Private storage

Archived source files and supporting evidence are kept in access-controlled storage and are not published on the open web.

Organization isolation

Database and file policies limit authenticated users to information belonging to their organization.

Verified login

Every login requires a single-use six-digit code delivered to the account email address.

Defensive uploads

Taliqor validates CSV and Excel file types, signatures, size, structure, worksheet, row, column, and reconciliation ownership limits.

Layered browser protection

Content Security Policy, anti-clickjacking, content-sniffing, referrer, and permissions controls reduce browser-side risk.

Account deletion

Users can delete their account. Private workspace deletion also removes application records and archived source files.

Encryption

Taliqor is served over HTTPS. Its infrastructure providers encrypt data in transit and at rest. Taliqor does not currently claim end-to-end or zero-knowledge encryption.

Abuse and injection protection

Sensitive actions are rate-limited. Uploaded files receive generated storage names and are rejected when they appear empty, malformed, oversized, executable, HTML, XML, macro-enabled, encrypted, or inconsistent with their declared spreadsheet type. Taliqor reads stored worksheet values without executing workbook formulas or automation. CSV exports neutralize values that could become spreadsheet formulas.

Secure infrastructure

Taliqor uses established managed services for authentication, data storage, private files, and application delivery. These providers maintain independent security and compliance programs. Taliqor itself is not currently SOC 2 certified.

Shared responsibility

Customers should invite only trusted teammates, protect access to their email accounts, verify reconciliation conclusions, and avoid uploading information they are not authorized to process. No online system can guarantee absolute security.

Reporting a concern

If you believe you found a security issue, do not access or modify other users’ information. Report the issue by replying to an official Taliqor email or using the contact method provided inside your workspace, and include clear reproduction details.