Trust and data protection
Last updated: 5 October 2026
This site is where bernard answers the questions a business asks before it trusts us with its website and its customers’ data. bernard is run by Bernard Moves Ltd, a company registered in England and Wales.
What you will find here
- How bernard is built. Seven design choices that protect your site and your data.
- GDPR statement. Who is in charge of which data, where it lives, your rights, and how long we keep it.
- Sub-processors. The providers we use to run the service, what each one does, and where.
- Security overview. How changes reach a live site, and how we protect accounts and data.
- Availability. What keeps working when part of bernard is down, and what does not.
You can also report a vulnerability or read our company details.
The Security Pack
The Security Pack is for IT and procurement teams who assess bernard as a supplier. It holds our disaster protection, wording for your IT policies, our draft Data Processing Agreement, access control and operator access, and retention and deletion.