Tallycon
Menu

Trust center

1. In one paragraph

Tallycon reads Tally on your office network and never writes to it. To answer a question it sends the data that question needs to the AI service (Anthropic). Tallycon keeps no copy of your books, questions or answers on any server; they stay on your own computers.

2. Read-only, by construction

Every request to Tally is checked before it is sent. Anything that is not a read of the kind Tallycon makes is refused, and the app has no way to import or alter a voucher.

3. What stays on your computers

What Where
Settings and Tally addresses The computer running Tallycon
Your Anthropic key, if you use your own Encrypted with the operating system's keychain
Conversations and the vouchers behind each answer The computer that asked; newest 50 kept; Delete all in Settings
Question log and feedback The office computer, one file per client; never uploaded
GSTR-2B files you load The office computer
Log of asks, exports and statements The computer, hash-chained so tampering shows; exportable as CSV
Excel and PDF exports Wherever you save them

Tallycon has no telemetry or analytics.

4. What leaves, and why

Where to What When
Tally, on your network Read requests; your books come back Every read
Anthropic's API (the AI service) Your question, the conversation so far, and the ledger and voucher data that question needs (names, figures, narrations) Each question
Our relay, only with remote access on Encrypted frames it cannot read When a paired laptop asks
Updates The app version, to check for a new release Windows installs

Coming with Tallycon accounts:

Where to What
Our metering proxy (instead of your own key) The same as the Anthropic row, passed through in memory and not kept. It records usage only, such as who asked, when, model, tokens, cost, sizes, status, Anthropic's request id and any refusal code, against a client number, never the client's name
Our sign-in service Your email, a sign-in code, a name for the computer, and client numbers with who may see them. Never books, answers or client names

Anthropic processes question data under its commercial terms. We have requested zero data retention for our account; it is not yet granted.

5. Remote access

How remote access worksInside the office, Tallycon reads Tally over the office network. The office copy of Tallycon connects out to the Tallycon relay. The owner's laptop connects to the relay too. Everything between the office and the laptop is encrypted end to end; the relay passes on frames it cannot read. Tally's port never leaves the office. Your office network TallyPrime XML port stayson the network Tallycon office copy Read-only requests over the LAN Relay passes on framesit cannot read Laptop owner, anywhere connects out Encrypted end to end, office to laptop How remote access worksInside the office, Tallycon reads Tally over the office network. The office copy of Tallycon connects out to the Tallycon relay. The owner's laptop connects to the relay too. Everything between the office and the laptop is encrypted end to end; the relay passes on frames it cannot read. Tally's port never leaves the office. Your office network TallyPrime XML port stays inside read-only, LAN Tallycon office copy connects out Relay passes on framesit cannot read Laptop owner, anywhere Encrypted end to end

Tally's port has no password or encryption, so it must never reach the internet. Remote access keeps it on your network:

  • The office copy of Tallycon connects out to our relay; your router needs no open port.
  • A laptop pairs with a one-time code that works once, expires in 15 minutes and is cancelled after five wrong tries.
  • Every connection runs a fresh X25519 key exchange; frames are AES-256-GCM with a key per direction. A frame replayed, reordered or altered closes the link.
  • The relay forwards frames it cannot read or forge. It logs connection details only: times, frame counts, how the link closed, and the device's network with the last part removed for IPv4 addresses.
  • A paired laptop can make only a fixed list of read calls. It cannot send anything to Tally directly.
  • Removing a laptop in the office cuts it off at once.

6. Firm controls (coming)

Built and tested; they open with our hosted service:

  • Sign-in with an email code or Google Workspace; no passwords.
  • Partner, staff and owner roles; staff see only assigned clients, enforced in the app, on remote laptops and at the proxy.
  • A partner console for people, seats, devices, client access, usage and spending caps, with alerts at 80% and 100%.
  • Seats of up to three devices; the app keeps working offline for seven days.

7. Status of each control

Control Status
Read-only access to Tally Available
Books read on your network only Available
Remote access encrypted end to end Available
Per-client separation of data on your computers Available
Local tamper-evident log Available; names the user once sign-in opens
Sign-in, roles, per-client access Coming
Metering proxy and spending caps Coming
Partner console Coming
Code-signed Windows and Mac builds Coming
Zero data retention at Anthropic Requested
Data processing agreement (DPA) Enterprise, on request

8. Deleting your data

Everything Tallycon keeps is in its folder on your computer; uninstalling and deleting that folder removes it. Settings has Delete all for conversations. Once accounts open, a partner can erase a person or a device from our service, and a firm that leaves can ask us to delete its account.

9. Questions

Write to contact@ridepro.in.