Tokens last as long as the institution allows.
Most institutions issue tokens valid for 90 to 365 days. DocGenie sends a re-authorization request to the client before any token expires.
How DocGenie pulls statements from 3,953 institutions on a one-time, read-only authorization, then lands them in the cloud storage you already use, organized by client.
Add a client. Each client can have multiple contacts. The CFO authorizes the operating accounts; the bookkeeper authorizes the corporate credit cards. Different people, same client folder. Each contact gets their own one-time authorization link. The dashboard shows who's authorized, who hasn't, and who needs a reminder.
Connection refreshes route to the contact, not your firm. Your team never sees a password and is never on SMS duty for a 2FA code.
Read-only access. Document retrieval only. The connection mode (direct or credential-based) is shown before you authorize.
Where the institution supports direct authorization, the client signs in at the bank and DocGenie receives a read-only token. The credential never touches DocGenie. Where the institution doesn't, you provide the credential when you add the institution. DocGenie encrypts it with AES-256-GCM under a key unique to your firm, scopes it to document retrieval, and deletes it on revoke. The connection mode is shown before you authorize.
Authorization is a one-time event. Retrieval isn't. Once an institution is authorized (direct or credential-based), DocGenie checks it on a recurring schedule set by your plan and pulls every new document into your cloud storage.
Twice a month. Fits monthly close cadence for solo and small firms.
For mid-market firms and any practice that runs a 4-day or weekly close.
Same cadence as Professional, extended to institutions outside our standard catalog through dedicated connector engineering.
Documents land in the cloud storage your firm already uses. Google Drive, Dropbox, OneDrive, SharePoint, Box, or Evernote. Files are organized by client, then institution, then account.
Reconciliation, court filings, lender underwriting, and tax prep all need the institution's actual statement. DocGenie retrieves that PDF directly. Other categories don't.
| DocGenie | Plaid / aggregators | QBO / Xero feeds | |
|---|---|---|---|
| Delivers institution's PDF statement | ✓ Always | Asset summary only | No, transactions only |
| Court-acceptable for bankruptcy | ✓ | ✗ Disqualifying | ✗ |
| Usable for reconciliation | ✓ | Partial | ✗ Cannot reconcile |
| Requires engineering to implement | No code | Yes, developer required | No |
The client dashboard shows connections, active accounts, documents downloaded, and last sync at a glance. Per-institution rows show account counts, downloads, and connection status.
Most institutions issue tokens valid for 90 to 365 days. DocGenie sends a re-authorization request to the client before any token expires.
On every scheduled run, DocGenie checks each authorized institution for new documents. Each new document is named to your firm's convention and delivered to your cloud storage.
When an authorization expires or the institution forces re-authorization, the client receives a new request through their original Client Connection Link. Past retrievals stay in your cloud storage.
Where the institution supports direct authorization, DocGenie holds a read-only token, never a password. Where it doesn't, you provide the credential at add-institution time; DocGenie encrypts it with AES-256-GCM under a key unique to your firm and deletes it the moment you revoke. Both modes are read-only. Documents are encrypted at rest with AES-256 and in transit with TLS 1.3.
Full security overviewDirect authorization where supported (token, no password). Credential-based access where not (AES-256-GCM, firm-unique key, deleted on revoke).
Documents, retrieval logs, and authorization tokens encrypted at rest.
Every connection, institution side and cloud-storage side.
Free for 2 connections, 3 credits a month. No card. Add a connection and watch the next statement appear in your storage on its own.