Schweizerform vs Tally
Tally is loved for its clean, free-tier-generous experience. But the form data still flows in plain text to a third-party server. See how Schweizerform's zero-knowledge encryption, Swiss hosting, and four-language native support compare for teams that handle sensitive submissions.

Tally has built a sizeable following by doing one thing well: keeping form-building simple, the editor minimalist, and the free tier surprisingly generous. For teams that build a couple of internal forms and never look at them again, Tally is fine. But the moment a form starts collecting data that someone would mind being read by a third party, the question becomes: who exactly can read these submissions, and where are they stored?
Schweizerform was built for that question. Every submission is encrypted in the respondent's browser before it leaves the device. We physically cannot read the contents of forms our customers receive. Hosting is in Switzerland, the four UI languages (EN / DE / FR / IT) are native and not machine-translated, and the entire pricing structure runs on a single principle: encryption is not a paid upgrade. This page is a direct comparison.
Who this comparison is for
Founders, ops leads, and DPOs choosing between Tally and an encrypted alternative — particularly Swiss and EU teams that handle customer, employee, healthcare, legal, or research data, and want to know where the trade-offs actually sit.
Where Tally Genuinely Wins
We will start where Tally is strong, because honest comparisons should. There are real reasons people choose Tally:
- An almost unlimited free tier — unlimited forms, unlimited responses, very few feature locks
- A clean, fast, Notion-like editor that makes form-building feel light
- Conditional logic and calculations available without a paid plan
- An active community and integrations into Notion, Airtable, Slack, Zapier, and similar tools
- Sensible defaults and good design out of the box
If your forms collect feedback, RSVPs, or low-stakes survey data, and you have no specific Swiss or EU compliance requirements, Tally is a very reasonable pick. The question this comparison answers is: what changes when the data starts to matter?
The One Thing Tally Does Not Do
Tally encrypts data in transit (HTTPS) and at rest on disk — exactly like every modern SaaS. Tally does not encrypt form data in such a way that Tally itself cannot read it. Every submission lands on Tally's servers as plain text inside their database. Tally staff with the right access, Tally's infrastructure providers, anyone who compromises Tally, and any authority that serves a lawful order on Tally can read those submissions.
For an event RSVP, that is a non-issue. For an HR survey, an applicant intake, a customer complaint, or a healthcare questionnaire, it is the whole story. "We use HTTPS and AES-256 at rest" is true and standard — and silent on the question buyers are increasingly asking: can the vendor read our data? With Tally, the technical answer is yes.
What "encryption" usually means at SaaS form vendors
TLS in transit + AES-256 at rest is the industry baseline. It protects the data on the wire and from disk theft. It does not protect the data from the vendor itself, the vendor's staff, the vendor's sub-processors, or any party that can compel the vendor. End-to-end / zero-knowledge encryption — what Schweizerform does — is the layer that closes those gaps.
Side-by-Side Feature Comparison
| Capability | Tally | Schweizerform |
|---|---|---|
| End-to-end / zero-knowledge encryption | No — vendor reads all submissions | Yes — every form, every plan, every submission |
| Encryption at rest | Yes (AES-256, vendor holds keys) | Yes — but ciphertext only; we hold no keys |
| Hosting jurisdiction | EU (Belgium); US sub-processors common | Switzerland — Swiss data centres, no US sub-processors for submission storage |
| Native UI languages | Primarily English; partial translations | Native EN / DE / FR / IT — first-class, not machine-translated |
| Pricing of encryption | Not available at any tier | Included on every plan, including free |
| File uploads | Yes; vendor can read uploaded files | Yes; encrypted client-side, vendor cannot read content or original filename |
| Conditional logic | Yes (free) | Yes |
| Calculations / scoring | Yes (free) | Yes |
| Webhooks / API | Yes | Yes (decryption client-side, then forward) |
| Stripe / payments | Yes | Yes |
| GDPR-aligned data processing | Yes (EU-hosted, DPA available) | Yes — plus Swiss adequacy and zero-knowledge architecture |
| nFADP-aligned (Swiss) | Possible via DPA | Native — Swiss-built, Swiss-hosted, Swiss law |
| Subpoena / lawful-access exposure | Plain text on vendor server — vendor can comply with disclosure | Ciphertext only on vendor server — disclosure produces unreadable data |
Pricing — How They Stack Up
Tally's free tier is one of the most generous in the category — that is, by design, the point. Schweizerform has a more conservative free tier (1 form, 25 submissions/month) but never charges extra for encryption, Swiss hosting, or four-language UI. The decision is not "which is cheaper for unlimited junk forms" — Tally wins that — it is "what does each platform optimise for".
| What you get | Tally (free) | Tally (paid) | Schweizerform (free) | Schweizerform (paid) |
|---|---|---|---|---|
| Form & response limits | Unlimited forms, unlimited responses | Unlimited | 1 form, 25 submissions/month | Higher tiers raise caps |
| Zero-knowledge encryption | Not offered | Not offered | Included | Included |
| Swiss hosting | No (EU) | No (EU) | Yes | Yes |
| Native EN / DE / FR / IT UI | Partial | Partial | Native | Native |
| File upload encryption | TLS + at rest only | TLS + at rest only | End-to-end | End-to-end |
| Cost target | Maximise free reach | Power users (~$29/month) | Anyone collecting sensitive data | Modest paid tiers |
If you have ten low-stakes feedback forms and want unlimited free responses, Tally's economics are unbeatable. If you have one form that collects something a regulator, an auditor, or a respondent would care about, the comparison shifts.
