How to explain survey confidentiality to employees

When employees don't trust that a survey is truly confidential, they either don't respond or don't answer honestly. Neither outcome gives you useful data. This article gives you the plain-language explanation you can share with employees so they feel confident participating.

What to Tell Your Employees

When your survey is set to confidential, here is the honest, accurate explanation to share:

Your name is never shown next to your answers. Not to your manager. Not to HR. Not to anyone at your company. The survey is administered by goHappy, and the technology enforces this automatically.  It's how the system was built.

Small groups are protected. If fewer than 3 people in your location or department respond, the results are hidden entirely. This means no one can look at a tiny group's results and guess who said what.

Your employer can see participation numbers, but not who participated.  This is how the automated reminders work. The system knows who has and hasn't responded so it can follow up with people who haven't completed it yet. 

The Three Survey Modes — What Each One Means

When an Admin sets up a survey in goHappy, they choose one of three privacy modes:

For most engagement surveys, Private Confidential is the mode in use.

How the Protections Actually Work

For employees who want to understand the technical details — or for Admins who want to be able to answer follow-up questions — here is exactly what goHappy does to protect confidential responses:

Names are stripped before results reach the screen. Even though the system knows who responded in order to track participation, names are removed from response data before it is ever displayed to an Admin. The system is built so that contact names are never included in what Admins see.

Personal details are always removed. Custom fields and personal identifying information are stripped from all response data regardless of the Admin's role or access level.

The Rule of Three. Any segment, such as a location or department,  with fewer than 3 responses is hidden completely. If only 2 people at a specific location completed the survey, their results do not appear at all. No one can read those results and guess who said what.

Anti-subtraction protection. Even if an Admin can see results for some segments, they cannot subtract visible numbers from totals to figure out what a hidden group said. The totals are automatically adjusted to prevent this.

Filters that get too narrow are blocked. If an Admin applies filters that would reduce a segment below 3 responses, the system automatically reverts the filter. There is no way to narrow results down to a point where individuals could be identified.

A Simple Script for Managers

If your managers are asked by employees whether the survey is really confidential, here is a simple way to explain it:

"This survey is run by goHappy, not by us internally. When you submit your answers, goHappy's system removes your name before anyone at our company ever sees the results. We can see the number of employees that completed it, but not who completed it.  We cannot connect an answer to an individual. The system is built to make that impossible."

Frequently Asked Questions From Employees

Will my manager know it was me who said something negative? No. In a confidential survey, names are never attached to answers when results are shown to anyone at your company.

What if I'm the only person in my department — will my answers be visible? No. If fewer than 3 people in your group respond, those results are hidden entirely to protect your privacy.

Can HR figure out who said what if they look hard enough? No. The system is designed to make this impossible — not just as a policy, but as a technical restriction. Names are removed before results reach the screen, and the system blocks any filters that would narrow results down to identifiable individuals.

Why does the system need to know I completed it if the survey is confidential? Knowing that you completed the survey is separate from knowing what you said. The system uses completion data only to send reminders to people who haven't responded yet. Otherwise, you would get every reminder message.  If you complete your survey then we know to not send you any more reminder messages. Your actual answers remain confidential.

Who can see my full individual responses? For confidential surveys, no one at your company can see individual responses linked to your name. goHappy administers the technology and maintains the privacy protections described in this article.