No keys. Ever.
The report path never requests a signature, never holds funds, and never asks for a private key. Say it on the first screen — this is a trust product.
Security
Trust is a feature, not a footer.
TALLY is read-only by design. The security model is part of the product brief — not an afterthought bolted on before launch.
Session-only addresses
An address is personal data. We do not store it server-side beyond the session. No analytics on user addresses.
RPC hygiene
Rate-limit and cache. Back off under throttle. Degrade to partial, usable results rather than hammering the public endpoint.
Honest incompleteness
Unverifiable rows are flagged with an explanation. Fabricated prices in a tax report are the worst failure mode of this product.
Geo & framing
- Tokens are not registered in the US and are not offered to US residents — geo disclaimer required on product surfaces.
- Instruments are debt securities issued from Jersey, not US equities. Treatment differs by jurisdiction.
- The report is input for a professional. It is not a determination of what you owe.
Retention
Browser session for the active report. Chunk caches are keyed by address for the session only. No long-term address store. No address-level analytics.