Privacy, Security & Compliance
Keep identities off the record
Collect feedback without exposing people, and meet your security requirements.
Trusted by leaders and HR professionals at more than 60,000 companies
Make anonymity the default
Collect feedback without logging IP, device, or browser details. If you turn on Direct Anonymous Replies, you can request or require an email for follow ups; we store it encrypted and never show it to managers. Accept files safely, common metadata is removed on upload. Control access with passwords and allowed domains. Protect admin accounts with 2FA, and enable SSO, SAML, or LDAP on Enterprise. Choose regional data hosting when you need it.
How it works
Collect Submissions Anonymously
By default, response submissions don’t save IP, device, or browser details. Submitters don’t need an account and cookies aren’t required.
Follow Up Without Revealing Identities
Direct Anonymous Replies let you ask for an email to continue the conversation; the address is stored encrypted and not exposed to box owners or managers.
Control Access and Share Safely
Password‑protect your form and shared page, restrict to your company domain, and publish public replies that share outcomes — not identities.
Security & data controls
Metadata scrubbing
Uploaded attachments are scrubbed of common metadata (e.g., EXIF, author, creation date) before you view them. The content stays intact; potentially identifying data is removed.
Two‑factor authentication (2FA)
Available on all plans to protect admin and manager accounts.
SSO/SAML/LDAP
Enterprise SSO is available; talk to us to connect your identity provider.
Data hosting & residency
Choose where your data lives. Regional data hosting is available (EU, Canada, UK, US and more).
Why it works
Anonymity Builds Candor
People share more when responses don’t carry IPs or device fingerprints.
Follow‑Ups Without Exposure
Encrypted direct replies let you get details without revealing identities.
Controls Match Your Risk
Passwords, allowed domains, SSO, and 2FA give you the right level of guardrail.
Compliance notes
Collect feedback without revealing anyone's identity, resulting in safer & more honest answers.
- No IP/device/browser details are saved with responses.
- Submitters don’t need accounts or cookies to submit.
- Public replies share outcomes, not identities.
- Attachments are sanitized for common metadata.
- Access controls: password + allowed domains.
- 2FA for all accounts; SSO/SAML/LDAP available on Enterprise.
- Regional hosting available on request.
Frequently oxed questions
Can’t find what you’re looking for? See all FAQs for more questions and answer.
No. Responses do not store IP, device, or browser details. See our Privacy page for the specifics.