Kittatinny Payments - Security Questionnaire
Documentfinal Kittatinny Payments · security questionnaire · final · 9 Nov 2025
BG-Demo's answers to a customer security questionnaire, dated 9 Nov 2025. It states TLS 1.2 or higher, AES-256 at rest, SOC 2 Type II, and a Growth-tier P1 first response within one business hour. It sets no price or contract term.
What it says
What this says
As at Fri 9 Oct 2026BG-Demo's answers to a customer security questionnaire, dated 9 Nov 2025. It states TLS 1.2 or higher, AES-256 at rest, SOC 2 Type II, and a Growth-tier P1 first response within one business hour. It sets no price or contract term.
What it is: a one-version security questionnaire filed under the customer's Security folder, stored as final. It answers fourteen questions on encryption, hosting, access, compliance, incident response and data handling.
Commits: it states "P1 issues for Growth tier receive first response within one business hour." It also says BG-Demo "maintains SOC 2 Type II certification" and that data at rest uses "AES-256 encryption in Snowflake".
Unusual: nothing departs from the standard terms. It places PCI responsibility on the customer: "You remain responsible for the security of the source systems it connects to."
Not settled: it is not an order form, so it sets no price, term, renewal date or service credits. It names no signatory and does not say whether the customer accepted the answers. Its sole date is 9 Nov 2025, so later product or certification changes are not reflected.
As found in this document
As at Fri 9 Oct 2026- Data encryption in transitAll data transmitted to and from the brain is encrypted via TLS 1.2 or higher.Source: the AI read of this record
- Data encryption at restAll data at rest is encrypted using AES-256 encryption in Snowflake, your own cloud account.Source: the AI read of this record
- P1 first response (Growth tier)P1 issues for Growth tier receive first response within one business hour.Source: the AI read of this record
- Compliance certificationBG-Demo maintains SOC 2 Type II certification.Source: the AI read of this record
Body
Kittatinny Payments - Security Questionnaire
| Question | Answer |
|---|---|
| Data encryption in transit | All data transmitted to and from the brain is encrypted via TLS 1.2 or higher. |
| Data encryption at rest | All data at rest is encrypted using AES-256 encryption in Snowflake, your own cloud account. |
| Who hosts the brain? | The brain runs inside your own Snowflake account in your chosen region. BG-Demo has no separate data centre or SaaS platform. |
| Access controls | Role-based access control (RBAC) ensures users can only query data appropriate to their role. All access is logged. |
| Authentication | Users authenticate via your existing identity provider. The Growth tier supports standard SAML authentication; Enterprise adds SSO and SCIM. |
| Compliance certifications | BG-Demo maintains SOC 2 Type II certification. Your Snowflake account is subject to your cloud provider's compliance obligations. |
| PCI compliance | The brain itself is not in scope for PCI DSS; it queries your own systems and Snowflake. You remain responsible for the security of the source systems it connects to. |
| Incident response | BG-Demo has a documented inc |
Read the whole document (2,218 characters)
ident response plan. P1 issues for Growth tier receive first response within one business hour. | | Disaster recovery | Data is stored in your Snowflake account and follows your chosen region's redundancy. Backups are handled by Snowflake. | | Audit logs | All queries, access, and administrative actions are logged and queryable within your Snowflake account. | | Network security | All connections use encrypted tunnels. No data is cached outside your Snowflake account. | | Sub-processors | BG-Demo uses Snowflake as a processor (you control the account) and standard cloud infrastructure for our own application. A full list is available on request. | | Data residency | Standard tiers store data in the region you choose for Snowflake (US, EU, UK). Dedicated residency is available as an add-on. | | Deletion and data retention | You control data retention within Snowflake. On contract end, we delete our application metadata; you retain full control of your Snowflake account and data. |