Bank Statement Privacy, Redaction and Retention

Before sharing a redacted bank statement

A redacted bank statement is a copy with selected sensitive information permanently removed. Ask the legitimate recipient what must remain visible and whether any redaction is accepted. A lender may require the original bank-issued PDF; your accountant may need descriptions, dates and amounts to substantiate entries. Redaction is not permission to change balances or conceal relevant activity.

Keep the original privately and work on a separate copy in a real PDF redaction tool. Adobe documents marking content, applying redactions and sanitizing hidden data such as comments, metadata and hidden layers. Drawing a black rectangle over text is not reliable removal. Reopen the saved copy and check search, text selection, comments and attachments before sending it through an agreed secure channel. Fulla does not provide a redaction feature.

Fictional before-and-after example

Before: Cedar Studio, account 000012345678, 10 Example Lane, October 1 to October 31, deposit D200 $200. After, if the recipient agrees: Cedar Studio, account ending 5678, address removed, the same period and deposit D200 $200. These details are invented for education, not a substitute bank document.

Removing the account holder or period can prevent the recipient identifying the right account. Covering dates, amounts, descriptions, page numbers or running balances can make extraction incomplete or reconciliation impossible. A redaction tool permanently removes data, so a converter cannot recover it. Review only the information actually present; never guess hidden values. Download necessary records before Fulla’s separate content-expiry deadline.

Private source and export access

Fulla uses private encrypted object storage. Source and export requests are authorized and proxied, so the service does not expose public object URLs for financial content.

Account and workspace records needed to operate the service can outlive the financial-content window. The Privacy notice lists those records separately.

Named extraction boundaries

Application-rendered page images go through OpenRouter only to the model and provider endpoint pinned by the active evaluated policy. The route in use is Mistral through Mistral ZDR, requested with formal OpenRouter zero data retention and data collection denied.

Expiry and support consent

Uploaded and derived financial content expires 24 hours after presign. A failed deletion remains fenced from access and is retried rather than silently extending access.

Support can inspect one currently owned document only after explicit versioned consent on a ticket and before expiry. Operator access is audited, and revocation clears the document link.