Trust us with less.
Most vendors ask you to trust them with your data and then describe how well they guard it. Tallwright is built so that there is less to guard: sensitive content stays with you, and every boundary is explicit enough for your security and legal teams to check.
What Tallwright receives. What stays with you.
- Payloads: what the agent did, with which values
- Subject identifiers: customers, accounts, orders
- Free text, transcripts, notes
- Your evidence log and its contents
- Under Own Identity, also your keys
- Commitments: fixed-size summaries that cannot be reversed
- Environment, log position, commit time
- Witnessed checkpoints and the proof history
- Verification events: when a check ran
- Content of any kind
Less data at Tallwright means less exposure: a breach on our side reveals that records exist and when, not what they say. It also means fewer procurement concerns, because the data-protection questions that usually take months mostly do not apply to data we never hold.
Who controls what.
Six roles, each assigned to a named party. Cloud Proof is the default column; Enterprise moves roles toward you.
How access is controlled.
Scoped keys per Environment, revocable at any time. A key cannot read another Environment's proof history.
Production access by named engineers, hardware-key MFA, every access logged. No support access to proof history without a ticket you can see.
Public and read-only. A check reveals a result, never content, and is logged to the owning Environment.
How Tallwright is operated.
Separate Environments, marked as staging on every verification result.
Proof history backed up [FREQUENCY], restore tested [CADENCE].
After any restore, witnessed checkpoints are reconciled against your evidence log before verification resumes.
Notification within [NOTIFICATION WINDOW] of a confirmed incident affecting your Environment. Post-incident reports published.
Every witnessing and every verification logged; exportable on request, to your SIEM on Enterprise.
That a presented record matches the state witnessed at the checkpoint that covered it, and that the evidence chain is consistent. Independently verifiable by anyone with the record.
Truth, completeness, or that the real-world event happened. Tallwright attests to records, not to the world.
Evidence and documentation.
Who operates the Tallwright Witness, how it operates, and what its attestations mean. [VERSION · DATE]
ReadArchitecture, data boundaries, access and operations, for your questionnaire. [VERSION · DATE]
DownloadVerification and Evidence Policy, Retention Policy, Security and Operational Policy, each witnessed on publication.
Legal and policies[PEN TEST STATUS]. [SOC 2 STATUS]. [ISO 27001 STATUS]. Listed as they are, not as hoped.
Hosting [CLOUD PROVIDER, EU], transactional email [PROVIDER], payments [PROVIDER, no record data]. Changes announced 30 days ahead.
Full listsecurity@tallwright.com. Acknowledged within [ACK WINDOW]. Safe-harbour terms in the Legal hub.