How bernard is built

bernard moves your website onto hosting we run, and then helps you edit, sell and teach from it. Seven design choices protect your site and your data.

1. Your live site does not depend on the editor

Your published site is a set of finished files. The originals are held in Ireland, and Cloudflare keeps cached copies in its data centres around the world, so pages load quickly wherever your visitors are. This makes your site robust as well as fast. Each visitor is served by a Cloudflare data centre near them, and if one data centre has a problem, visitors are sent to another. A page that is already in a data centre’s cache keeps loading there even if the original files in Ireland cannot be reached for a while.

Cloudflare is one of the largest networks of its kind, and its security is independently audited. Cloudflare states that it is certified to ISO/IEC 27001:2022 for information security, ISO/IEC 27018:2019 for protecting personal data in the cloud, and ISO/IEC 27701:2019 for privacy management. You can read its reports and certificates in the Cloudflare Trust Hub.

The editing service, the database and the AI are separate. If they stop, your pages, images and videos stay online. Features that take input need the editing service: forms, checkout, course sign-in and new sign-ins to private sites. They return when the service returns.

2. Nothing changes until a person says yes

Every edit, by you, your team or an AI, goes into a draft first. Your live site changes only when someone on your account publishes. You can let bernard make some routine fixes on its own. That is your choice, it is off until you turn it on, and it never covers sensitive subjects such as health, legal or money.

3. Every change is recorded and can be undone

Each change is saved as a version, with who made it and why. Anyone on your account can see and restore the last 100 published versions. Separate backups are kept for up to a year in a locked backup vault. No customer can reach it, and the lock blocks early deletion. We test that we can restore them. On 5 October 2026 we restored every site’s history into a separate system in under three minutes and checked each one.

4. No unreviewed code runs on your site

bernard removes new scripts from your pages. A library is allowed only if bernard has reviewed it and added it to a short permitted list. Code that is yours runs only after you approve the exact version. An AI never writes code for your pages.

5. Your data is kept apart from everyone else’s

Every account’s data is separated in the database itself, so one customer cannot reach another customer’s records. An AI you connect can do only what you can do, on your own sites, and you can cut it off at any time by replacing its key. When you remove someone from your team, their AI connections stop too.

6. Signing in is protected

You can turn on two-step sign-in with an authenticator app in your account settings. bernard staff who support you must use two-step sign-in, and what they do through bernard’s tools is recorded. You get an email if a sign-in method is added to or removed from your account.

7. Built to keep running

bernard runs in Ireland on Amazon Web Services and Supabase, across more than one data centre. New versions roll out gradually, and roll back on their own if they fail their health checks. Data is encrypted in transit and at rest.

What we do not claim

bernard does not yet hold its own security certification, such as ISO 27001 or Cyber Essentials. Our main providers do, and we link to their trust centres on the Sub-processors page.