SECURITY CONSULTATION SOW
This Statement of Work ('SOW') is entered into by and between the parties noted on the ordering documents referencing this SOW (the 'Order Form') and describes the services to be performed by Snowflake under this SOW ('Technical Services'). This SOW shall come into effect as of the effective date of the Order Form (the 'SOW Effective Date') and shall be incorporated by reference thereto. For the purposes of this SOW, 'Customer' means the party that is purchasing Technical Services.
Notwithstanding any provision to the contrary hereunder or in the Order Form, where Technical Services are purchased through a Snowflake authorized distributor or reseller ('Reseller'): (a) the performance of the Snowflake obligations hereunder shall be performed through such Reseller; (b) no privity of contract is established between Snowflake or any of its Affiliates and Customer, and this SOW is not deemed an agreement (separate or otherwise) between Snowflake or any of its Affiliates and Customer; and (c) such Reseller is responsible for any claims or damages relating to, or arising out of, this SOW.
- Description of Technical Services. During the Term, Snowflake shall provide the following Technical Services:
Technical Service Overview
The Snowflake Security Consultation Technical Services package is designed to assist Customer in the overall Snowflake security implementation design with initial configuration approaches of the Snowflake Service through a series of interactive workshops. At the conclusion of the Security engagement, Snowflake will provide documentation on the content delivered during each workshop and will deliver a final presentation of the engagement results and recommended next steps. Unless otherwise agreed to in writing, all Technical Services will be delivered remotely.
Security documentation may be customized during the course of the Technical Services, which are planned for one to two continuous weeks (M-F). Customer should plan for approximately thirty to forty hours of direct interaction with the Snowflake Solutions Architect through workshops, follow-up meetings, and the final presentation readout.
Workshops will follow a set structure with time-boxed activities for each of the following:
- Key Concept Review
- Example Implementations
- Requirement Review
- Solution Design/Configuration Approach
The workshops conducted during this Technical Services engagement are described below:
| Workshop Subject |
Snowflake Topic Areas |
| Privacy Compliance |
- Privacy regulations and associated requirements - Snowflake architectural implications - Backups - Time travel - Right to be forgotten - Time boxing sensitive object grants - Row/column level masking, redaction, filtering |
| Network Security | - Snowflake network architecture - Black/white list for IP's for network policy implementation - Private Link approach - Multi-factor authentication |