Write feedback that can't be traced back
The tool is half the risk. The other half is what you type. A short guide to answering honestly without handing over your name.
Most workplace surveys say anonymous and mean confidential. The difference is whether anyone can look, not whether they promise not to. Eight questions you can answer from the invitation alone, and a note to send HR if you can't.
Your answers stay in this tab. We don't record them, and the page sends nothing about them anywhere.
Answer any of the questions above and the verdict appears here. Nothing you pick leaves this page.
Ask before you answer
Written answers from HR beat any guess you can make from the invitation. This note asks for exactly that, without naming any tool. Send it as is or edit it first.
Hi, Before I fill in the survey, could you confirm three things in writing? 1. Can anyone at the company or the vendor see which person submitted which response? A unique link or a login usually means yes. 2. What is the minimum number of responses before a result is shown, including when results are filtered by team, location, or manager? 3. Who can read the free-text answers one at a time, rather than as a summary? I'd rather know than guess. Thanks.
Next
The tool is half the risk. The other half is what you type. A short guide to answering honestly without handing over your name.
Three questions HR can answer in a minute if the survey is what it says it is. The note above is ready to send.
Encrypted in your browser, stored as ciphertext, results withheld below a stated group size. The architecture, in plain language.
Often, yes. Most survey tools send each person a unique link or ask for a login, and store the answer next to that identity. A few swap that link for an anonymous ballot in your browser so the link proves you were invited but cannot be matched to your answer; a tool that does this should say so on the page. The word anonymous on the invitation is a promise not to look, not a guarantee that nobody can. Reminder emails sent only to people who have not responded are the clearest sign the tool knows who has answered.
Only if you write them carefully. Free text identifies people by its content: a meeting only you attended, a phrase you use, a date that fits one person. A survey can be technically anonymous and still give you away through what you typed. Our stay-anonymous guide covers what to leave out.
Three things, in writing: whether anyone at the company or the vendor can see which person submitted which response; the minimum number of responses before a result is shown, including when results are filtered by team or manager; and who can read free-text answers one at a time. The checker on this page has a ready-made note you can send.
No. The answers stay in your browser tab and are gone when you close it. The page uses cookieless page-view counting like the rest of the site, and nothing you pick is sent with it.
Responses are encrypted in your browser before they leave it, the server stores only ciphertext, results are only shown once a minimum number of people have answered, that minimum is stated before you start, and reminders go to everyone because the tool has no list of who has answered. A personal link is fine only when it is traded for a ballot the server signs blind, so it can never be matched to an answer. That is how InviziPoll is built, and it is also a fair standard to hold any tool to.
Send them the checker. If they'd rather see the tool that was built to pass it, InviziPoll encrypts every answer in your browser and never stores a readable one.