Scheduling the security review walkthrough

Hi Megan, Thanks for the time on our last call. Here's where we are: your team has our security questionnaire answers, and you've told us there are open findings you want to walk through before anything moves forward. To be transparent, I'd rather get those findings in front of Hannah Lowe, our Solutions Engineer, in a live session than trade them by email. She runs every Enterprise security review on our side and she'll answer from the architecture, not from memory. Could we book a working session early next week? I'm flexible on the day. Any slot between 14:00 and 17:00 Eastern would suit me, and I'll make sure Hannah has her diagrams ready. Two things would help me prepare: - the list of open findings as you currently hold them - who else from your side should join What would make this a yes for your risk committee? I'd like to know now so we don't waste your time. Thanks, Jordan

Jordan, Thank you for the note. For the record, I will be the only attendee from Quillmark on the first session. Additional reviewers will be added only if the findings warrant it. On your questions: 1. Open findings: I will send the list to you and Hannah in writing before the session. I will not be sharing how the review is scored. 2. Scope: the session will cover data residency inside the customer's Snowflake account, access controls, and incident history. Please have Hannah prepared to describe any incidents in the last ninety days, including any that did not affect customers. 3. Format: I expect written answers to follow the session. A verbal answer is not sufficient for our records, and "best effort" will not be accepted as a response to a control question. Any afternoon slot next week works in principle. Please propose a specific time and I will confirm. Megan Alvarez, CISO On 28 May 2026, at 13:59, Jordan Pike wrote: > Could we book a working session early next week? I'm flexible on the day.