{
  "title": "Anonymous Employee Survey Trust Index 2026",
  "publishedAt": "2026-09-08",
  "updatedAt": "2026-09-08",
  "sourceReviewDate": "8 September 2026",
  "publisher": "Candora",
  "license": "CC BY 4.0",
  "reportUrl": "https://candora.app/reports/anonymous-employee-survey-trust-index-2026",
  "criteria": [
    {
      "name": "Employer cannot view participant-linked answers",
      "weight": 30
    },
    {
      "name": "Anonymity is fixed rather than a fragile setting",
      "weight": 20
    },
    {
      "name": "Small groups and indirect identification are protected",
      "weight": 20
    },
    {
      "name": "Written feedback is protected",
      "weight": 15
    },
    {
      "name": "Completion tracking is separated from answers",
      "weight": 10
    },
    {
      "name": "Participant-visible explanation",
      "weight": 5
    }
  ],
  "vendors": [
    {
      "name": "Candora",
      "score": 96,
      "band": "strong",
      "whatHrSeesWhenIdentifiable": "Not applicable in the employee survey workflow: Candora does not provide HR with an identifiable response mode.",
      "sourceIds": ["candora-privacy", "candora-product"]
    },
    {
      "name": "Workleap Officevibe",
      "score": 82,
      "band": "strong",
      "whatHrSeesWhenIdentifiable": "Non-anonymous feedback is visible in the employee immediate team when the employee chooses to reveal identity.",
      "sourceIds": ["workleap-anonymity", "workleap-manager-faq"]
    },
    {
      "name": "Lattice",
      "score": 76,
      "band": "good",
      "whatHrSeesWhenIdentifiable": "If an admin creates an identifiable survey, responses are visible to admins and linked to the employee name and identity; Lattice warns participants that their name will show with responses.",
      "sourceIds": ["lattice-anonymity", "lattice-visibility"]
    },
    {
      "name": "Culture Amp",
      "score": 74,
      "band": "good",
      "whatHrSeesWhenIdentifiable": "In the regular attributed/confidential model, Culture Amp uses employee data for reporting groups rather than showing individual answers in normal reports.",
      "sourceIds": [
        "cultureamp-formats",
        "cultureamp-confidentiality",
        "cultureamp-unattributed"
      ]
    },
    {
      "name": "15Five",
      "score": 72,
      "band": "good",
      "whatHrSeesWhenIdentifiable": "Lifecycle surveys are not protected by the same engagement confidentiality thresholds, so individual lifecycle responses can be visible to authorized roles.",
      "sourceIds": ["15five-confidentiality", "15five-downloads"]
    },
    {
      "name": "Qualtrics Employee Experience",
      "score": 58,
      "band": "configurable",
      "whatHrSeesWhenIdentifiable": "The public admin documentation reviewed here focuses on dashboard thresholds rather than a single identifiable-response screen.",
      "sourceIds": ["qualtrics-anonymous-admin"]
    },
    {
      "name": "Typeform",
      "score": 45,
      "band": "configurable",
      "whatHrSeesWhenIdentifiable": "If HR asks for name/email or passes employee identifiers through URL parameters, that information appears in Results alongside answers.",
      "sourceIds": ["typeform-identify", "typeform-responses"]
    },
    {
      "name": "SurveyMonkey",
      "score": 38,
      "band": "fragile",
      "whatHrSeesWhenIdentifiable": "With Email Invitations and Anonymous Responses off, survey results include email address, IP address, and any first name, last name or custom contact data included in the collector.",
      "sourceIds": ["surveymonkey-anonymous", "surveymonkey-respondent-policy"]
    },
    {
      "name": "Jotform",
      "score": 32,
      "band": "fragile",
      "whatHrSeesWhenIdentifiable": "A form owner can show the Submission IP column beside entries and can include IP address in notification emails or reports.",
      "sourceIds": ["jotform-ip", "jotform-privacy"]
    },
    {
      "name": "Google Forms",
      "score": 28,
      "band": "fragile",
      "whatHrSeesWhenIdentifiable": "When email collection is enabled, respondents are required to provide or confirm an email address that is stored with the response data.",
      "sourceIds": ["google-forms-responses"]
    },
    {
      "name": "Dayforce Engagement",
      "score": 54,
      "band": "configurable",
      "whatHrSeesWhenIdentifiable": "If HR selects the option to collect respondent name, each employee name appears with that employee survey responses.",
      "sourceIds": ["dayforce-anonymity"]
    }
  ]
}