Bank statements are among the most sensitive documents you own. Statement Mill is built so that the safest thing we can do with your file is also the default: we never store it.
Processed in memory, never stored
When you convert a statement, the file is held in memory only for the seconds it takes to extract the data, then discarded. It is never written to a database or disk on our side. There is no archive of your statements to leak, subpoena, or breach — because it does not exist.
Encrypted in transit
Every upload and download happens over HTTPS (TLS). Your file is encrypted between your browser and our processing function the entire way.
Never used to train AI
We extract your data using a commercial AI processing API that does not train on submitted content. Your statements are never used to improve any model, ours or anyone else's.
The spreadsheet is built on your device
For conversions through our web app, the final Excel or CSV file is assembled locally in your browser from the extracted rows. The formatted output never touches our servers at all.
Verification, not blind trust
Every conversion is reconciled against the statement's own opening and closing balances before you download it. If the numbers do not add up, we tell you — so you never unknowingly rely on a misread figure. Read more about how this works.
Minimal technical logging
We keep standard operational logs (timestamps, response codes, approximate request sizes) needed to run and secure the service. These contain no statement contents.
Report a vulnerability
Found a security issue? We want to hear from you. Email security@statementmill.com and we'll respond promptly. Please give us reasonable time to address issues before public disclosure.