Every poll response is encrypted in the respondent's browser: our servers only ever store ciphertext. When people trust the anonymity, they can stop being careful. You get the truth, in aggregate.
Plans from $49/mo. See pricing
Illustration: a crowd of anonymous respondents; one answer is encrypted in the browser and joins an aggregate result. No individual is identifiable.
proof, not promises: verify it yourself
Why InviziPoll
Engagement pulses, 360s, exit surveys, board polls: the questions that matter most are the ones people won't answer if they think someone is listening.
Responses are encrypted on the respondent's device before they're sent. Not logged, not fingerprinted, not visible to us, even if we wanted to look. When your team sees "we literally cannot read this," the feedback stops being careful.
respondents see: a clean link: no login, no cookies, no tracker
Set a minimum cohort size ("hide anything under 5 responses") and InviziPoll suppresses results automatically, including when filters would expose a single person. No nervous manager ever has to do this math in their head.
k-anonymity built in (hard floor of 3, always enforced)
Built on post-quantum cryptography, the same class of algorithms NIST standardized to resist quantum computers. Responses captured today stay private decades from now, which matters when the questions are about people.
algorithms: ML-KEM-768 + ML-DSA-65
How it works
The path a single response takes from keystroke to aggregate chart, and why we can't peek along the way.
Respondent opens a signed link. Selections live only in local memory: no login, no cookies.
The browser fetches the workspace public key and wraps the response with ML-KEM-768.
Our servers receive an opaque blob and a blind signature. No IP, no fingerprint, no session.
You pull the encrypted set to your browser, decrypt locally, and see aggregate charts only.
full architecture & threat model → /security · end-to-end encrypted survey
Where it matters
Response quality depends on respondents believing (correctly) that answers can't be traced back.
Monthly temperature checks managers can't personally audit.
Why anonymityPeople score carefully when they think someone is watching.
Peer and manager reviews protected by cohort-size guardrails.
Why anonymityNobody critiques their boss on the record.
Honest departure feedback with no HRIS trail linking rows to names.
Why anonymityReferences outlive the exit form.
Close-quarters decisions where attribution chills candor.
Why anonymitySmall rooms have long memories.
Pricing: published, in USD
Three tiers and a consultants licence, quoted on one page. Annual billing saves ~20%.
For teams that need professional anonymous feedback.
For organizations scaling a culture of feedback.
For compliance-heavy orgs with procurement requirements.
Running surveys for client companies? There's a licence for that, with five client workspaces included. See the consultants licence.
full comparison, limits & annual pricing → /pricing
Questions
FAQ answers also link to anonymity, encryption docs, and pricing.
Create your workspace in under two minutes. No credit card. We don't track respondents: ballots stay cookieless and unlinked.
