Security
Your books and your people's data, locked down.
TallyCheck holds salaries, bank details and every figure your business depends on. It's built so the right people see the right things — and nothing is quietly changed.
Signing in
Only the right people get in
Strong password storage
Passwords are stored with Argon2id hashing — never as plain text, never readable by anyone.
Two-factor sign-in
Each user can add a code from an authenticator app. An administrator can reset it if a phone is lost.
Brakes on guessing
Repeated wrong passwords or codes are slowed down, and failed sign-ins are written to the log.
Switch people off
A deactivated account is refused everywhere at once — including any Claude key it made.
A safe first start
The first administrator can only be created on the computer or server that runs TallyCheck.
Never locked out
The last active administrator can't be removed or deactivated by mistake.
Permissions
Everyone sees exactly what they should
Build roles from 17 separate permissions. Sales staff can see only their own invoices; payroll stays with the people who run it; viewers can read reports and nothing else.
Integrity
Books that can't be quietly rewritten
Encryption
- Employee photos, documents and filed salary slips are stored with AES-256-GCM encryption.
- Shop and payment service credentials are kept encrypted, and never shown again.
- The encryption key stays with you — on your PC, or in your server's settings.
The ledger
- Every entry must balance exactly before it is saved.
- The database itself refuses changes to posted entries — corrections are reversals.
- A books lock date closes finished periods for everyone.
Who did what
- The activity log records every change, sign-in and failed sign-in, in plain words.
- Filter it by person, date or kind of activity; it can't be edited or deleted.
- Work done through Claude is logged as “user via key”.
Your data
Kept where you decide
On your own PC or server
Desktop keeps the books on your computer; Web runs on a server you choose. Your accounts are not stored on our systems.
Backups you control
Desktop makes encrypted backups with your own backup password. Web servers take scheduled backups of the database and files.
AI on a short lead
Claude keys work only on the machine running TallyCheck, read by default, can only ever create drafts, and never see payroll or employees.
See your books the way they should be.
Pick the edition that fits. You can move from one to the other later.
TallyCheck Web
For the whole team, from any browser.
TallyCheck Desktop
Offline, on one Windows PC.