Security & confidentiality

Honest answers depend on a credible promise.

Employees only tell the truth when they trust that it cannot be traced back to them. GoodWell is built around that trust, in the architecture and in the rules of what employers can see.

Our commitments

What we do to protect every respondent.

Answers are separated from identities

Survey responses are stored apart from employee contact details. The link between a person and their answers is severed when they submit.

One-time survey links

Each invitation carries a unique token. Once used it is invalidated, and no mapping between the token and a response is kept.

No group smaller than five

Results for any department, location or other group are only shown when at least five people responded, so nobody can be singled out by elimination.

Comments without names

Employers read what was said, never who said it. We do not build individual profiles and do not analyze content to attribute it to a person.

Encrypted in transit and at rest

TLS 1.2 or higher for every connection and AES-256 for sensitive data at rest, hosted on Google Cloud in the United States.

Opt-outs are honored

Replying STOP to a text or unsubscribing from email suppresses future messages automatically, and bounces are tracked so nobody is spammed.

Transparency

What employers see, and what they never do.

Employers see

  • Scores, participation and the GoodWell Score
  • Category scores and AI-written summaries
  • Comments, with no name attached
  • Breakdowns for groups of five or more
  • Who has and has not responded, to target reminders, never what they said

Employers never see

  • Which employee gave which score
  • Who wrote any comment
  • Results for a group of fewer than five people
  • Any individual profile built from survey data

No system is perfect. In very small teams, a highly specific comment may still let an attentive reader guess its author. We say so to employees on the survey itself and encourage them to write with that in mind.

The details

Read the full policy.

Our privacy policy describes what we collect, how long we keep it, how we share it and the rights employees and employers have. Our terms and conditions cover the service agreement. Questions about security or a vendor review? Contact us and we will respond promptly.

Need a security review before you start?

We are glad to walk your IT or HR team through the architecture, data flows and retention policies.