Harcastle Environmental - Security Questionnaire
Documentfinal Harcastle Environmental · security_questionnaire · final · 2025-02-02
Final security questionnaire dated 2 Feb 2025, completed by Anya Petrova for a prospect evaluating the Growth tier. It is not a contract: the contracted annual recurring revenue is £0, and it states no availability figure, P1 time or price.
What it says
What this says
Current to 13 Oct 26Final security questionnaire dated 2 Feb 2025, completed by Anya Petrova for a prospect evaluating the Growth tier. It is not a contract: the contracted annual recurring revenue is £0, and it states no availability figure, P1 time or price.
What it is: BB-Demo's answers to security and data handling questions during evaluation. The text says "Harcastle Environmental is currently a prospect, so no contract is in place", and that an executed order form "takes precedence over this document".
Commits: the nightly refresh "completes by 07:00 customer local time on business days, on every tier". Growth service credits are "for availability only", and the brain runs in the customer's own Snowflake account.
Unusual: nothing off standard terms. SSO, SCIM, Premium support and the Sandbox are flagged as Enterprise features, reachable by upgrading tier.
Not settled: price, availability percentage, P1 response time and connector dates are not stated. The document is dated 2 Feb 2025, so whether the prospect later signed is not shown here.
As found in this document
Current to 9 Oct 26- Nightly refreshA nightly refresh completes by 07:00 customer local time on business days, on every tier.A nightly refresh completes by 07:00 customer local time on business days, on every tier. · Source: object_read:doc_152_001
- Growth service creditsservice credits for availability only, as set out in the order formservice credits for availability only, as set out in the order form · Source: object_read:doc_152_001
- Contract frameworkAn order form under the BB-Demo MSA, with a data processing agreement.An order form under the BB-Demo MSA, with a data processing agreement. · Source: object_read:doc_152_001
The document
Body
Harcastle Environmental - Security Questionnaire
Status: Final Version: one Prepared by: Anya Petrova, Solutions Engineer, BB-Demo Date: 2 Feb 2025 Prepared for: Harcastle Environmental, Wakefield Account owner: Lewis Kerr Customer success manager: Marcus Bell Proposed tier: Growth
Purpose and scope
Harcastle Environmental is a commercial waste collection and recycling business serving business customers across Yorkshire and the North East. It is evaluating the company brain on the Growth tier so that account managers can see each customer's collections, missed-collection tickets, calls and invoices together.
This questionnaire records BB-Demo's answers to the security and data handling questions raised during evaluation. Harcastle Environmental is currently a prospect, so no contract is in place and the contracted annual recurring revenue is £0. Anything agreed commercially will sit in an order form under the MSA, and that executed order form takes precedence over this document.
How the product is deployed
Read the whole document (5,587 characters)
| Question | Answer |
|---|---|
| Where does the company brain run? | Inside Harcastle Environmental's own Snowflake account. BB-Demo builds and operates the brain there rather than copying data into a separate BB-Demo platform. |
| Who owns the data? | Harcastle Environmental. The data is held in its own Snowflake account and remains under its control. |
| Which systems can be connected? | Systems such as Salesforce, HubSpot, Zendesk, Xero, Gong, Microsoft 365, Google Workspace, Dropbox, SharePoint and Slack, subject to the Growth connector allowance. |
| Can connected sources be limited? | Yes. Harcastle Environmental chooses which sources are connected and can remove a connector at any time. |
| Is a separate environment needed for BB-Demo staff? | No. Any BB-Demo access is to the customer's Snowflake account, granted by the customer. |
Access control
| Question | Answer |
|---|---|
| How is access to the brain granted? | Through named users within the Growth user allowance, set up with the customer's administrators. |
| Is single sign-on available? | SSO and SCIM are part of the Enterprise tier and are not included in Growth. If Harcastle Environmental needs them, the route is an upgrade to Enterprise. |
| Who administers users? | Administrators nominated by Harcastle Environmental. BB-Demo recommends more than one administrator so that a departure does not leave the account unmanaged. |
| Can BB-Demo staff see customer data? | Only where the customer has granted access for implementation or support, and only within the customer's own Snowflake account. |
| How is leaver access handled? | The customer removes users in its own administration. BB-Demo asks to be told of any change in nominated administrators. |
Data handling and residency
| Question | Answer |
|---|---|
| Where is data stored? | In the customer's Snowflake account, in the region the customer has chosen for that account. |
| Is dedicated EU or US residency available? | It is available as an add-on. Harcastle Environmental is a UK organisation and has not asked for it. |
| How often is data refreshed? | A nightly refresh completes by 07:00 customer local time on business days, on every tier. |
| What happens to data at the end of the contract? | Return and deletion are covered in the data processing agreement that accompanies the order form. |
| Is customer data used to serve other customers? | No. Each brain is built and run for one customer, inside that customer's own account. |
Availability and support
| Question | Answer |
|---|---|
| What availability is offered on Growth? | The standard Growth availability level, with service credits for availability only, as set out in the order form. |
| What is the priority incident response? | The Growth first response level for a P1 incident, measured in business hours. Premium support is not part of Growth. |
| Is there a sandbox? | A Sandbox is an optional add-on and is not included in Growth. |
| How is service reviewed? | Through quarterly business reviews with the customer success manager, Marcus Bell. |
Contract and assurance documents
| Question | Answer |
|---|---|
| What contract framework applies? | An order form under the BB-Demo MSA, with a data processing agreement. |
| Is a security review included? | Security review support is bundled into the Enterprise implementation. For Growth, this questionnaire is the review document, and further questions are handled by the Solutions Engineer. |
| Where are contract terms confirmed? | In the executed order form, which decides price and terms over any proposal or draft. |
| Are there open items? | None recorded at the date of this version. |
Points to note for Harcastle Environmental
- The brain reads from connected systems. Its answers are only as current as the last nightly refresh, and a source that stops loading is flagged with the customer's administrators.
- Availability and data freshness are different things. On Growth, service credits apply to availability only; only Enterprise is credited for freshness.
- Single sign-on, provisioning through SCIM, Premium support and the Sandbox are Enterprise features. They can be added by upgrading tier.
- Any answer above that depends on the customer's own Snowflake configuration is the customer's to confirm with its IT team.
Completion
Completed by Anya Petrova, Solutions Engineer, BB-Demo, on 2 Feb 2025. Questions on this document should go to Anya Petrova or to the account owner, Lewis Kerr.