# Tally privacy rating

Online form builder operated by Tally BV in Belgium, with forms created in a document-style editor. Form data is hosted in the EU.

## Summary

Tally scores 25 out of 100 (grade F) on the forms and surveys criteria. It meets 2 of 8 criteria: no ads or data sales and TLS configuration. It does not meet open source, no trackers or telemetry, independent audit, transparency report, tells users about requests and security headers. It is based in Belgium: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade C.

- Website: https://tally.so
- Jurisdiction: Belgium. Fourteen Eyes member. EU member (GDPR).
- Platforms: Web
- Home page trackers: none found
- Category: [Forms and surveys](https://privacyratings.com/forms/)
- Grade: F (25/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The subprocessor list includes Mixpanel and Tinybird for analytics and Sentry for error monitoring. | https://tally.so/help/gdpr |
| No ads or data sales | Yes | Funded by paid plans. The privacy notice states personal data is not sold or rented to third parties. | https://tally.so/help/privacy-policy |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=tally.so&hideResults=on |
| Security headers | No | Grade C (55/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=tally.so |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/forms/tally/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/forms/tally.md