Ardcarne Life Assurance - Security Questionnaire v1
Documentdraft Ardcarne Life Assurance: documents · security_questionnaire · draft · 2026-05-05
Draft DORA ICT third-party questionnaire prepared by Theo Gallagher for Declan Furlong on 5 May 2026. Several answers are open, with no dated commitments. It states no availability figure, P1 response time or price, and says the order form will set binding terms.
What it says
What this says
Current to 11 Oct 26Draft DORA ICT third-party questionnaire prepared by Theo Gallagher for Declan Furlong on 5 May 2026. Several answers are open, with no dated commitments. It states no availability figure, P1 response time or price, and says the order form will set binding terms.
What it is: a draft DORA security questionnaire for the B-Brain company brain, stating "Not final and not for filing in the register of information until every open finding below is closed with evidence." It was created and last modified on 5 May 2026.
Commits: it makes no binding service commitment. On service levels it says "The executed order form will set the binding terms", and the nightly refresh is only "intended to complete by 07:00 customer local time on business days".
Unusual: single sign-on is described as "an availability statement, not a commitment" because the tier is not agreed. The stated exit position is that data stays in the customer's Snowflake account, but the exit plan and its test are open.
Not settled: the sub-processor list, staff access and review cadence, incident history, notification times and exit plan all carry "To be agreed" as the dated commitment. The file does not show whether a second version was issued.
As found in this document
Current to 9 Oct 26- Nightly refreshintended to complete by 07:00 customer local time on business daysintended to complete by 07:00 customer local time on business days · Source: object_read:doc_008_002
- Binding service termsThe executed order form will set the binding terms.The executed order form will set the binding terms. · Source: object_read:doc_008_002
- Data protection agreementIt will be issued alongside the order form for review by Ardcarne.It will be issued alongside the order form for review by Ardcarne. · Source: object_read:doc_008_002
The document
Body
Unusual terms
Current to 9 Oct 26- Single sign-on stated as availability, not commitment
- All dated commitments marked To be agreed
- Exit plan not yet tested