DocTable
Is it safe to upload bank statements online?
Updated October 2026
It can be, if you know what the service does with the file — so check three things before you upload: whether the file is kept after processing, who else processes it, and whether it is used to train AI models. At DocTable the upload is held in memory, sent over an encrypted connection to a third-party AI model provider for extraction, not kept afterwards and never used for training, and the spreadsheet you download is deleted after a few minutes. A statement still carries your account number and transactions, so redact what you do not need converted. Your first 3 pages are free — scan and download, no card needed. After that, $3 buys 20 pages (one-time, no subscription). Try your first page without an account — sign in only to download it.
How it works
- Read the three questions below and the security page.
- Redact anything on the statement you do not need converted.
- Upload the statement — PDF, scan or phone photo.
- Download Excel or CSV; the file on the server is deleted after a few minutes.
Three questions to ask any converter
A bank statement holds your name, account number and every transaction for the period, so the useful question is not "is this site safe" but what it does with the file. Before uploading, look for a written answer to three questions:
- Is the file kept after processing, and for how long? Look for the retention of the upload and of the converted file separately.
- Who else processes it? An AI converter may send pages to a model provider; a trustworthy one says so and lists its sub-processors.
- Is it used to train AI models? The answer should be a plain no, not a setting buried in the terms.
If a converter does not answer these in writing, treat the answer as "yes, it is kept" and choose another tool for documents like this.
What happens to a file at DocTable
The statement is received over an encrypted (TLS) connection and held in memory. Multi-page PDFs are turned into page images in a private temporary folder that is deleted before the request finishes. The page images are sent over TLS to a third-party AI model provider for extraction — the one point at which document content leaves DocTable's server. The original upload is not kept after processing.
The extracted preview is held in memory only and expires on a short timer; it is never written to the database. The Excel or CSV file you download is written to a temporary folder and deleted on a timer measured in minutes. DocTable's database holds your account, credit balance, payments and usage events — never document content, extracted values or file names — and documents are never used to train any model.
The limits, stated as plainly: DocTable holds no SOC 2, ISO 27001 or similar certification, and cannot guarantee that data is processed in a particular country. The full data path and sub-processor list are on Security & data processing.
Offline alternatives
DocTable has no offline or on-device mode: every conversion runs on its server. If a statement must not leave your computer and it is a digital PDF (you can select its text with the cursor), Excel's own PDF import does the job locally: Data → Get Data → From File → From PDF runs Power Query on your machine. It reads the text layer only, so it cannot read a scanned or photographed statement, and the From PDF connector is not in Excel for Mac. A scan needs OCR, which is what DocTable runs on its server.
Redacting before upload
The conversion needs the dates, descriptions, amounts and balances — not your name, address or full account number. Cover those before you upload. Use a redaction tool that removes the underlying text, not a black shape drawn on top of it, or cover them on paper and scan the redacted copy. Leave the amounts and running balance visible: DocTable's arithmetic check uses them to flag rows that do not add up.
For businesses
A Data Processing Agreement is available on request, and DocTable will review and sign yours rather than insisting on its own. The named list of AI model providers comes with the agreement. See DocTable for business for volume packs and the DPA.
Frequently asked questions
Is it safe to upload bank statements online?
It is as safe as the service's handling of the file: check whether it is kept, who else processes it and whether it trains AI models. At DocTable the statement is held in memory, sent over an encrypted connection to a third-party AI model provider, not kept after processing and never used for training.
Is there a secure PDF to Excel converter?
Look for one that answers retention, sub-processors and AI training in writing. DocTable publishes its full data path on its security page: no copy of the upload is kept, the spreadsheet is deleted within minutes and documents are never used for training; it holds no SOC 2 or ISO 27001 certification.
Can I convert a PDF to Excel without uploading it?
Not with DocTable — every conversion runs on its server. For a digital PDF with selectable text, Excel's Power Query (Data → Get Data → From File → From PDF) converts it on your own computer, but it cannot read scans and is not in Excel for Mac.
Is there an offline PDF to Excel converter?
Yes, for digital PDFs: Excel's own Power Query PDF import runs on your computer on Windows. DocTable has no offline or on-device mode, and a scanned statement needs OCR, which DocTable runs on its server.
Does DocTable keep my bank statement?
No. The upload is held in memory and not kept after processing, the preview lives in memory only and expires, and the downloaded spreadsheet is deleted on a timer measured in minutes.
Are my documents used to train AI?
No. DocTable never uses your documents to train any model. The third-party AI model provider processes pages under its own terms; ask, and the provider tier your account runs under is stated in a written agreement.
Can I get a Data Processing Agreement?
Yes. A DPA is available on request — see DocTable for business — and DocTable will review and sign yours rather than insisting on its own.
Related pages
Temporary processing — uploads are not kept. Always verify OCR output before financial or legal use. See Privacy in the app.