Trust & Security
Privacy-first by design
Minimize access, minimize retention, and protect every transaction. We build compliance directly into our processing pipeline.
Encryption in Transit
All connections to our servers are protected using industry-standard TLS encryption, preventing data intercept as files move from your device to our parser.
Encryption at Rest
Uploaded PDFs and generated spreadsheets are stored using unique per-file AES-256 keys. Decryption happens purely in-memory during active parsing.
No AI Training
We strictly do not use customer documents to train our models. Paid API endpoints enforce training restrictions for all processed financial contents.
EU Infrastructure
Our core systems are hosted in Germany (EU). Standard operations align with GDPR, keeping data within strict, privacy-protected regional boundaries.
Data Retention
Automatic retention controls
We keep files only as long as your plan requires so you can re-download past results. You can manually delete any document instantly, permanently removing it from our storage.
| Plan | Retention Period | Controls Available |
|---|---|---|
| Free Trial | 7 days | Manual delete anytime |
| Starter | 3 months | Manual delete + optional daily auto-delete |
| Professional | 1 year | Manual delete + optional daily auto-delete |
| Business | 2 years | Manual delete + optional daily auto-delete |
* Deleted file contents are removed permanently. Limited, anonymized metadata (filenames, processing status, and transaction volumes) is retained for audit logging and usage quotas.
Secure Payment Gateway
Smart Bank Statement does not collect or store credit card details. All billing actions, subscriptions, and receipts are securely managed via **Paddle**, which complies with PCI-DSS standards.
Privacy-First Analytics
We use minimal tracking. We run **Cloudflare Web Analytics** (zero cookie tracking) and self-hosted **Umami** (first-party trends). We never deploy cross-site tracking or behavioral pixels.
Have questions about compliance?
Our security team can help provide detailed specifications for your firm's data audit needs.