<aside> 🚇 On this page: Information to help employees understand how their survey answers are kept anonymous

Related pages:

• Data security

</aside>

Overview

Orgnostic never shows who submitted any survey.

We also take extra care to hide any data that could be used to infer a respondent's identity indirectly.

The anonymity ensures that your answers can never be held against you.

<aside> 🐸 Jump to

</aside>

Anonymity in Orgnostic onboarding and exit surveys

The anonymity of onboarding and exit survey submissions is protected in two ways:

1. It’s impossible to see who submitted a survey response.
2. It’s impossible to tell when a particular survey was submitted.

Why we hide the timing of onboarding and exit survey submissions

We obfuscate the timing of survey submissions to prevent malicious actors from deducing the sender’s identity.

This is necessary because onboarding and exit surveys are sent to one employee at a time, according to a predictable schedule.

Hence, if the timing of a survey submission was discoverable, it would be easy to infer the sender’s identity. A bad actor would only need to match the timing of the survey submission with the timing of an employee’s arrival into (or departure from) the organization.

That’s why we have implemented additional protective measures.

How we hide the timing of onboarding and exit survey submissions

The mechanics of the holding buffer, a special measure designed to guard the anonymity of onboarding and exit survey submissions

To obfuscate the timing of onboarding and exit survey submissions, we implemented a holding buffer. This is an additional processing step whose function is twofold. It scrambles data from multiple survey submissions into one batch. And it prevents individual submissions from instantly appearing in the main data set.

Here’s how the holding buffer mechanism works, step by step:

1. When you, as an employee, submit a completed survey, our systems put the data from your answers in the holding buffer.