Security & trust
TallyCord's whole value is that a record can be trusted.
So here is exactly what we do, and exactly what we do not yet do.
- In transit
- TLS 1.3
- At rest
- Encrypted storage for records and evidence
- Evidence integrity
- SHA-256 hash written into the event record
- Event chain
- Append-only, each event chained to the one before
- Daily sealing
- Each day's records sealed together
- Corrections
- Never edits — new entries referencing the original
Immutability — and its honest limits
Every event is written once and chained to the one before it. A correction is never an edit — it is a new entry that references the original, and the original never changes.
The chain proves that a record has not been altered since it was written. It does not, on its own, prove that the physical event occurred independently of the device that reported it.
We publish that limitation because it is true, and because a system that overclaims its guarantees is worth less than one that states them precisely. TallyCord makes tampering evident. It does not make false reporting impossible — no system can, and any vendor who says otherwise is selling you something that will not survive a courtroom.
Compliance posture — stated plainly
| Standard | Status | Note |
|---|---|---|
| TLS 1.3 in transit | In place | |
| Encryption at rest | In place | |
| Hash-chained, append-only event log | In place | |
| Device-bound operator signing keys | In place | |
| SOC 2 Type II | Not held | Not held. Roadmap item, not a current claim. |
| ISO 27001 | Not held | Not held. |
| Nigeria NDPR / NDPC | To state | [state honestly] |
| EU/UK GDPR | To state | [state position if you have EU/UK data subjects] |
| Penetration test | To state | [state date if done, or 'not yet performed'] |
We are a young company and we will not pretend otherwise. If a SOC 2 report is a hard requirement for your procurement, tell us now — we would rather disqualify ourselves early than waste your time. For buyers whose requirement is evidence integrity rather than a certificate, we are stronger than most vendors twice our size.
Access control
- Multi-party scoped views.In a shared case, each participant sees their own events plus case status — never another party's full data.
- Role-based access inside an organisation, with an audit trail of who viewed what.
- Public verification exposes nothing but a status: valid · broken · suspicious · invalid. No contents, no counterparties, no commercial terms. You choose what a public page may show.
Data location & retention
- Primary processing region: [state the region]
- Retention: [state your default]
- Export: full history exportable at any time for your own auditor
- Deletion: on termination or written request, within [N] days
- Sub-processors: [list every third party that touches customer data — hosting, object storage, email, error monitoring — with purpose and region]
Reporting a security issue: security@tallycord.com — we acknowledge within [N] business days and will not pursue legal action against good-faith researchers.