Security and data handling
A bank statement is one of the most sensitive documents you own. Here is exactly what happens to it, without the vague reassurance most tools offer.
What a statement exposes
A bank statement carries your name and address, your account and routing or sort code, your balances, your income and its timing, and every counterparty you dealt with in the period. That is why the handling matters more here than for an ordinary file upload.
How files are handled
The chain is deliberately short:
- Upload happens over HTTPS
- The PDF is held in memory only for as long as the conversion takes
- The extracted rows are returned directly to your browser
- The file is discarded and never written to disk
- No account exists, so nothing is linked to an identity
Third-party processing
Reading a statement accurately uses a commercial AI model provider under a business agreement. The document is sent for processing and is not retained by this service afterwards. If your organisation's policy prohibits any third-party processing of financial documents, use a fully local tool instead. That is a legitimate requirement and it is better to know it up front.
What you should still do
Convert on a device you control rather than a shared or public machine, clear the downloaded file when you are finished with it, and avoid emailing the CSV unencrypted. The export is exactly as sensitive as the statement it came from.
Frequently asked questions
+Is my statement stored after conversion?
No. It is processed in memory and discarded. There is no account and no file history.
+Do I need to create an account?
No. There is no signup and no email capture, which means there is no user record to attach files to.
+Is my data used for training?
Not by this service. Statements are sent to a commercial AI provider under its business terms purely to produce your output, and nothing is retained here afterwards. If your policy requires a written no-training commitment, review that provider's terms before uploading client data.
+Can I redact the statement first?
You can black out the address block. Leave the transactions and balances intact, since the verification check depends on the arithmetic.