Anonymity and security
Anonymity is what makes the signal honest.
People are less likely to raise problems where there may be implications for them. So nobody at your organisation sees an individual’s responses.
How anonymity works
Individual links. Aggregated reporting.
Enforced by Tensense, from the link to the report.
An individual link
Each person gets a personal link by email, rather than a shared survey link. It places their response in the right team, site or other segment.
Reported only in aggregate
Responses are held in Tensense’s database for analysis, but Tensense’s systems never present them individually.
A minimum before any report
A segment needs enough responses before it gets a report of its own. You agree the minimum with us. Below it, those responses still count in other segments and in the organisation as a whole.
For people responding
What happens to your responses.
Can anyone at my organisation see my responses?
No, not even your manager. Your organisation only ever sees results combined with other people’s.
Will anyone know whether I’ve responded?
Tensense sends reminders, and your organisation can ask who has responded so it can send its own. Reminders lift participation, helping make sure everyone is heard and represented. Your responses stay anonymous.
Can I see the data held about me?
Yes. Ask your organisation, which passes your request to Tensense. Your data, including your responses, comes back to you through your organisation, so this is the one time it may see them, and only because you asked.
Can I have my data removed?
Yes. Ask your organisation, and Tensense irreversibly anonymises your personal data.
For IT and data teams
Tensense processes personal data in line with UK GDPR and the Data Protection Act 2018.
Where is our data held?
In the UK, encrypted in transit and at rest. Nightly backups are encrypted too, and also held in the UK.
Who at Tensense can access it?
Only the people whose role needs it, with multi-factor authentication. Access is reviewed periodically.
Do people need to log in?
No. Each person gets a personal link by email, with no password to set up or forget. The link is what places their response in the right segments, and Tensense enforces anonymity.
How do you receive our people’s details?
As a spreadsheet in a set format, by whichever secure route suits you. There’s no connection to your HR systems to set up.
Can we bring results into our own systems?
Yes, aggregated results only. An API provides aggregated data for your own reporting or BI tools. Individual responses can’t be exported, through the API or any other route.
Are team names shown in reports?
By default, yes. Reports name the segments being compared, so a leader can learn from a team where things are going well. A report for a single segment can hide the names of all the others, if you prefer.
Does the AI see individual responses?
No. The AI that writes report narratives only ever receives aggregated data, never individual responses or anything that identifies a person.
What if there’s a data breach?
We tell you without undue delay, and within 72 hours of becoming aware of a notifiable breach.
What happens to our data when the contract ends?
Personal data is irreversibly anonymised.
Read the privacy policy or email info@tensense.ai for our security documentation.