Security
Hosting and security span the Tally+ topology—protecting metering, billing, market, and customer data while supporting compliance and operational resilience for regulated retail.
Confidence to deploy
The Tally+ program emphasizes compliance & regulatory capability together with operational excellence—lifting automation (including AI/ML) to reduce cost-to-serve while preserving the controls retailers need for procurement and risk reviews.
Compliance & regulatory alignment
Retail platforms must stay aligned with market rules, tariff constructs, and correspondence obligations as jurisdictions evolve. Tally+ is positioned to maintain demonstrable billing and product-development capabilities alongside governance suited to energy retail—including deployments integrated with U.S. and global energy markets where applicable.
- Market & product compliance: support for complex products and pass-through constructs described in Tally capability materials (indexed and time-of-use structures, pass-through charges, new energy scenarios, and related invoicing).
- Operational controls: separation between roles that configure pricing, approve campaigns, and operate settlement-critical batch processes—aligned to enterprise IAM when integrated with your IdP.
- Evidence for buyers: framework mappings, control narratives, and third-party attestations are shared under NDA during procurement; ask your Tally contact for the current matrix for your region.
Data protection & integrity
Automated Data Management (ADM) automates and validates transaction data—usage, billing, and metering—reducing manual workload through smart normalization and reconciliation so downstream billing and compliance workflows rest on accurate inputs.
- Classification & handling: metering, billing, payment, and customer identity data are handled with least-privilege access, encryption in transit, and encryption at rest appropriate to cloud deployment patterns.
- Retention & auditability: configurable retention aligned to regulatory and commercial needs; access logging for privileged operations.
- Incident response: coordinated customer notification and remediation playbooks consistent with enterprise vendor expectations (details provided during onboarding).
Assurance & certifications
U.S. and global procurement teams typically request named certifications (for example ISO/IEC 27001), independent audit reports, and renewal cadence. Official artefacts are supplied under NDA with scope statements matched to the services you consume.
Security & privacy attestations
Upon request: summaries of ISO management system certifications (where held for the services in scope) and mapped controls—with validity dates and registration boundaries.
Independent audits
SOC-style or equivalent third-party examination reports, where available, for the hosting and service boundary relevant to your deployment.
Architecture linkage
The Hosting & security layer in the Tally+ topology sits alongside operational intelligence—reflecting defence-in-depth across channels, integrations, and batch operations.