We understand that we collect sensitive data. Because of this we go out of our way to protect your company and employees. We follow the same high standards for identity protection that academic papers follow.
- All data is stripped of identifying information and only reported in aggregate (meaning that no one at the company will be able to identify who gave which response based off of our services).
- All data that we store is kept in strongly firewalled, offline, encrypted, and unconnected drives. The means that the only possible points a breach can occur is in collection (kept safe by using Google Forms) and reporting (kept safe via end-to-end encryption provided by Proton).
- All data is cleaned of identifying information as soon collection ends, and analyzed using hardware that never connects (and is physically unable to connect) to the internet.
We take these steps to retain your confidence in our services. If there is a data breach and it can be shown definitively to be our fault, we will work with you through arbitration to make it right.