Every poll response is encrypted in the respondent's browser: our servers only ever store ciphertext. When people can verify the anonymity, they stop being careful. You get the truth, in aggregate.
Illustration of encryption flow: a respondent answer becomes ciphertext stored on our servers, then decrypts in the admin browser to aggregate charts only.
proof, not promises: verify it yourself
Why InviziPoll
Engagement pulses, 360s, exit surveys, board polls: the questions that matter most are the ones people won't answer if they think someone is listening.
Responses are encrypted on the respondent's device before they're sent. Not logged, not fingerprinted, not visible to us, even if we wanted to look. When your team sees "we literally cannot read this," the feedback stops being careful.
respondents see: a clean link: no login, no cookies, no tracker
Set a minimum cohort size ("hide anything under 5 responses") and InviziPoll suppresses results automatically, including when filters would expose a single person. No nervous manager ever has to do this math in their head.
k-anonymity built in (hard floor of 3, always enforced)
Built on post-quantum cryptography, the same class of algorithms NIST standardized to resist quantum computers. Responses captured today stay private decades from now, which matters when the questions are about people.
algorithms: ML-KEM-768 + ML-DSA-65
How it works
The path a single response takes from keystroke to aggregate chart, and why we can't peek along the way.
Respondent opens a signed link. Selections live only in local memory: no login, no cookies.
The browser fetches the workspace public key and wraps the response with ML-KEM-768.
Our servers receive an opaque blob and a blind signature. No IP, no fingerprint, no session.
You pull the encrypted set to your browser, decrypt locally, and see aggregate charts only.
full architecture & threat model → /security
Where it matters
Response quality depends on respondents believing (correctly) that answers can't be traced back.
Monthly temperature checks managers can't personally audit.
Why anonymity People score carefully when they think someone is watching.
Peer and manager reviews protected by cohort-size guardrails.
Why anonymity Nobody critiques their boss on the record.
Honest departure feedback with no HRIS trail linking rows to names.
Why anonymity References outlive the exit form.
Close-quarters decisions where attribution chills candor.
Why anonymity Small rooms have long memories.
Pricing: published, in USD
Three tiers, quoted on one page. Annual billing saves ~20%.
For teams that need professional anonymous feedback.
For organizations scaling a culture of feedback.
For compliance-heavy orgs with procurement requirements.
full comparison, limits & annual pricing → /pricing
Questions
FAQ answers also link to anonymity, encryption docs, and pricing.
Create your workspace in under two minutes. No credit card. We don't track respondents: ballots stay cookieless and unlinked.
