Privacy

Anonymous by architecture, not by promise

People tell the truth about a culture only when telling the truth is safe. These are the rules this platform is built on.

1. 01

   Identity and answers are stored separately

   Invitation tracking lives apart from responses. Once a token is validated, an unrelated opaque respondent key is created and the invitation is never linked back to the submitted answers.

2. 02

   No identifiers are attached to a response

   A response never stores a name, email address, account ID, invitation ID, IP address, device fingerprint or any other direct identifier.

3. 03

   Results unlock at five responses

   Aggregate results stay locked until at least 5 people have completed the assessment, so small groups cannot be reverse-engineered.

4. 04

   No individual view exists — anywhere

   There is no leader or facilitator screen, export or endpoint that can display an individual response, score or identifiable comment. It is not restricted; it is not built.

5. 05

   Participants never see scores

   Participants receive a neutral thank-you only. Their own results are never displayed to them or to anyone else.

6. 06

   Sensitive actions are audited, answers are not

   Campaign creation, aggregate report viewing and plan activation are recorded in an audit trail. Answer content is never written to that trail.

7. 07

   Tenant isolation and least privilege

   Every organization's data is isolated at the database level. Facilitators reach only assigned organizations and only aggregate results. Service keys never appear in client code.

Personal Cycle Breaker Score™ results belong to the individual who completes them and are never shown to an employer.