When Tally Is the Right Choice
- Public-facing surveys, polls, or RSVPs where every response is non-sensitive by design
- Internal team checks, ice-breakers, or async stand-ups
- Lead-magnets and waitlists, especially for English-speaking audiences
- Content-creator audience surveys where speed and a generous free tier matter most
- Anyone who explicitly does not need encryption beyond TLS, and is fine with EU hosting and US sub-processors
Tally is well-built and well-loved for a reason. We do not pretend otherwise. There is just a clear category of forms where the calculus is different.
When Schweizerform Is the Right Choice
- Healthcare, therapy, and clinical-trial intake — patient and participant data covered by professional secrecy or research ethics
- Legal intake, conflicts checks, document submission — privileged information that cannot leak to a vendor
- HR, whistleblower, and safeguarding channels — confidentiality of the reporter is the product
- Financial services, KYC, advisory onboarding — AML duties and high-stakes client trust
- Swiss and EU teams that need a clean answer to "where are submissions hosted and who can read them?"
- Anyone who plans to scale forms across regulated processes and wants the same tool from day one
These are not exotic categories — they are the bulk of forms most professional services organisations end up running. The cost of switching tools later is high; choosing one that already encrypts client-side avoids the migration.
Migration — What Moving from Tally to Schweizerform Looks Like
If you are already on Tally and considering a move, the path is short:
Export your existing Tally form structures
Tally allows JSON / CSV export of forms and responses. Existing responses you no longer need can be deleted at the source rather than migrated.
Recreate the form in Schweizerform
The free tier is enough to test a single form end-to-end. Most fields, conditional logic, and validations have direct equivalents.
Set up the Access Code and recovery key
This is the only meaningful step that does not exist in Tally. Two custodians, written procedure, recovery key stored separately. About 15 minutes for a small team.
Update embeds and links
Replace Tally form URLs with the Schweizerform equivalents in your website, emails, and intake flows.
Document the change in your processor register
Update your record of processing activities to reflect the new processor, the Swiss hosting, and the zero-knowledge architecture. For DPOs, this typically simplifies the analysis compared to EU-hosted vendors with US sub-processors.
Common Objections — and Realistic Answers
"Tally is EU-hosted, isn't that enough?"
EU hosting is a real and important property — better than US hosting for many GDPR analyses. It does not, however, mean the vendor cannot read submissions. EU-hosted plain-text data is still plain-text data. For sensitive forms, the question is not just "where does it sit" but "who can read it".
"We don't collect sensitive data anyway"
Sometimes true. More often, it is true at the time of the choice and false a year later, when the same form has been quietly extended to capture richer information. Picking an encrypted-by-default tool from the start avoids the awkward conversation that begins with "we always assumed nobody could read these".
"Encryption will hurt the respondent experience"
It does not, in measurable practice. Encryption happens in the browser during submission, in well under a second. Respondents see a clean form, fill it in, and submit. The Schweizerform UX is closer to Tally's than the technical difference suggests.
"What if we lose our Access Code?"
We support a recovery-key flow: a second key set up in advance and stored separately. Most teams treat the Access Code the way they treat any critical credential — formal procedure, multiple custodians, regular review. The trade-off is honest: zero-knowledge means we cannot recover what we cannot read; that property is what gives the guarantees.
The Bottom Line
Tally is a good product with a clear positioning: minimalist, generous, friction-light, and fine for low-stakes data collection. Schweizerform is a different product for a different audience: the same minimalism, but designed around a hard guarantee that the vendor cannot read submissions, plus Swiss hosting and four-language native UI.
If your forms genuinely never collect anything sensitive, Tally's free tier is hard to argue with. If your forms touch employee, customer, patient, or candidate data, the comparison stops being about features and starts being about which kind of platform belongs in front of those people.
Try Schweizerform on the free tier — Swiss hosting, zero-knowledge encryption, native EN / DE / FR / IT — and decide for yourself which side of the comparison fits your forms.
Disclaimer: This comparison is general information and marketing content, not legal or compliance advice. Capabilities of third-party products change over time; verify current specifications on each vendor's site before relying on them. Tally and other product names are trademarks of their respective owners.