For a measurement system that depends on people telling the truth, anonymity is not a compliance feature â it is a condition of validity. People report honestly when honesty is safe.
How we guarantee it
Individual responses are never exposed. All reporting is aggregated at team or segment level. Below a minimum group size of 5 people, data is automatically aggregated up to the level above.
Cross-analysis stays aggregated. Correlation analyses, including any crossing with performance data, run only at team or segment level. Never individually. This simultaneously protects anonymity, participation and GDPR compliance.
The employee owns the relationship. Each employee accepts Happyforce's terms directly: the data relationship is between the person and Happyforce, not mediated by the employer.
Infrastructure. EU hosting, GDPR compliance and ISO 27001 certification.
Why this is in your interest as an organisation
If anonymity weakens, measurement degrades: people stop answering, or answer what they think is expected of them. The 5-person threshold can feel like a limitation when you want to see the detail of a small team, but it is exactly what keeps the data usable.
The published research on our data followed the same standard: the public dataset is fully anonymised, with comment text replaced by character counts.Keep reading
Participation: why we measure it and how to read silence â the other condition of validity.
Is Happyforce really anonymous? â the same question, told for the employee.
Limitations of the model â what anonymity mitigates and what it does not.