Brenneck Pay proposal: follow-up and next steps

Dear Katrin, dear Matthias, Thank you for the time you gave us during the walkthrough. I would like to set down in writing where we are. The proposal is for the Growth tier, so that merchant account managers and merchant risk work from one view of each merchant, with your data kept in an EU region. The total value of the proposal is £62,000. To be clear, that is the total deal value and not an annual price: the order form will show the one-off implementation fee and the annual subscription separately, and I will go through both with you. Our working target is to have the order form signed by 20 Jan 2026. That is a plan, not a commitment, and it depends on your information security and procurement reviews. To keep this moving, I suggest the following: - Information security receives our security documentation and the description of how the brain runs inside your own Snowflake account. - Procurement receives a draft order form to review alongside the proposal. - We agree one named contact on each side for the review questions. Matthias, if there is anything you need to see in writing before you can decide, please tell me and I will prepare it. Best regards, Matteo

Dear Mr Ricci, Thank you for your note of last week. Before I can take this to our supplier review, I need three things in writing. First, what is the exit plan? If we end the relationship, how is our data returned or removed, and within what period? Second, how is this governed? I need to know who at BB-Demo is responsible for the service, how incidents are reported to us, and what we can show to BaFin for our outsourcing register. Third, please confirm that the proposal value you gave is the total for the deal and state what the recurring cost will be, so that I can judge the predictability of the cost. I will not sign before information security and procurement have completed their review. Please send your answers in writing. Matthias Ebner

Dear Matthias, dear Katrin, Thank you for being so direct, Matthias. Let me answer each point in writing. Exit plan: the brain is built and run inside your own Snowflake account, so your data stays in your environment throughout. I will send you a written exit description covering what happens to the configuration and indexes on termination and how the handover is done. Governance: I will name the responsible BB-Demo contacts for the service and set out the incident reporting route in a document you can attach to your outsourcing register. If anything in it is not enough for BaFin purposes, I would rather you told me early. Cost: the figure of £62,000 is the total value of the proposal, not an annual price. The order form will separate the one-off implementation fee from the annual subscription, and I will state the recurring amount there so that you can plan for it. I will not ask you to sign anything before information security and procurement have finished. The target of 20 Jan 2026 stays a plan, and we can move it if the reviews need more time. Katrin, perhaps we can agree the next step with you this week, so that the security documentation reaches the right person. Best regards, Matteo