Security, in plain facts
Every statement here is something Chartford does today. Where something is not in place yet, we say so at the end.
Last checked 8 Nov 2026. We update this page when something changes.
The path your books take
A copy of your books leaves your PC and is stored on our server. This is exactly what goes, and what does not.
On your PC
- Chartford Sync reads your books only through TallyPrime's XML interface. It never opens Tally's data files.
- It makes only outbound HTTPS calls. The PC opens no port and accepts no incoming connection.
- Its key and settings are encrypted on the PC with Windows DPAPI.
- If an upload fails, it waits in a queue on the PC and goes again later.
On the way
- Each batch carries a checksum and is signed with the PC's own key.
- The server works out your workspace from that key, so one PC cannot send data into another customer's account.
- Traffic passes Cloudflare and a Cloudflare Tunnel. Nothing on the server is open to the internet.
- A sync that would replace newer data with older or empty data is stopped and logged.
On our server
- Hosted in Mumbai, on AWS.
- Each customer's data is kept apart by row-level security in the PostgreSQL database, forced and fail-closed: a read without a workspace returns nothing. The app checks the workspace as well.
- Sensitive settings, such as mail keys, are encrypted in the database.
- An encrypted backup every night at 02:00 IST, including a copy in a locked storage bucket in Mumbai that is kept for 35 days.
Signing in
- HTTPS only. Other sites cannot frame the pages. Forged form posts are refused, and repeated sign-in attempts are limited.
- A human check (Cloudflare Turnstile) on sign-up and sign-in, a 6-digit email code at sign-up, and an email when a new device signs in.
- One browser, one Android phone and one iPhone per login. The web signs you out after 30 minutes without use, and a sessions page signs out other devices.
- Roles are checked on the server for every page, not only hidden in the menu.
In your control
- An audit log of sign-ins, exports, sends and syncs.
- The owner can export all workspace data, or delete the workspace. Team members can delete their own login.
- Reminders go only to contacts you mark as agreed, and every email has an unsubscribe link.
- Writing entries back into Tally is switched off for customers.
Services we use
- AWS (hosting in Mumbai), Cloudflare (network and tunnel), Resend (account and security email) and Microsoft 365 (our mailbox).
Who sees what
Menus hide what a role cannot open, and the server refuses it too.
| Area | Owner | Admin | Accounts | Sales | Viewer |
|---|---|---|---|---|---|
| Receivables and customer accounts | Yes | Yes | Yes | Own customers | Read only |
| Payables | Yes | Yes | Yes | No | Read only |
| P&L, Balance Sheet, Trial Balance | Yes | Yes | Yes | No | Read only |
| Reminder set-up | Yes | Yes | No | No | No |
| GSTR-2B reconciliation | Yes | Yes | No | No | No |
| Salespeople and sales types | Yes | Yes | No | No | No |
| Export all data, delete the workspace | Yes | No | No | No | No |
What we don't claim yet
- No ISO 27001 or SOC 2 certificate, and no outside penetration test yet.
- No uptime figure or service-level promise.
- A copy of your books does leave your PC. It is stored on our server so you can open it anywhere.
- A second sign-in step is not switched on by default for workspace logins.
- We say "hosted in Mumbai", not "data stays in India": email passes through our mail provider, and Cloudflare's network is worldwide.
- Encrypted at rest: backups, sensitive settings and the Sync key. We don't claim more than that.
- The Chartford Sync installer is not code-signed yet. Our team sends it to you with a checksum you can check.