Is Lattice Anonymous? What the Anonymous Setting Actually Does

✓What we say about Lattice here was last verified on 2026-10-21 against Lattice's help center documentation. The sections below explain what HR admins and managers can see on Lattice dashboards.

01How Lattice handles identity

Lattice presents a clean binary rather than a spectrum, which is genuinely helpful:

• Anonymous surveys. By default Lattice provides aggregate results only. Scores and comments are abstracted from the survey record so they cannot be traced back to an individual response or the person who submitted it. Participants see “Your answers are anonymous.”
• Identifiable surveys. Responses are visible to the admin and linked to the employee’s name and identity. Lattice lists onboarding and exit surveys as identifiable, which surprises people who assume every Lattice survey behaves the same way. Check which type you were sent.
• Anonymity thresholds. Reporting hides or rolls up results when a group is too small. The threshold runs from 3 to 10 and defaults to 5, and it can never be set below three respondents.
• Comments and open text. Free-text answers can re-identify people through writing style, specific incidents, or role-unique knowledge even when names are hidden. Thresholds help on quantitative slices; narrative risk remains a human judgment problem on every platform.

02The export setting that changes the promise

This is the part that does not appear in the marketing copy, and it is documented plainly enough in the help centre that it deserves to be better known.

Admins can enable export of all individual responses. This option exists for engagement surveys only; pulse survey responses can't be exported this way. Names, emails, and other directly identifying details stay hidden in that export. But the export can still include fields such as manager and department. On a team of six, a manager plus a department plus a free-text comment is frequently enough to work out who wrote it, even with the name stripped.

When that export is enabled, the participant-facing label changes. Instead of telling people their answers are anonymous, Lattice tells them their privacy is protected. That wording is Lattice's notice that export is on, and it's easy to miss if you've seen the anonymous version before. Read the intro screen rather than relying on what the launch email said.

One more asymmetry worth knowing. The Lattice anonymity threshold can be edited while a survey is live, or even after it has closed. Some peer platforms lock the threshold at launch precisely so it cannot be lowered once results start looking interesting. Lattice does not.

A short contrast: policy thresholds versus no recoverable person-answer link.

03When Lattice is genuinely anonymous

If your organization runs a standard anonymous survey, has not enabled individual-response export, and keeps the threshold at or above the default, treat it as a well-designed anonymous program with the usual caveats about timestamps, tiny populations, and identifying questions. That is a real guarantee and worth engaging with honestly.

Treat it as identifiable if any of these apply:

• You were sent an onboarding or exit survey.
• The intro screen says your privacy is protected rather than that your answers are anonymous.
• Your admin confirms individual-response export is on.

Anonymous-by-configuration is not “fake anonymity.” It is a different contract from anonymous-by-architecture, where the link cannot be reconstructed because it was never stored. Calibrate candor to the contract you actually have. For the vocabulary, start with Is your employee survey actually anonymous? and confidential vs anonymous.

04How to check

Ask the people who launched the survey three concrete questions:

1. Is this survey configured as anonymous or identifiable in Lattice?
2. Is individual-response export enabled, and does the export include manager or department fields?
3. What is the anonymity threshold set to, and can it be changed while the survey is running?

If leadership cannot answer those clearly, assume the stronger identity model until proven otherwise. As a respondent, also watch the intro screen wording, since that is the one signal Lattice updates automatically when the configuration changes.

05What architectural anonymity requires

Lattice’s anonymous mode hides identity from viewers and abstracts responses from the survey record. Architectural anonymity is a stricter requirement: the link does not exist to be revealed by a setting change. That means responses encrypted in the respondent’s browser, server storage of ciphertext only, and nothing that ties an answer to the person who gave it. No configuration toggle can turn it back on, because there is nothing to turn on.

That is the model behind InviziPoll, so weigh our view accordingly. Lattice can be the right tool when you need engagement analytics alongside performance and goals, and its anonymous mode is a real feature rather than a marketing word. Choose ciphertext-only polling when the promise you need is that no answer can be traced to its author by design, whatever an admin later clicks. Our anonymous employee survey page shows what that looks like for a team. Next step: start a free trial, or read the guarantees on /trust/anonymity.

For how Lattice sits against the rest of the market, see employee engagement survey tools compared by what each vendor can read. For anonymity, pricing and fit side by side, see InviziPoll vs Lattice.

Running the survey yourself? Paste it in and see which questions could identify the people answering. Nothing you paste leaves your browser.

FAQQuestions people ask