Is it safe to upload a bank statement online
Updated 2026-08-19
It is a fair question and most tools answer it vaguely. A statement is not just a list of purchases: it carries your name, address, account number, sort code or routing number, balances and every counterparty you dealt with.
What a statement exposes
Enough for social engineering, if it leaks. Account and routing details, your address, your salary and its timing, your regular commitments, and the names of everyone who pays you or is paid by you.
What to ask any converter
The answers should be easy to find, and vagueness is itself an answer:
- Is the file stored after conversion, and if so for how long
- Is an account required, and what is retained against it
- Is the connection encrypted end to end
- Is the data used to train anything
- Is there a named entity behind the service, or only a form
How this converter handles files
The PDF is uploaded over HTTPS, held in memory while the transactions are read, and used to build the CSV you download. It is not written to disk, not stored, and there is no account to attach a file history to.
Sensible precautions
Convert on a device you control rather than a shared computer, download to a location you will remember to clear, and avoid emailing the resulting CSV unencrypted. The export is as sensitive as the statement it came from.