Security

Bank data is sensitive, so the Service is built to hold as little of it as possible.

Encrypted in transit

All uploads and downloads happen over HTTPS / TLS.

Processed in memory, deleted immediately

Your statement is converted in memory and the file is deleted right afterprocessing. We don't keep your statements on our servers.

Never used to train AI

We do not use your data to train any AI model. If an AI fallback is ever used for a difficult scan, it runs under a no-retention, no-training configuration.

No public storage

No public buckets or open file shares. Secrets and credentials are kept server-side with least-privilege access.

Reconciliation integrity

Every statement is checked — opening balance + money in − money out must equal the closing balance — and anything that doesn't reconcile is flagged, not hidden, so you never pass on numbers that don't add up.

Responsible disclosure

Found a security issue? Email rudra@exportbankstatement.comand we'll respond promptly. Please don't disclose it publicly until we've had a chance to fix it.