Security

Practical account protection, explained clearly.

Tallyo confirms account email addresses, offers optional two-step sign-in and keeps sensitive operations on the server. No system can remove every risk, so this page explains both the protection and its limits.

Your sign-in

Add another sign-in check

Confirm your email, then optionally use an authenticator app for two-step sign-in. One-time recovery codes and device sign-out controls help if access changes.

Your account records

Keep each account separate

Database rules limit a signed-in account to its own records. Private email, payment and service credentials stay on the server.

Your documents

Protect files you download

Tallyo reduces common browser risks, but you still need to protect downloaded PDFs, exports and the devices where you use them.

Clear boundary

Controls reduce risk; they do not remove it.

Tallyo does not claim certification or complete security. Activity history supports everyday follow-up but is not a tamper-proof compliance audit log.

Set up account protection

Ready when you are

Review the product before creating an account.

See the real Tallyo workflows and decide whether the workspace suits your business.