Skip to content
Security & your data

Your paperwork, and nobody else’s business.

You’re being asked to put mortgage offers, valuations and income into a product from a company you’ve just met. Here is exactly what happens to it.

Where it lives

In the UK, encrypted, and separated per account

UK data centres

Your data is stored and processed in the United Kingdom. Nothing is moved offshore for cheaper processing.

Encrypted throughout

In transit and at rest. Documents you upload are encrypted with the same treatment as the numbers taken out of them.

Separated per account

Your properties, documents and models are yours alone. Nothing is pooled, aggregated or used to train anything.

Who sees it

You, and only people you choose

There is no adviser looking over your shoulder and no partner receiving a feed. If you want your accountant to see the picture, you export it and send it — the sharing is yours to do.

No lender access

No mortgage provider, insurer or broker can see your account, and none of them is told you exist.

Support access is logged

If you ask us for help and grant access, it is time-limited and recorded. Nobody browses accounts.

Export or delete, any time

Your documents are yours. Take them with you when you leave, and deletion means deleted.

Plainly

Four things we will never do

No small print underneath. These are commitments, and if any of them changed the product would no longer be the one we set out to build.

Never sell your data

Not to lenders, not to brokers, not to data brokers, not in aggregate, not anonymised. There is no version of this we’re comfortable with.

Never take commission

Nobody pays us to be in front of you. If a feature exists, it’s because it was useful, not because it was funded.

Never use it to train models

Your paperwork is not training material. Document reading runs on your file to serve your account and nothing else.

Never lock your documents in

No export fee, no held hostage on cancellation, no format you can’t open elsewhere.

Practical

The bits people actually ask about

Do you connect to my bank?

Not for property values or mortgages — those come from your paperwork and public data. Where a connection would save you typing, it’s optional and read-only, and you can remove it without losing what’s already there.

What happens to a document after you read it?

The details are pulled out, shown to you for approval, and the original stays filed against the property. Nothing enters your numbers before you’ve seen it. If a document can’t be read, it’s still filed and you type the details yourself.

If I cancel, what happens to everything?

Export first — documents and data, in formats you can open elsewhere. Then ask us to delete and it goes, including from backups on their normal cycle.

Who is the data controller?

Bernwy, registered in the UK. You have the usual rights under UK GDPR — access, correction, deletion, portability — and the privacy notice sets out how to use them.