Is Quantum Workplace Anonymous? The Vendor Answers This One

✓What we say about Quantum Workplace here was last verified on 2026-10-27 against Quantum Workplace's own help library. The sources are listed at the end of this article.

01What Quantum Workplace says it does

Three statements from its help library, in the order that matters:

1. The link is tied to you. A confidential survey uses a unique link or passcode tied to your demographic information, while keeping your name private.

2. The vendor can trace it. Quantum Workplace states that it retains all survey data and therefore can trace survey responses back to you.

3. Your employer is the party held out. In its own words:

   Quantum Workplace does not divulge the identity of any survey participants to your organization.

Read as a whole: the identity link exists, Quantum Workplace holds it, and the protection is a commitment by the vendor not to pass it to your employer. That's a policy boundary sitting where a technical one would otherwise be, and Quantum Workplace doesn't pretend otherwise.

02The reporting threshold

Confidential surveys are created with a minimum response threshold that stops analytics from slicing results down to an individual. Admins must set the threshold for every confidential survey when they set it up, and it applies to slices and filters in the results. Quantum Workplace recommends 5 for engagement surveys and advises against going lower where trust is low, but the number is your company's choice.

A short contrast: policy thresholds versus no recoverable person-answer link.

03What an employee can check before answering

1. Notice the unique link. If your invite carried a personal link or a passcode, it's tied to your demographic record. That's documented behaviour, not a bug.
2. Ask what demographics are attached. The link is tied to demographic information, so the useful question is which fields: department, tenure, location, level, manager. The more fields, the smaller your effective group.
3. Ask what threshold your company set. Quantum Workplace recommends five for engagement surveys, but admins choose the number, and a person can sit inside several slices at once. See anonymity thresholds on small teams.
4. Ask about retention. Since the vendor states it retains data and can trace it, the real questions are how long, who at the vendor can access it, and what happens under legal process. On that last point see what happens when survey data is subpoenaed.
5. Treat free text as the exposed surface. Threshold rules govern analytics slices. They don't anonymise a distinctive account of an incident.

04When confidential is enough and when it falls short

For benchmarking and engagement measurement, this design is defensible and the disclosure is better than the norm. A third party administering the survey and withholding identity from your employer removes the most common fear, which is that HR opens a spreadsheet with names in it.

Where it stops being enough is when the risk you're worried about isn't your employer's curiosity but the existence of the record itself: a retained, traceable dataset that can be requested, subpoenaed, breached, or accessed by whoever holds the keys at the vendor. If you're being asked about misconduct, safety, or anything that could become evidence, "we won't tell your employer" is a promise, and promises are the thing that gets renegotiated when a lawyer sends a letter.

For the vocabulary, see confidential vs anonymous. For the general test, see how to tell if an employee survey is anonymous and is your employee survey actually anonymous?.

05What architectural anonymity looks like instead

Disclosure: we build InviziPoll, so weigh our view accordingly.

The distinction Quantum Workplace draws so clearly is exactly the one worth acting on. If the vendor can trace responses, then the protection depends on the vendor's conduct and on what a court can compel. The alternative removes the vendor from that position: responses encrypted in the respondent's browser, servers holding ciphertext only, so individual answers aren't readable by InviziPoll and there's no plaintext record to hand over.

Nothing shows until at least the poll's minimum group size has answered, which is five by default and never fewer than three. After the first results, answers are released in random groups of three to five while at least three answers stay held in reserve until the poll closes, so no one's answer can be picked out. Breakdowns by group wait until the poll closes and need at least five people, and written answers are shown word for word, shuffled and undated, with no timestamps. Where the poll allows it, anyone who'd rather not be read can send just the topics they pick instead.

It's a narrower product: Quantum Workplace brings a large benchmarking dataset, awards programmes, and a full engagement practice that InviziPoll doesn't have and isn't building. The nearest thing InviziPoll has is a public employee rating: a short fixed survey your team answers anonymously, published as a signed score with a badge for your careers site.

It's your own people's answers, not an award, built for the questions where the record itself is the risk. See the architecture on security, the standard on trust/anonymity, and comparisons on the alternatives hub.

Running the survey yourself? Paste it in and see which questions could identify the people answering. Nothing you paste leaves your browser.

FAQQuestions people ask