Filtering down to someone
Team of 8, filter by tenure, filter by shift. 2 left. It's no longer anonymous. If the tool allows it, someone will do it.
Privacy and anonymity
That's why the rule is in the code, not in a manual: each person sees their own data, the company sees teams from 5 different people and there is no screen with an individual record. Not for HR and not for us.
The problem
Many climate surveys are anonymous by policy, not by design. One well-placed filter is enough to find a person. The workforce knows it and answers accordingly.
Team of 8, filter by tenure, filter by shift. 2 left. It's no longer anonymous. If the tool allows it, someone will do it.
If you see the site total and a hidden team's, you can subtract. Anonymity has to cover that too.
It only takes one person knowing their answer was seen once. From then on, everyone answers “fine”.
How it works
Rule 1
Their check-in, their trend, their thank-yous, their courses, their conversations with the assistant. It's their space. There's no role that can open it: not the manager, not HR, not an admin.
Rule 2
A team or site score is only shown when at least 5 different people have answered in the period. If there are 4, it isn't shown, even if they've answered twenty times. If a filter leaves a cut below 5, it's hidden too. And if a cut can be worked out by subtracting another, whatever is needed is hidden.
Rule 3
There is no screen with a person's name and their answers. The HR copilot receives the same aggregates as the map, with the same threshold. If you ask it about someone, it has nothing to answer with.
How the assistant worksWho sees what
The same thing the workforce is told on day one. No small print.
The person
The manager
HR
Privacy rule
Sometimes it's clearer to say what's missing on purpose. These things don't exist in BienestarHR and won't be added as an option.
Works with
No feature works alone. They all follow the same privacy rule.
With 3 people, an extreme answer stands out and two people can work out the third. With 5 there's enough margin that nobody is singled out. It's the minimum; the company can raise it.
Different people. With daily check-ins, one person can give 5 responses in a week; that doesn't unlock the team. It takes 5 different people in the period.
The cut is hidden and the “fewer than 5 responses” notice is shown. If it could also be worked out by subtracting from another cut, whatever is needed is hidden too.
Not even the BienestarHR team has a view of individual answers: it doesn't exist in the tool. Where the data lives, how it's encrypted and who can access what is on the security and data page.
With the three rules on this page, which are the same ones that appear on the check-in screen: each person sees their own data, the company sees teams from 5 and there's no individual record.
Start today
It's what makes people tell the truth. And what makes the data useful.
€3 per employee per month. No lock-in. No card to start.