Legal

Security

Last updated: 2 September 2026

Banksheet handles bank statements. This page explains how Loomod Ltd approaches security. It is not a certification, audit report, or guarantee that incidents will never occur. For how we use personal data, see our Privacy Policy.

Who is responsible

Banksheet is operated by LOOMOD LIMITED (Loomod Ltd), company number 16715015, registered in England and Wales. Registered office: Office 14575, 182–184 High Street North, East Ham, London, United Kingdom, E6 2JA. Security and privacy enquiries: keshan@banksheet.lk.

What we protect

The data we treat as sensitive includes uploaded statement PDFs, extracted transactions, and the account or contact details you give us when you request a demo or use the product.

• We do not sell statement data or use it for advertising.
• We do not use your statements to train public machine-learning models.
• Access to production data is limited to people who need it to operate or support the service.

Transport and access

• The website and product are served over HTTPS.
• Administrative access uses unique credentials and is restricted to authorised personnel.
• We prefer least-privilege access to hosting, storage, and email systems used to run Banksheet.

How long files are kept

Uploaded statements are processed to produce your export. We keep files only as long as needed to complete that work and let you retrieve results, then delete or irreversibly anonymise them, unless a paid arrangement or legal duty requires a longer retention period. See the Privacy Policy for more detail.

Your responsibilities

• Only upload statements you are entitled to process.
• Use a unique, strong password if we issue you an account, and do not share it.
• Review extracted output before you file tax returns or post to your books.
• Tell us quickly at keshan@banksheet.lk if you suspect unauthorised access.

Incidents

If we become aware of a personal-data breach that UK law requires us to notify, we will notify the ICO and affected customers as required, and we will email the address we hold for your account or enquiry where that is practicable.

Vendors

We use infrastructure and software vendors to host and operate Banksheet. We choose providers that support encryption in transit and, where available, encryption at rest, and we limit what they can access to what is needed to provide their service.

Report a vulnerability

If you believe you have found a security issue in Banksheet or banksheet.lk, email keshan@banksheet.lk with enough detail for us to reproduce it. Please do not access other customers’ data or disrupt the service while testing.