Tax work is sensitive. Tallia is engineered to ensure that everything you put into the platform is confidential and protected at every layer.
Protection
Your inputs, outputs, and uploaded documents are never used to train, fine-tune, or improve any model — ours or our providers’. Contractual in our service agreement with clients, with our model providers under zero-retention terms.
You decide what’s uploaded, set retention policies, and delete at any time. Data is held in-region in ISO-aligned cloud infrastructure, with hard-delete on offboarding within 30 days.
SSO via SAML 2.0 and OIDC, enforced MFA, and role-based access on a least-privilege basis. A full audit log of every query and draft, streamable to your SIEM.
TLS 1.3 in transit and AES-256 at rest. Every customer workspace is logically separated.
Annual independent third-party penetration testing, automated vulnerability scanning, and continuous monitoring across both infrastructure and application.
A DPA and security addendum with binding terms. Security incidents are notified within 24 hours of confirmation; personal-data breaches within 72 hours.
Assurance
Review the security pack for documentation on controls, data handling, and assurance.
Visit the trust centre (opens in a new tab)Independent audit complete. Report available on request.
Information security management system independently certified to ISO 27001.
DPA available on request, including the UK International Data Transfer Addendum.
Two things: the documents you upload, and the questions and answers that pass through the platform. Both are treated as confidential customer data and protected the same way.
No. We contractually prohibit training, fine-tuning, or model improvement on your inputs, outputs, or documents — including by our model providers, who operate under zero-data-retention terms.
You can delete data at any time, and on offboarding everything is hard-deleted within 30 days.
Submit a report through our security disclosure form.
A closer look
A 30-minute walkthrough on a real question from your team. No deck. We’ll run it live against your authorities.
Book a Demo
