Is it safe to upload a bank statement?
Yes — uploading a bank statement to MainBook is safe. Files travel over an encrypted connection, are processed automatically without human review, and are deleted on a fixed schedule: 24 hours after a guest upload, 90 days for account uploads. Statements are never sold, shared with advertisers, or used to train third-party AI models.
What happens to your file
- 01
Upload
Your file goes straight to encrypted storage over HTTPS using a single-purpose upload link that expires after 15 minutes. Nobody can reuse that link later.
- 02
Processing
An automated pipeline reads the statement (OCR for scans and photos), extracts every transaction, and checks the math against running balances. No human reads your statement as part of processing.
- 03
Download
You download the Excel or CSV result. Preview and download links are time-limited — they expire after one hour.
- 04
Auto-delete
Guest uploads are deleted after 24 hours. Account uploads are deleted after 90 days, with a warning email 7 days before. You can also delete any document yourself at any time.
The guarantees, in plain words
Encryption
Connections use TLS 1.2 or higher (modern browsers negotiate TLS 1.3). Files and database records are encrypted at rest by our hosting providers. Account passwords and 2FA backup codes are stored hashed with bcrypt.
Who can access your files
Processing is fully automated. Production access is limited to authorized personnel under least-privilege rules with two-factor authentication, and security-relevant events go into an audit log retained for seven years.
Scans, photos & locked PDFs
Scanned and photographed statements go through the same pipeline with OCR — same encryption, same auto-delete. Password-protected PDFs are supported: your password is used once, in memory, and never stored.
Your controls
Delete any document from your dashboard at any time. Export your data or delete your account in one click (GDPR Articles 20 and 17). Payment records required by law are kept in anonymized form.
Only the vendors required to run the service touch your data — OCR, AI extraction, hosting, payments, and email delivery. The full, current list with what each one receives is public: sub-processor list. Details on how files are processed by AI are in the AI disclosure and the privacy policy.
Frequently asked questions
- Is it safe to upload a bank statement to an online converter?
- It depends on the converter — look for encryption in transit, a published auto-delete window, and a public list of the vendors that process your data. MainBook provides all three: encrypted uploads, automatic deletion (24 hours for guest files, 90 days for account files), and a public sub-processor list.
- How long does MainBook keep my bank statement?
- Guest uploads are deleted automatically after 24 hours. Uploads made from an account are deleted automatically after 90 days, and we email you 7 days before deletion. You can delete any file earlier from your dashboard.
- Can MainBook employees read my bank statement?
- Statements are processed entirely by an automated pipeline — no human reads them as part of normal operation. Production access is restricted to authorized personnel under least-privilege rules, protected by two-factor authentication, and recorded in an audit log.
- Does MainBook sell or share my financial data?
- No. Your statements are never sold, shared with advertisers or data brokers, or used to train third-party AI models. Data is shared only with the sub-processors needed to run the service, and the full list is public.
- Do scanned or photographed statements work?
- Yes. Scans and phone photos are converted with OCR through the same pipeline, with the same encryption and the same auto-delete schedule as digital PDFs.
- What about password-protected PDFs?
- Supported. You enter the PDF password, it is used once in memory to open the file, and it is never stored.
See it for yourself
Convert a statement without an account — first 10 pages are free, and the file is gone in 24 hours.