30 minutes first response. A named engineer is assigned under Premium support. |
| How do we report a security incident? | Contact our Support team or the assigned Premium support engineer. We can evidence our incident-response procedure on request. |
| Is there a sandbox environment for testing? | Yes. Enterprise tier includes a Sandbox environment for testing configurations and data transformations without affecting production. |
Compliance and Standards
| Question | Answer |
|---|---|
| Does BG-Demo undergo independent security assessments? | BG-Demo works within the customer's Snowflake environment. Customers are responsible for their own security governance. We can evidence our architectural controls for Enterprise deals. |
| What is the availability SLA? | Enterprise tier: 99.9% availability. Service credit: 10% of one month's fee per month with an availability or data freshness breach. |
| Does the brain refresh data nightly? | Yes. Nightly refresh completes by 07:00 UK local time on business days, every tier. Enterprise service credits apply to data freshness as well as availability. |