Skip to content
Tallyfy

Terms & legals

Section titled “Compliance and legal standards”

Tallyfy is built for the security, legal, privacy, and compliance standards that larger companies and regulators expect. Here’s what’s in place to protect your data:

  • SOC 2 Type 2 Attestation - an independent auditor has checked that our security controls work and keep your data protected.
  • HSTS Compliance - HTTP Strict Transport Security. Browsers are pre-loaded to reach tallyfy.com only over an encrypted connection, which blocks man-in-the-middle attacks.
  • BIMI Compliance - Brand Indicators for Message Identification. It shows our verified logo on emails, which boosts brand recognition and helps prevent phishing.
  • Custom Data Processing Agreements - available for the EU, UK, or specific US states (like CCPA) to meet regional privacy laws.
  • GDPR Compliance - met through Data Privacy Framework (DPF) attestation for full European data protection.
  • Enterprise Contract Flexibility - custom contracts for specialized enterprise needs.
  • Free Single Sign-On - SSO1 is included free for every customer. Security shouldn’t cost extra.
  • Full Data Encryption - all your data is encrypted both in transit and at rest, using industry-standard protocols.
  • Logical Data Separation - multi-tenant cloud hosting keeps each customer’s data logically separate, hosted in the us-west-2 region on Amazon Web Services.
  • AWS GovCloud Hosting - available for customers who need higher security standards. It requires an enterprise contract. Schedule a consultation ↗ for details.
  • Multi-layer API Security - every API request passes through Cloudflare Workers and Web Application Firewall protection.
  • Sanctions Compliance - access is blocked from countries under US trade sanctions.
  • Anonymous Network Blocking - requests from Tor browsers are blocked automatically.
  • Edge Rate Limiting - traffic is rate-limited at the network edge to handle spikes and prevent abuse.
  • Enterprise Insurance Options - custom insurance coverage for enterprises with specific liability needs.

Achieving compliance with Tallyfy

Section titled “Achieving compliance with Tallyfy”

Tallyfy’s compliance automation software ↗ helps organizations meet regulatory requirements through standardized processes, automated compliance tracking, and audit trails.

Section titled “Related articles”

Pro > Compliance

Tallyfy maintains a current SOC 2 Type 2 attestation. Bank-level encryption (TLS 1.2+ and…

Footnotes

Section titled “Footnotes”

  1. SSO (single sign-on) lets your team sign in to Tallyfy with the company login they already use, so there’s no separate password. ↩

Get in touch
About Tallyfy