Security & conduct
Candor is the entire product. It exists only when the people speaking are protected, so the conduct of an engagement is written down before the first interview.
What the workforce is told
- 01Written disclosure to the workforce before the first interview.
- 02The instrument never pretends to be human; its nature is stated plainly.
- 03Participation terms, retention, and deletion are part of the disclosure, not the fine print.
What employers see
- 01Cohort-level findings only, with minimum cohort sizes on every leadership view.
- 02Person-level transcripts are never shown to the employer.
- 03Quotation requires per-quote consent.
What is barred
- 01Inference is barred by contract from compensation, promotion, scheduling, and discipline.
- 02The ethnographer sits outside the chain of command.
- 03Customer data is not used to train foundation models.
Data handling
- 01Encryption in transit and at rest; HIPAA-aligned architecture on AWS.
- 02Deletion requests processed within 15 days; default transcript retention of 12 months.
- 03Built for state AI-inference law in California, Colorado, and New York; bargaining units engaged before deployment at unionized sites.
Documentation
Security documentation, SOC 2 and HIPAA, is available for review under NDA. SOC 2 Type II is in progress. Request the packet at noahalex@umich.edu.