Security and data
How Tallyn handles your data
The app and database run on Render in Virginia, USA, and uploads are stored privately in Cloudflare R2, encrypted at rest and downloaded through links that expire after five minutes. Each workspace is separate, and data isn't shared with other New Odyssey products or used to train AI models. Tallyn has no SOC 2 report yet.
What Tallyn holds
- Account details: email address, name if added, and the sign-up source.
- Forms and every published version, quick rules, webhook addresses and team members.
- Submissions: answers, uploaded files, tags, notes, assignments and a timeline of each one.
- AI summaries of submissions and descriptions of uploaded documents, when AI help is on for a form.
- E-signature records: the sent PDF, each signer's typed name, confirmed email, consent, time, IP address and audit trail.
- Connected-app access, encrypted; API keys are stored only as a hash.
- Billing: plan and subscription status. Card details are held by Stripe.
How long it’s kept, and how to export or delete it
Each form keeps submissions for 30, 90 or 180 days, one or two years, or until you delete them; at the end they are deleted automatically with their files. Unsubmitted saved responses go when their link expires and unsubmitted uploads after two days. Workspace deletion is immediate; Render's backups expire on its standard schedule.
The full detail is in Tallyn’s data export and deletion policy.
Who processes it
Service providers (subprocessors), each on our instructions and only for the purpose shown:
- Render: hosting, databases and backups, in the United States.
- Cloudflare: private file storage (R2).
- Stripe: subscription and license payments (card details go to Stripe, never to us).
- Resend: sending email.
- Anthropic: drafting forms, summarizing submissions and describing uploaded documents, when AI help is on for a form.
- OpenAI: checking answers, only when answer checks are switched on.
- Dropbox Sign: e-signature requests, only when you send a document to sign.
Questions and security reports
Tallyn is run by New Odyssey. To ask what we hold about you, to have it exported or deleted, or to report a security problem, email clio@new-odyssey.com. The privacy policy covers the rest.
Questions buyers ask
Can I collect Social Security numbers or bank details with Tallyn?
No, by design. Tallyn isn't built to hold Social Security numbers, ITINs, full bank or card numbers, or logins, and its AI never asks for them. A business's EIN is fine. In uploaded documents, account and ID numbers are masked to their last four characters in what Tallyn's AI writes.
How long does Tallyn keep client submissions?
As long as you choose for each form: 30, 90 or 180 days, one or two years, or until you delete them. When the period ends, Tallyn deletes the submission with its files and any signature records automatically. Files are stored privately in Cloudflare R2 and the app runs on Render in Virginia, USA.