Tally

Belgium · tally.so · 11 vendors

Tally is a free online form builder that enables users to create forms and surveys with the simplicity of a document, requiring no coding. It provides unlimited forms and submissions, along with advanced features such as payment collection and form logic. The company is bootstrapped and operates from Belgium.

Resilience scores

Disruption prediction

Tally has an estimated 11% probability of disruption in the next 6 months.

7 of Tally's 11 vendors monitored for disruptions.

Technology vendors

Services catalogue

4 services in catalogue across 2 categories; runs on 11 sub-vendors.

Insights

Last updated 2026-07-30 · revision 6

11 direct vendors, 202 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Tally demonstrates high migration readiness, primarily driven by its modern and cloud-native technology stack. Built on Google Cloud Platform and leveraging various SaaS solutions, the architecture inherently supports easier migration compared to legacy or on-premise systems. The availability of a REST API, MCP Server, and Webhooks indicates a modular design with good interoperability, facilitating data export and integration with new platforms. Strong financial growth (to $5M in 2026) provides the necessary resources to fund a complex migration project. The use of 14 distinct vendors/services suggests a diversified vendor landscape, which generally reduces vendor lock-in and offers flexibility to switch components. However, several factors introduce complexity. Data residency requirements are a significant constraint; primary form data must remain in the EU (Belgium), and any migration must ensure continued GDPR compliance for both primary data and subprocessors (US, UK, Canada). The current gaps in enterprise certifications (SOC2, ISO 27001) and ongoing assessment for NIS2 and EU AI Act mean that a migration project would need to simultaneously address these compliance requirements, adding complexity and cost. The presence of a vendor with HQ and ownership in Russia, as indicated in the 'Vendor Relationships' data, could pose a substantial challenge for migrating services or data associated with that vendor due to potential geopolitical restrictions, data export limitations, or service discontinuity. While the number of vendors is diverse, the specific geographic concentration (including Russia) adds complexity to vendor management during a migration.

Compliance

7 in-scope frameworks identified; showing 3.

ePrivacy Directive — Compliant

Tally explicitly states it does not use cookie tracking on forms, uses Plausible (a privacy-friendly, cookieless analytics tool) for website analytics, and has published a Cookie Policy. This demonstrates proactive ePrivacy compliance. The ePrivacy Directive (2002/58/EC) and its Belgian implementation require informed consent for non-essential cookies and electronic marketing. Tally's cookieless approach on forms and use of privacy-friendly analytics significantly reduces ePrivacy risk. Risk is Low given the demonstrated privacy-by-design approach.

Evidence: https://tally.so/help/cookie-policy, https://tally.so, https://tally.so/help/gdpr

NIS2 (source) — Assessment Required

Tally operates as a SaaS form builder and digital service provider based in Belgium (EU). NIS2 Directive (EU 2022/2555) includes 'digital providers' as Important Entities, specifically covering online marketplaces, online search engines, and cloud computing services. A form builder with API access, webhooks, and integrations could potentially qualify as a 'managed service provider' or 'digital infrastructure' provider under NIS2 depending on Belgian national transposition. The size threshold (50+ employees OR €10M+ annual turnover) is uncertain — Tally appears to be a small team (~10 employees visible) and bootstrapped, suggesting it may fall below the SME threshold. However, the company serves 500,000+ teams globally, which may imply significant revenue. Risk is Medium because: if thresholds are met, non-compliance with NIS2 registration and security obligations could result in fines up to €7M or 1.4% of global turnover for Important Entities; if below thresholds, NIS2 does not apply.

Evidence: https://tally.so/about, https://tally.so, https://ccb.belgium.be/en/cybersecurity/nis2

EU AI Act (source) — Assessment Required

Tally uses AI features (OpenAI for abuse detection, xAI as an opt-in AI assistant per the subprocessor list, and an 'AI info' page on the website). The EU AI Act (Regulation 2024/1689) entered into force in August 2024 with phased applicability. As an EU-based company deploying AI systems, Tally must assess whether its AI use cases fall under prohibited, high-risk, or limited-risk categories. Abuse detection and AI-assisted form creation are likely 'limited risk' or 'minimal risk' AI systems requiring transparency obligations (e.g., informing users when interacting with AI). Risk is Medium because: (1) Non-compliance with transparency obligations could result in fines; (2) The AI Act's full applicability timeline means obligations are phasing in through 2026-2027; (3) Tally's AI use appears limited and low-risk, reducing the likelihood of high-risk classification.

Evidence: https://tally.so/help/gdpr, https://tally.so/ai-info, https://tally.so

Financials

Three-year financials

Financial Resilience Score: 8/10

Tally demonstrates exceptional financial resilience for a small bootstrapped SaaS company. The company has grown from $60K ARR to $5M ARR in approximately 4.5 years (~140x growth) without any external capital, indicating strong product-market fit and disciplined operations. Founders have publicly stated the company is profitable and customer-funded, with no debt or investor pressure. The operating leverage is remarkable: ~$5M ARR with only 11 employees implies revenue per FTE of approximately $450K, which is exceptional for SaaS and suggests very high gross margins. The freemium funnel has scaled efficiently from 11K users in 2021 to 500K+ teams by 2026, providing a robust conversion pipeline without requiring a sales team. However, resilience is constrained by the absence of an external capital buffer to weather a downturn or fund counter-cyclical investment, concentration in a single product (form builder) in a competitive market (Typeform, Jotform, Google Forms, Microsoft Forms), and key-person risk given the small team. FX exposure (USD revenue, EUR cost base) adds some margin sensitivity. Statutory financials are not publicly verified, limiting external visibility.

Key strengths: Fully bootstrapped and profitable, customer-funded growth, Exceptional revenue per FTE (~$450K) indicating high margins, Consistent compound growth (~50-100% YoY) over 5+ years, Large freemium funnel (500K+ teams) feeding conversion, Product-led growth with marquee customers (Notion, Rakuten, Glovo, Make), EU data residency / GDPR positioning as differentiator, No debt, no dilution, no investor pressure

Risk factors: Intense competition from Typeform, Jotform, Google Forms, Microsoft Forms, and AI form builders, Small team / key-person risk (only 11 employees), No external capital buffer for downturns or counter-cyclical investment, Single-product concentration (form builder only), FX exposure: USD revenue vs EUR cost base, Freemium economics depend on continued power-user conversion, Limited financial transparency as small Belgian BV

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report