Your clients' statements, handled as little as possible.
Two ways to run it. Choose the one your practice is comfortable with.
Windows app
Statements are read and checked on your computer, scans included (scan reading is Experimental). They are never uploaded. The app contacts us only to check your licence and to send your export count: an id, the kind of export and the time. Nothing from a statement.
The full list is in our privacy policy →In the browser
Files are uploaded over TLS to our server in France, read there, and deleted after your retention period: 24 hours unless you choose 7 or 30 days. Delete a run at any time and its files go with it. Uploads and results sit on an encrypted volume; its key is held on the same server, so this protects against lost or disposed disks, not against someone in control of the running server.
How we handle your data
No AI in the figures
Numbers are read by fixed rules from the page and checked by arithmetic. No model predicts, rounds or fills in a figure.
Logs without content
Our logs record ids, counts and timings. Never a row, a description, an account number or a file name.
Deleted on your schedule
In the browser: 24 hours by default, or 7 or 30 days. Files you export are yours; we never touch them. Deletion removes files from our storage; we don't claim it overwrites the disk.
Your runs are yours alone
Every request for a run, a file or an export is checked against the account that owns it. Another account gets "not found".
Sign in with Google or email
Passwords are stored as Argon2id hashes and must be at least 12 characters. You can sign out of every device at once from Settings.
Open about limits
"Reconciled" means the rows agree with the printed controls named on the certificate, not that every row is right. Every certificate says so.
The Windows app
- It works offline. It checks in with us at least every 14 days to keep exporting; checking always works.
- Its local service listens only on your computer and refuses any request without a secret created at each launch, so other programs and web pages can't use it.
- It refuses to start if its installed files have been changed.
- Updates are signed. The app checks each download's signature, size and fingerprint, and installs only when you agree.
- The installer is not code-signed yet, so Windows shows an "unknown publisher" warning. Each release's SHA-256 fingerprint is published on the Download page.
Payments
Paddle, our reseller and merchant of record, takes payment. Card numbers never reach us.
Certifications
DocsToBooks holds no SOC 2 or ISO 27001 certification. The data-handling summary sets out what we do, for a firm's own review.
Found a security issue?
Write to [email protected]. We reply within three business days. Please don't test against other customers' data or disrupt the service.