Security and anonymity

How Pulsory protects your team's answers

Your team will only be honest if it's genuinely safe to be. Here's exactly how anonymity works, who can see what, and where the data lives.

Stored in the UK on Google Cloud in London Encrypted in transit and at rest Five responses before anything is shown Never sold or shared

Anonymity

Built in, not promised.

Who someone is and what they said are kept apart from the start. It isn't “we promise not to look”. There's nothing there to look at.

Who they are

Your employee list

Name Email

Used to send each person their own private survey link.

What they said

Their answers

No name No email

Stored with nothing that could ever point back to a person.

What you see

Grouped insights

Minimum 5 responses per group

Always combined, never individual, so no one can be singled out.

  • Answers never carry a name. Whether someone uses their private link or scans a QR code at the site, what comes back has nothing that identifies them.
  • Even I can't see who said what. Nothing stored would let me.

The five-response rule

Nothing is shown until at least five people have answered.

Where a group is too small, you see a padlock instead of a number, never a rounded or estimated figure. Here's how it plays out for one example site.

Front of house7 responses
Shown on its own
Kitchen4 responses
Hidden: fewer than five
Bar and Office3 + 3 responses
Too small alone, so combined into one line of 6
Example only. The same rule applies to the whole company, every site, every department, and any breakdown by age, gender or length of service.
A Pulsory location dashboard for a four-person site, with the People Score, cluster scores and pay gap all locked and hidden because there are fewer than five responses.
What you actually see for a group that's too small. Not a rounded number or a rough guide. Nothing at all.

Who can see what

The right view for each person, and nothing more.

Owners and admins

  • Grouped results for the whole business
  • Every site and department with five or more responses
  • Any individual's answers
  • Any group under five

Managers

  • Grouped results for their own people
  • The same five-response rule
  • Their own scores, which only the people above them see
  • Any individual's answers

Employees

  • Their own survey
  • What changed because of the last one
  • Anyone else's answers

Pulsory

  • What's needed to run the service
  • Who said what

Personal details are optional

Questions about age, ethnicity, disability and gender all start on “prefer not to say”. Skipping them changes nothing, and they're only ever shown as part of a group of five or more.

Where your data lives

Kept in the UK, encrypted all the way.

Who processes data for us

London, UK Google Cloud (Firebase) Running the app, the database and sign-in
Ireland, EU Resend Sending survey invitations and reminders
London, UK Kualo Hosting this website and its forms
Google Google Analytics Counting visits to this website, only if you accept cookies. Never used in the app.

Your data, your control

Yours to take, yours to delete.

For the employee details you add, your business is the data controller and Pulsory processes them on your behalf. A data processing agreement is available on request.

📥

Export any time

Download your data from Settings whenever you want.

🗑️

Deleted on request

Ask for your account and data to be deleted, and it will be.

🚫

Never sold or shared

Your data is never sold, never shared and never used for advertising.

Questions

About anonymity and your data

Can an employer see how one person answered?
No. Answers are stored with nothing that identifies the person who gave them, and results are only ever shown for groups of five or more responses.
What happens if a team has fewer than five people?
Its results are hidden, and you see a padlock instead. Where two or more small departments come up short, they're combined into a single line, but only if together they reach five.
Can managers see their own results?
No. Managers never see their own scores. Only the people above them in the chain do, with exactly the same protections.
Where is the data stored?
In the UK, on Google Cloud in London. It's encrypted in transit and at rest. Survey emails are sent through Resend, from Ireland in the EU.
Is a data processing agreement available?
Yes, on request. For the employee details you add, your business is the data controller and Pulsory is the processor.

Got a question this page doesn't answer? and it comes straight to me. You can also read the privacy and cookie policy and the terms.

See it for yourself

Join the waitlist and the brochure lands in your inbox a few minutes later.