Skip to content
Tallyfy

Terms & legals

Tallyfy maintains compliance, legal, security, and privacy standards built for enterprise and regulatory needs:

  • SOC 2 Type 2 Attestation - Independently verified security controls and operational effectiveness for data protection.
  • HSTS Compliance - HTTP Strict Transport Security prevents man-in-the-middle attacks. The tallyfy.com domain is pre-loaded as secure in major browsers.
  • BIMI Compliance - Brand Indicators for Message Identification enhances brand recognition and prevents phishing attacks.
  • Custom Data Processing Agreements - Available for EU, UK, or specific US states (like CCPA) to meet regional privacy requirements.
  • GDPR Compliance - Achieved through Data Privacy Framework (DPF) attestation for full European data protection.
  • Enterprise Contract Flexibility - Custom contracts available for specialized enterprise needs.
  • Free Single Sign-On - SSO is included free for all customers - security shouldn’t cost extra.
  • Full Data Encryption - All data is encrypted both in transit and at rest using industry-standard protocols.
  • Logical Data Separation - Multi-tenant cloud hosting with logical data separation, hosted in us-west-2 on Amazon Web Services.
  • AWS GovCloud Hosting - Available for customers needing enhanced security standards. Requires an enterprise contract - schedule a consultation ↗ for details.
  • Multi-layer API Security - Every API request goes through Cloudflare Workers and Web Application Firewall (WAF) protection.
  • Sanctions Compliance - Access is blocked from countries under US trade sanctions.
  • Anonymous Network Blocking - Requests from Tor browsers are automatically blocked.
  • Edge Rate Limiting - Rate limiting at the network edge handles traffic spikes and prevents abuse.
  • Enterprise Insurance Options - Custom insurance coverage available for enterprises with specific liability requirements.

Achieving compliance with Tallyfy

Tallyfy’s compliance automation software ↗ helps organizations meet regulatory requirements through standardized processes, automated compliance tracking, and audit trails.

Pro > Compliance

Tallyfy holds SOC 2 Type 2 certification with rolling three-month audits and provides bank-level encryption (TLS 1.2+ and AES-256) along with immutable audit trails and SSO enforcement to serve regulated industries like financial services and healthcare and manufacturing that need documented proof of who did what and when.

Compliance > HSTS compliance

Tallyfy enforces HSTS preloading which means your browser is hardcoded to only use encrypted HTTPS connections and blocks SSL stripping and man-in-the-middle attacks before any data leaves your device even on your very first visit.

Terms Legals > Tallyfy's privacy policy

Tallyfy’s privacy policy outlines how personal information is collected and used and protected while their security documentation at the compliance page details IT infrastructure and data protection measures and operational safeguards.

Miscellaneous > Differentiation

Tallyfy stands apart from other workflow tools by offering free lifetime expert support with no tiers or fees along with fully transparent pricing that includes SSO and API access and it is a profitable self-funded company with SOC 2 Type II certification and full data portability through an open API so there is zero vendor lock-in or risk of the platform disappearing.
Get in touch
About Tallyfy