In SafePorter's protected survey workflow, the organization holds the respondent roster and sends the invitations. SafePorter receives answers under a transformed identifier. The organization receives aggregate results and insights from written feedback, with small groups and identifying detail protected.
Client software runs on infrastructure the organization controls. It holds the respondent names and email addresses and sends invitations through the organization's mail system.
SafePorter does not receive that respondent roster. This differs from a workflow in which a survey provider imports the roster and sends named invitations itself.
A participant opens MyDataProtected using the organization's key and a SafePorter ID. They do not need to provide a name or email address to answer the survey.
The SafePorter ID is transformed before it is stored with the answers. The identifier held with those answers is different from the original invitation ID. Participants can skip questions and, while their ID is active, return to change or delete their data.
SafePorter holds the responses needed to produce the results. Your organization cannot access individual answers through its dashboard.
Structured responses contribute to aggregate percentages. Where a feedback survey includes free text, written responses contribute to group insights. Demographic surveys do not include free-text questions.
This is data minimization, not an absence of data processing. SafePorter processes response data. The design limits which party receives identity information, individual responses and published results.
SafePorter withholds results supported by too few people and suppresses detail that could identify an individual. Protection also covers reporting combinations and changes that could expose what one person contributed.
A large number of responses cannot make a revealing detail safe. A summary about a uniquely identifiable event can expose someone even without quoting their words.
Read how SafePorter protects small groups and identifying details →
Dashboards show published aggregates rather than a live stream of individual changes. Your organization can use the results to review policies, compare experiences and follow changes over time without receiving the response records behind them.
Survey response storage follows the region designated for the data. Administrator and business-contact information follows a separate workflow, described in the privacy notice.
See examples of what your organization receives →
---
Bring the question your organization needs answered.
Request a demonstration