Does AllVoices encrypt reports so AllVoices itself cannot read them?

AllVoices uses TLS 1.3 in transit and AES-256 encryption at rest in AWS, which is standard cloud encryption where the SaaS provider manages the keys so its application can process reports, deliver messages, and run platform features. By contrast, zero-knowledge browser encryption (used by InviziPoll) encrypts the payload in the respondent's browser using keys the vendor never holds.

How does anonymous two-way follow-up work without giving a phone number or email?

In InviziPoll, when an employee submits to a speak-up channel, their browser generates a random return code locally on their screen. They save that code and enter it later to read replies and respond back. Neither InviziPoll nor the employer ever collects an email address or phone number.

Can an anonymous AllVoices report be subpoenaed in litigation?

Any record held in readable or vendor-decryptable form by a SaaS provider is potentially subject to civil discovery or a court subpoena in litigation. See What happens when survey data is subpoenaed.

Is AllVoices Anonymous? How Two-Way Workplace Reporting and Pulse Surveys Work

AllVoices hides your name from HR on anonymous reports and pulses, but stores plaintext in its cloud and uses a phone or email relay for follow-up alerts.

InviziPoll team7 min readPublished Nov 8, 2026Verified Nov 8, 2026

Short answer

Anonymous to HR; vendor holds relay & data

AllVoices hides your identity from your employer when you submit an anonymous report or pulse survey, unless you choose to share your name. However, AllVoices is anonymous by vendor relay rather than zero-knowledge encryption: AllVoices' servers hold the encryption keys to readable reports, case managers at your company read your report text word for word, and two-way anonymous messaging typically relies on AllVoices keeping an encrypted phone number or email address to notify you when HR replies.

Employer sees your name: No (unless provided)
Two-way follow-up: Uses email/SMS relay
Server encryption: AES-256 at rest (vendor holds keys)
Verbatim report text: Read by case managers
Published IP-logging ban: Not stated on security page

For HR and team leads

Switch this survey to cryptographic anonymity in 30 seconds

Import the form you already have. Answers get sealed on each person's device from the first response.

Import your survey Try a sample ballot

Running the survey? Check it before you send it

For employees

Asked to take a AllVoices survey?

Check this AllVoices survey in eight questions

Whatever the tool, your comments are the easiest way to be recognized. Leave out projects, dates and anything only you would know.

Wish it worked like this? Tell us where you work. We'll reach out to whoever runs it, and they'll never know who asked.

Or send HR a note yourself. It'll come from you, so only if that feels safe.

✓What we say about AllVoices here was last verified on 2026-11-08 against AllVoices' public product, FAQ, and security pages. The sources are listed at the end of this article.

If an "anonymous" reporting tool texts your phone or emails you when HR replies, the vendor is holding your phone number or email address somewhere in its stack.

01How AllVoices works for employees vs. case managers

AllVoices is an employee relations, whistleblower hotline, and pulse-survey platform. When an employee submits a report or answers an AllVoices pulse:

What your employer sees: Your assigned HR or legal case manager sees the full text of your report, any uploaded attachments, the category/location tags you selected, and the timestamp when the report was submitted. They do not see your name, email address, or phone number unless you type them in.
How two-way anonymous follow-up works: To let HR ask follow-up questions ("Who else was in the room?"), AllVoices acts as a middleman relay. When you submit a report, AllVoices asks for a cell phone number or email address so its system can send you a link or code when the investigator replies—promising that AllVoices encrypts that contact info and never shares it with your employer.
Where the data lives: According to AllVoices' security documentation, data is encrypted in transit (TLS 1.3) and at rest (AES-256) on AWS. Because AllVoices manages those keys to display reports, run AI case tools, and send SMS/email notifications, AllVoices itself is a trusted intermediary holding the readable records.

