Is Lattice Anonymous? What the Anonymous Setting Actually Does

Short answer: Lattice does offer an anonymous survey mode, and its own help documentation uses that word rather than “confidential.” Surveys are either anonymous or identifiable, and in anonymous mode participants see a label telling them their answers are anonymous. That is a stronger starting position than several peer platforms. The detail worth knowing before you calibrate candor is what happens when an admin turns on individual-response export, because the promise quietly changes shape at that point.

How Lattice handles identity

Lattice presents a clean binary rather than a spectrum, which is genuinely helpful:

• Anonymous surveys. By default Lattice provides aggregate results only. Scores and comments are abstracted from the survey record so they cannot be traced back to an individual response or the person who submitted it. Participants see “Your answers are anonymous.”
• Identifiable surveys. Responses are visible to the admin and linked to the employee’s name and identity. Onboarding and exit surveys are identifiable by default, which surprises people who assume every Lattice survey behaves the same way. Check which type you were sent.
• Anonymity thresholds. Reporting hides or rolls up results when a group is too small. The threshold runs from 3 to 10 and defaults to 5, and it can never be set below three respondents.
• Comments and open text. Free-text answers can re-identify people through writing style, specific incidents, or role-unique knowledge even when names are hidden. Thresholds help on quantitative slices; narrative risk remains a human judgment problem on every platform.

The export setting that changes the promise

This is the part that does not appear in the marketing copy, and it is documented plainly enough in the help centre that it deserves to be better known.

Admins can enable export of all individual responses. Names, emails, and other directly identifying details stay hidden in that export. But the export can still include fields such as manager and department. On a team of six, a manager plus a department plus a free-text comment is frequently enough to work out who wrote it, even with the name stripped.

When that export is enabled, the participant-facing label changes. Instead of telling people their answers are anonymous, Lattice tells them their privacy is protected. Those are two different promises, and the swap is not announced to respondents in any prominent way. If you are a respondent, the wording on the survey intro screen is your signal: read it rather than relying on what the launch email said.

One more asymmetry worth knowing. The Lattice anonymity threshold can be edited while a survey is live, or even after it has closed. Some peer platforms lock the threshold at launch precisely so it cannot be lowered once results start looking interesting. Lattice does not.

When Lattice is genuinely anonymous

If your organization runs a standard anonymous survey, has not enabled individual-response export, and keeps the threshold at or above the default, treat it as a well-designed anonymous program with the usual caveats about timestamps, tiny populations, and identifying questions. That is a real guarantee and worth engaging with honestly.

Treat it as identifiable if any of these apply:

• You were sent an onboarding or exit survey.
• The intro screen says your privacy is protected rather than that your answers are anonymous.
• Your admin confirms individual-response export is on.

Anonymous-by-configuration is not “fake anonymity.” It is a different contract from anonymous-by-architecture, where the link cannot be reconstructed because it was never stored. Calibrate candor to the contract you actually have. For the vocabulary, start with Is your employee survey actually anonymous? and confidential vs anonymous.

How to check

Ask the people who launched the survey three concrete questions:

1. Is this survey configured as anonymous or identifiable in Lattice?
2. Is individual-response export enabled, and does the export include manager or department fields?
3. What is the anonymity threshold set to, and can it be changed while the survey is running?

If leadership cannot answer those clearly, assume the stronger identity model until proven otherwise. As a respondent, also watch the intro screen wording, since that is the one signal Lattice updates automatically when the configuration changes.

What architectural anonymity requires

Lattice’s anonymous mode hides identity from viewers and abstracts responses from the survey record. Architectural anonymity is a stricter requirement: the link does not exist to be revealed by a setting change. That means responses encrypted in the respondent’s browser, server storage of ciphertext only, and admin surfaces that never receive plaintext individual answers. No configuration toggle can turn it back on, because there is nothing to turn on.

That is the model behind InviziPoll, and I am the founder, so weigh that accordingly. Lattice can be the right tool when you need engagement analytics alongside performance and goals, and its anonymous mode is a real feature rather than a marketing word. Choose ciphertext-only polling when the promise you need is that individual answers are unreadable by design, whatever an admin later clicks. Next step: start a free trial, or read the guarantees on /trust/anonymity.

For how Lattice sits against the rest of the market, see employee engagement survey tools compared by what each vendor can read. InviziPoll does not publish a dedicated Lattice compare hub; for a peer engagement-suite framing, see the Culture Amp comparison.

FAQ

Is Lattice anonymous or confidential? Lattice’s own documentation says anonymous, and offers anonymous and identifiable as the two survey types. That is different from platforms like Culture Amp and Workday Peakon, which describe their surveys as confidential. The caveat is what individual-response export still carries.

Can my manager see my individual Lattice answers? Not in a standard anonymous survey, where only aggregate results are available. If individual-response export is enabled, admins can export rows that hide your name but may retain manager and department, which narrows the field considerably on a small team.

What is the Lattice anonymity threshold? It runs from 3 to 10 and defaults to 5. It can never go below three. Unlike some peer platforms it can be edited while a survey is live or after it closes, so ask what it is set to now rather than what it was at launch.

Are Lattice onboarding and exit surveys anonymous? No. Those are identifiable by default, and responses are linked to your name. Do not assume the anonymity of an engagement survey carries over to them.

Does Lattice encrypt individual survey answers so even admins cannot read them? No. Anonymity in Lattice is a configuration and reporting property, not ciphertext-only storage. For that model see /trust/anonymity.

How does this compare to other engagement platforms? See employee engagement survey tools, which ranks 14 platforms by what each vendor can technically read on the respondent path.