Anonymous by design. Secure by default.

Anonymity architecture

Anonymity is built into the architecture, not just the policy.

• Each employee gets a unique, anonymous token with no email address attached to their response
• No per-respondent submission timestamps are stored, only the date
• We can't trace a response back to an individual, even if we wanted to
• Results are only shown to an employer once a group has 5 or more responses

Encryption

Bank-level security, end to end:

• TLS 1.3 encryption in transit
• AES-256 encryption at rest
• Multi-tenant data isolation, so no chamber or employer can see another's data
• Daily encrypted backups
• 24/7 system monitoring

Data ownership & export

Your data is yours. Annual contracts run with 30 days' notice and no cancellation fees, and you can export all your data at any time: there's no lock-in.

GDPR posture

We're GDPR-ready, with:

• Data privacy controls built in
• Right to deletion
• Data portability
• Consent management
• SOC 2 aligned security controls

"SOC 2 aligned" describes our controls; we do not hold a SOC 2 certification.

Uptime

We target 99.5% monthly uptime, tracked on our public status page.

Questions?

See the full FAQ for more, or contact us directly with any security or compliance question.