02Four things to check before submitting an AllVoices report or pulse

Risk surface	How it behaves in AllVoices	How to protect yourself
1. Phone / email notification relay	Giving your personal phone number or email for follow-up alerts means AllVoices' infrastructure holds a link between your contact info and the report thread.	If you don't want any third party holding your phone number or email, check whether you can bookmark the follow-up credentials directly without providing contact details—or use a tool with a browser-generated return code.
2. Self-identifying prose & attachments	Case managers at your company read your report word for word and open your uploaded screenshots or PDFs.	Strip EXIF/author metadata from any files before uploading, and avoid phrasing or incident dates that only one person could know.
3. Exact submission timestamps	Case intake logs record when a report arrived.	Don't submit from a shared meeting room or thirty seconds after walking out of a heated 1 .
4. IP and device metadata	On the public AllVoices security page checked on 2026-11-08, AllVoices describes AES-256 encryption at rest and TLS 1.3 in transit without publishing a specific statement on whether reporter IP addresses or device metadata are logged at the CDN/application layer.	If you are concerned about corporate network or VPN correlation, submit from a personal device on a non-work connection.

For a 10-question audit you can send to any hotline or speak-up vendor, see Is your anonymous hotline actually anonymous? and Compliance hotline vendors compared.

Two-way anonymous follow-up using a browser-generated return code—with no phone number, no email address, and no server-readable text.

03AllVoices vs. InviziPoll: Case management vs. zero-knowledge anonymity

AllVoices and InviziPoll solve overlapping but distinct problems, and it helps to be clear about which one you need:

When to buy AllVoices: AllVoices is a full employee-relations and case-management platform. If your HR and legal team needs investigation checklists, witness interview logs, disciplinary action tracking, HRIS case history, and a managed hotline workflow, AllVoices is built for that job and InviziPoll is not.
When to use InviziPoll: InviziPoll is built for the part of workplace listening where neither the employer nor the vendor should be able to read individual ballots on a server or hold a reporter's contact details:
- End-to-end browser encryption: Every response is encrypted in the respondent's browser (X25519 + ML-KEM-768) before upload; our servers store ciphertext only (id, poll_id, encrypted_blob).
- Two-way anonymous replies with zero email or phone number: On an InviziPoll Speak-Up Channel, the reporter's browser generates a cryptographic return code locally on their device. They use that code to come back, read your replies, check case status, and write back—without ever giving InviziPoll or their employer a phone number, email address, or login.
- First-batch protection + reserve pool: Even on a speak-up channel, the very first report waits until the channel's minimum group threshold (3 reports on the speak-up preset) is met so the first person to test the inbox never sits alone; on standard pulse and engagement polls, results require at least max(3, k) + 3 responses (8 on a default poll) and release in randomized batches of 3 to 5 with a 3-response reserve pool.
- No timestamps and no stored IPs: Responses have no created_at column, and no IP address is stored with a response (rate limiting keeps only a one-day keyed hash).

Also worth a look: What happens when survey data is subpoenaed, EU Whistleblowing Directive and anonymous inboxes, and Your work survey isn't anonymous: what to do without outing yourself.

Running a pulse survey yourself? Paste it in and see which questions could identify the people answering. Nothing you paste leaves your browser.

FAQQuestions people ask

AllVoices states that when you submit an anonymous report and provide a phone number or email address to receive follow-up notifications, that contact information is encrypted by AllVoices and is never shared with your employer. However, providing it means AllVoices' own servers hold that contact relay.

Sources

AllVoices Security Overviewallvoices.co ↗AES-256 encryption at rest, TLS 1.3 in transit, AWS hosting, SOC 2 compliance; no published statement on IP address retention on the page checked AllVoices Anonymous Employee Reporting Platformallvoices.co ↗two-way anonymous communication relay via SMS/email notifications without sharing reporter contact info with the employer, case management workflow, and pulse surveys

InviziPoll team
Published Nov 8, 2026 · 7 min read

How the anonymity works Start free trial

Keep reading

All articles →