Security review and the upgrade – timing
Email thread Fenmoor Specialty Underwriting: documents · sales
Nadia Osei told Priya Raman that sign-off will land in the new year, after the capacity providers see the pack. She listed three open items. Priya said the agreement stays as is until 30 Jun 2026.
What was said
What this says
Current to 10 Oct 26Nadia Osei told Priya Raman that sign-off will land in the new year, after the capacity providers see the pack. She listed three open items. Priya said the agreement stays as is until 30 Jun 2026.
Ask: Nadia needs written evidence of the data residency position, how access control and administrator rights are reviewed and how often, and the incident notification process with a named BB-Demo contact.
Customer view: She will not set a date ahead of the capacity providers' review. She acknowledges this is not what BB-Demo hoped for.
Next: Priya Raman will get the three items in writing and offered a walk-through in the first week back. The upgrade conversation waits for the security work.
The thread
Updated 9 Oct 26Messages
Nadia Osei 23 Dec 2025 16:56Dear Priya, Thank you for the latest version of the security pack. I have been through it with the team and wanted to give you an honest picture of where we are before the break. Sign-off will land in the new year, not before. The main reason is that our capacity providers have not yet seen the pack, and I will not set a date for sign-off ahead of their review. I know that is not what you were hoping for. So that nothing sits idle over the holiday, there are a few open items I will need closed for the audit trail: First, can you evidence the data residency position for the Snowflake account the brain runs in? A written statement is fine, but I will need it in the questionnaire rather than on a call. Second, can you evidence how access control and administrator rights are reviewed, and how often? Our auditors will ask. Third, I would like the incident notification process confirmed in writing, including who at BB-Demo is named as the contact. I am out of the office from tomorrow afternoon, but I will pick these up as soon as I am back. Kind regards, Nadia Nadia Osei IT Security Lead, Fenmoor Specialty Underwriting
Priya Raman 24 Dec 2025 17:37Hi Nadia, Thanks for being so clear – really helpful, and much appreciated that you wrote it all out before the break. Understood on the timing – a new-year sign-off, after your capacity providers have had sight of the pack. That's the right order of things, and we'll work to it. To keep momentum, I'll get your three items in writing with the right people on our side so they're sitting in your inbox when you're back – the residency statement, the access review process and the incident contact. On the commercial side, nothing changes in the meantime – your current agreement stays as it is until 30 Jun 2026, and the upgrade conversation can pick up properly once the security work is through. Happy to make this easy: if it helps, I can set up a short session in the first week back with you and our team to walk through the evidence line by line, so you can mark it off for the audit trail. I'll flag it with Callum as well so he knows where things stand. Have a lovely Christmas, and speak soon. Best, Priya Priya Raman Account Executive, BB-Demo