What it says
What this says
Current to 11 Oct 26Final security questionnaire answered by Theo Gallagher on 30 Sep 2026. It covers EU residency, SSO, DPA, 24-hour breach notice and Growth support. It states no price, availability figure or P1 response time.
What it is: a customer-facing security questionnaire for Sjöviken Försäkring, prepared by Theo Gallagher, Solutions Engineer, and marked Final on 30 Sep 2026. It is an answer sheet, not a contract.
Commits: breach handling is stated as "We notify customers within 24 hours of discovery." It also says "We sign a DPA covering data processing for GDPR compliance." Data stays in the customer's own Snowflake account with no BB-Demo copy.
Unusual: dedicated EU residency is described as an add-on, hosted in Frankfurt or Stockholm. The SSO answer says "SSO is included in Enterprise" and, for Growth, that SAML is supported with options discussed during implementation, so SSO on Growth is not settled.
Not settled: the document names no price, order form, availability level, P1 response time or signature. It does not show which tier the customer has bought or whether the EU residency add-on is taken up.
As found in this document
Current to 9 Oct 26- Breach notificationWe notify customers within 24 hours of discovery.We notify customers within 24 hours of discovery. · Source: object_read:doc_115_001
- Data processing agreementWe sign a DPA covering data processing for GDPR compliance.We sign a DPA covering data processing for GDPR compliance. · Source: object_read:doc_115_001
- Growth supportQuarterly QBRs with the CSM, email support, and access to knowledge resources.Quarterly QBRs with the CSM, email support, and access to knowledge resources. · Source: object_read:doc_115_001
The document
Body
Sjöviken Försäkring - Security Questionnaire
Data Location and Residency
| Question | Answer |
|---|---|
| Where is our data stored? | Your data sits in your own Snowflake account, in EU cloud infrastructure. We have no copy. |
| Can we choose the region? | Yes. We support dedicated EU data residency as an add-on; this is typically hosted in Frankfurt or Stockholm depending on your preference. |
| How is data at rest protected? | Snowflake provides encryption at rest by default. You control the encryption keys in your own account. |
Access and Authentication
| Question | Answer |
|---|---|
| Who can access our data? | Only your authorised administrators and users, authenticated through your own systems. We can integrate with your identity provider. |
| Do you support SSO? | SSO is included in Enterprise. For Growth, we support SAML and can discuss options during implementation. |
| Can you audit who accessed what? | Yes. All access is logged in Snowflake's audit trail, which you own and control. |
Compliance and Standards
Read the whole document (2,222 characters)
| Question | Answer |
|---|---|
| What standards do you comply with? | We follow ISO 27001 practices internally. Your data remains your responsibility under GDPR and local regulations. |
| Do you undergo regular security reviews? | Yes. We complete control questionnaires and third-party reviews as needed by customers. |
| Is a Business Associate or Data Processing Agreement required? | Yes. We sign a DPA covering data processing for GDPR compliance. We can also arrange a BAA for US customers if needed. |
Incident Response
| Question | Answer |
|---|---|
| What happens if there is a breach? | We notify customers within 24 hours of discovery. You will contact your regulator; we will co-operate fully. |
| Do you have an incident response plan? | Yes, documented and tested. We maintain blameless incident reviews. |
Support
| Question | Answer |
|---|---|
| What support does Growth include? | Quarterly QBRs with the CSM, email support, and access to knowledge resources. Premium support (named engineer, 07:00-20:00 UK) is available as an add-on. |
Status: Final
Prepared by: Theo Gallagher, Solutions Engineer, BB-Demo Date: 30 Sep 2026
Unusual terms
Current to 9 Oct 26- Dedicated EU residency as an add-on
- SSO on Growth by SAML, options to be discussed
- Premium support available as an add-on