Tally exists to answer one question during an emergency: who is on this site right now? Everything it collects serves that purpose or the safety record that follows from it. Last updated 26 July 2026.
When a construction company uses Tally, that company is responsible for the worker information in its system — it decides who signs in, who can see the records, and how long the company keeps using them. Tally Site Systems operates the software on that company's behalf and handles the information only to run the service, on their instructions. Workers with questions about their own information should ask the company running the site; we will help that company answer.
Tally does not track location. It records that someone signed in at a site — not where their phone is, then or afterwards. It is not a timesheet and is not used to calculate pay.
Only authorised staff of the company running the site, and only what their role permits. Access is enforced in the database itself rather than merely hidden in the interface, so a role that should not see a record cannot retrieve it. Confidential harassment and violence records are restricted to designated safety officers. Accounts can only be created using the company's own email domain.
We do not sell personal information, we do not share it with advertisers, and we do not use it to train anything.
Phone numbers and emergency contact details on sign-in records are automatically anonymised after two years by a job that runs weekly. Records of safety activity — orientations, inspections, incident investigations, muster events — are kept for as long as the company needs them, because they are the evidence an auditor, inspector or investigator asks for. A company can ask us to delete its data entirely; we will, and confirm when it is done.
Customers can export their own records at any time, without asking us: attendance and history to CSV, safety records to Excel, and signed documents to PDF with signatures intact.
Running Tally means using a small number of specialist providers: a managed database and authentication provider, a hosting and content-delivery network, a text-messaging provider for muster alerts and lone-worker check-ins, and an email provider for reports and notifications. These providers process information only to deliver those functions. We will name them in writing to any customer or prospective customer who asks — including as part of an IT or procurement questionnaire.
Each customer's records live in their own dedicated database, in a data-centre region chosen when that instance is created. New instances are created in a Canadian region by default. Some earlier instances run in a United States region; where that applies, the customer is told and the instance can be migrated on request.
Canadian privacy law permits personal information to be processed outside Canada provided it is protected comparably and the arrangement is disclosed — which is why this section exists rather than being left to a questionnaire. Information held by a provider in another country may be accessible to that country's authorities under its own laws. If your organisation requires Canadian data residency, say so before you sign and we will confirm in writing which region your instance runs in.
Traffic is encrypted in transit. Access is role-based and enforced at the database. Administrative access is limited to the operator of Tally Site Systems. No system is perfect; if a breach affecting personal information occurs, we will notify affected customers promptly so they can meet their own obligations.
Canadian privacy law gives individuals the right to know what personal information an organisation holds about them, to ask for it to be corrected, and to complain about how it is handled. Because the construction company is responsible for the information in its Tally system, those requests go to that company first. Reach us at hello@sitetally.ca and we will support them in responding.
If this policy changes materially, customers will be told directly rather than being expected to notice a new date on a web page.
Questions, or a privacy questionnaire to complete: hello@sitetally.ca.