Anonymity Protection

Maintaining participant anonymity is crucial to fostering an environment where employees feel comfortable sharing candid feedback. With Surveys, we aim to protect employee anonymity while enabling you to conduct in-depth analyses of your survey results and derive valuable insights.

Protection against Individual Response Identification

Individual Response Identification occurs when filtering results lead to the identification of an individual and their responses. To safeguard the anonymity of participants, we have defined a limit of 3 minimum responses in a group for its results to be accessible.

To understand Individual Response Identification better, consider the following example:

Deparment	Participation/ Responses	Results Visible
Tech	8	Yes
Product	7	Yes
Content	2	🔓No
Operations	5	Yes
Business	1	🔓No

Protection against Inferential Response Identification

Inferential Response Identification is a method of estimating the response of an individual or small group whose responses have been hidden, based on the surrounding scores of the other individuals or groups. To mitigate this risk, we offer extra safeguards that hide an additional group, which is usually the next smallest group and may exceed the reporting group's minimum.

To understand Inferential Response Identification better, consider the following example: the company's overall eNPS score is 55, the Tech team's eNPS is 60, and the Product team's score is hidden because they had fewer than 3 responses. However, despite the score being hidden, we can deduce that the score of the 1 individual in the Product team must have been quite low since the company's eNPS score is lower than the Tech team's score, and only 1 person is responsible for bringing it down.

Metrics	Company Overall eNPS	Tech eNPS	Product eNPS
Participation/ Responses	8	7	1
eNPS	53	60	🔓Locked

In fact, using a straightforward calculation, we could determine the exact response of the Product person by weighting all the scores and subtracting the larger groups from the total.

For instance, 7*60 = 420, and 8*53 = 424. Subtracting these scores results in 4, indicating that the Product person responded with a score of 4 on the eNPS question.

Our additional safeguards are in place to prevent the occurrence of Inferential Response Identification. Whenever a filter is applied to a group that is equal to or smaller than the minimum reporting size, our system will hide the response of the next smallest group, even if their participation exceeds the minimum reporting threshold. Here is an example:

Deparment	Participation/ Responses	Results Visible	Comments
Tech	8	Yes
Product	7	Yes
Operations	5	🔓No	This is the 2nd smallest group so this is also hidden to protect Content department scores
Content	2	🔓No	Scores not visbile due to less than 3 responses