Your statement never leaves your browser
When you add a CAS or a bank statement to Reva, the PDF and its password stay on your device. Here is what we read, what we keep, and why we built it this way.
Was this forwarded to you? Sign up to get Compound in your inbox.
Most apps that read a mutual fund or bank statement ask you to upload it. The file goes to their server, gets opened with your password, and is often kept. We decided early that Reva would not hold your statements.
What happens when you add a statement
- The PDF opens in your browser. Reva reads it on your device with pdf.js, the same PDF reader Firefox uses. Your password is used there and never sent anywhere.
- Identifiers are masked before anything is saved. Folio and account numbers are cut to their last four digits, and your PAN is masked. Bank narrations are masked too.
- You check the result first. Reva shows what it found with checks: every fund has a value, and the total matches the total printed on the statement. For bank statements, every row has to agree with the running balance.
- Only the numbers are saved. Fund names, ISINs, units, values and masked folio numbers go to Reva’s database in Mumbai, behind row-level security, so only you and the people you share with can read them.
What we keep, and what we do not
| Kept by Reva | |
|---|---|
| The statement PDF | No |
| The statement password | No |
| Full folio, account or PAN numbers | No, last four digits only |
| Fund names, units, values, transactions | Yes, in Mumbai, India |
Why it matters
India’s Digital Personal Data Protection Act, 2023 asks companies to collect only what a stated purpose needs. Reva needs your holdings to show your net worth. It does not need your statement file, so it never receives it.
The next step is the RBI’s Account Aggregator network, where you approve each data request in an app run by a licensed aggregator and can revoke it later. That route is not live in Reva yet. Until it is, statements you add yourself are the only way your data gets in.
Questions
- Does Reva store my statement PDF?
- No. The PDF is opened in your browser and is never uploaded to Reva’s servers.
- Does Reva see my statement password?
- No. The password is used in your browser to open the file and is never sent anywhere.
- What does Reva save from a statement?
- Fund names, ISINs, units, values, transactions and masked folio numbers, stored in Mumbai behind row-level security.
- Will Reva use Account Aggregator?
- That is the next step: you would approve each data request in a licensed aggregator’s app and could revoke it. It is not live in Reva yet.
Sources
Compound is analysis, not investment advice. Reva Money is not a SEBI-registered investment adviser.
