Fulbourn Underwriting - Security Questionnaire
Documentfinal Fulbourn Underwriting · security questionnaire · final · 2 Dec 2024
Security questionnaire dated 2 Dec 2024 for Fulbourn Underwriting on the Enterprise tier. It states 99.9% availability, P1 first response within 30 minutes, and data refresh complete by 07:00 UK time on business days. It carries no price.
What it says
What this says
As at Fri 9 Oct 2026Security questionnaire dated 2 Dec 2024 for Fulbourn Underwriting on the Enterprise tier. It states 99.9% availability, P1 first response within 30 minutes, and data refresh complete by 07:00 UK time on business days. It carries no price.
What it is: a customer-facing questionnaire of questions and answers on access, connectors, residency, encryption, incident response and offboarding. Prepared 2 Dec 2024, stored as final, version 1. The author is not named in the text; the givens list Hannah Lowe, Solutions Engineer, as the BG-Demo person.
Commits: "Enterprise SLA: 99.9% availability, P1 response within 30 minutes", refresh "complete by 07:00 UK time on business days", and service credits for availability and freshness breaches. Deletion is performed "within 30 days of written request".
Unusual: customer-managed keys for encryption at rest, and a post-incident review within 5 business days. Both go beyond the standard terms in the company brief.
Not settled: it is not signed and states no price, term or renewal date. The executed order form decides contracted terms, and the text does not show whether it was ever countersigned or later updated.
As found in this document
As at Fri 9 Oct 2026- Availability99.9% availabilitySource: the AI read of this record
- P1 first responseP1 response within 30 minutesSource: the AI read of this record
- Data refreshData refresh complete by 07:00 UK time on business daysSource: the AI read of this record
- Service creditsService credits for availability and freshness breachesSource: the AI read of this record
- Incident reviewPost-incident review within 5 business daysSource: the AI read of this record
- Deletion on requestDeletion is performed within 30 days of written requestSource: the AI read of this record
The document
Body
Fulbourn Underwriting - Security Questionnaire
Date prepared: 2 Dec 2024
Overview
This questionnaire confirms information security and compliance controls applicable to Fulbourn Underwriting's use of B-Glass on the Enterprise tier.
Questions and answers
| Question | Answer |
|---|---|
| Data classification and PII | Fulbourn processes general underwriting and admin data (CRM, calls, emails, finance data). No regulated personal data outside standard GDPR compliance; no Special Category data. |
| User access control | Enterprise tier includes up to 150 users with fine-grained role-based access. Single Sign-On (SSO) via SAML is included; user provisioning via SCIM is available. All access is logged. |
| Connector security | Up to 20 connectors may be configured. Each uses industry-standard API authentication; secrets are encrypted and rotated per connector policy. |
| Data residency | Data is held in a UK region of Snowflake, isolated to Fulbourn's account. |
| Availability and freshness | Enterprise SLA: 99.9% availability, P1 response within 30 minutes. Data refresh complete by 07:00 UK time on business days. Service credits for availability and |
Read the whole document (2,060 characters)
freshness breaches. | | Encryption in transit and at rest | All connections to Snowflake use TLS 1.2 or higher. Data is encrypted at rest in Snowflake using customer-managed keys (CMK). | | Audit, logs and compliance | Full audit logs in Snowflake; accessible to Fulbourn. Compliance attestations available on request. Nightly backup by Snowflake. | | DPA and Data Processing | BG-Demo executes a Data Processing Addendum (DPA) under UK GDPR. Fulbourn is the controller; BG-Demo is the processor. | | Incident response | BG-Demo SLA: P1 first response 30 minutes (Enterprise). Security incidents are escalated to an executive sponsor. Post-incident review within 5 business days. | | Offboarding and data retention | On contract end, Fulbourn data remains in its Snowflake account. Deletion is performed within 30 days of written request. |
Unusual terms
As at Fri 9 Oct 2026- Customer-managed keys for encryption at rest
- Post-incident review within 5 business days
- Security incidents escalated to an executive sponsor