SafePorter's protected survey workflow keeps the respondent roster on the organization's systems and individual answers outside the organization's reporting access. SafePorter processes responses and publishes protected aggregates and insights. The controls address both small groups and identifying detail in the output.
| Information | The organization | SafePorter survey service |
|---|---|---|
| Respondent roster, names and email addresses | Holds these in its invitation system | Does not receive the roster |
| Individual survey answers | Cannot access through its reporting | Processes under a transformed identifier |
| Individual written feedback | Does not receive source comments | Processes responses to produce group insights |
| Published group results | Receives the protected output | Produces and publishes the output |
| Results or details that could identify a respondent | Withheld or suppressed from reporting | Subject to disclosure controls before publication |
The identifier stored with survey answers differs from the SafePorter ID issued in the invitation. This table describes survey participants, not every person who interacts with SafePorter.
SafePorter aggregates written responses into group insights. It suppresses specificity that could identify a person and withholds results that do not have sufficient support for safe reporting.
Demographic surveys do not include free-text questions.
SafePorter protects small populations, related results that could reveal a withheld group, unsafe reporting combinations and individual changes that a live feed could expose. Dashboards provide published results rather than a stream of individual answers.
Read the reporting-protection explanation for examples, including why a large group does not make every detail safe.
With an active SafePorter ID, a respondent can return to MyDataProtected to amend or delete their data. Questions can be left unanswered.
The respondent page explains these controls in direct language. The privacy notice describes the handling of survey information and other relationships in more detail.
SafePorter processes the business and account information needed to operate its service. Administrator accounts and named Vendor Portal submissions are different from protected survey responses. Those users provide the contact and account information needed for their role.
Survey response storage follows the designated region. Administrator and other business data can follow different storage arrangements, as described in the privacy notice.
A privacy review should establish what information the survey collects, where it is held, what each party can access and what can appear in a result. The intended population and purpose also matter.
Read the current privacy notice alongside the applicable agreement and deployment information. Evaluate the reporting protections against the questions your organization plans to ask.
Compare the relevant design choices.
---
Bring the question your organization needs answered.
Request a demonstration