Security and privacy, including the limits.
How staff answers are stored, who can see them, and what we cannot promise.
Staff will only be honest if they trust the process, so privacy is part of how Calibre Forum is built, not an add-on. This page says what we do, how it works and where its limits are.
How anonymity works
Each person receives a personal link by email. When they submit the survey, their answers are saved against their group, such as owners, managers, staff or IT, and the time of submission. The saved answers do not include their name, their email address or the link itself. The link is then marked as used so it cannot be submitted twice.
Owners see results only for groups where three or more people answered. A group with fewer responses is left out of group views. A small number of factual questions that only owners or IT answer, such as whether a policy exists, are shown for the organisation as a whole. Owners can see how many people have finished, never who.
What anonymity does not do
- Small teams and free text can identify people. In a team of five, people may guess who wrote a comment. Free-text answers can appear in the report as written when five or more people answered that question. Staff are asked not to include names or identifying details.
- We keep a record that an invitation was used. We need this to stop links being reused. Staff at Calibre Forum with administrative access to the database could in principle compare timestamps. We do not do that, and we describe the survey as anonymous to your organisation, not as impossible for us to trace.
- The employer chooses who is invited. Your organisation holds the staff email list. Calibre Forum does not share responses with the employer by individual.
Who can see what
- Owners and admins on an account see their own organisation's report and its participation counts, and nothing from other organisations. This is enforced in the database with row-level security, not only in the app.
- Staff and managers taking the survey see only the survey.
- Calibre Forum staff may access data to provide support, fix faults and run the service, and only for those purposes.
Technical measures
- All pages and requests use HTTPS. Our database provider encrypts stored data at rest.
- Owner sign-in uses a one-time code sent by email, with limits on how often a code can be requested.
- Payment details are handled by Stripe. Calibre Forum never sees or stores card numbers.
- The survey and the app do not load advertising or analytics tags.
Calibre Forum is not certified to ISO 27001, SOC 2 or any similar scheme. Some of the providers listed below hold their own certifications, which you can check on their websites.
How the AI-drafted wording works
Scores, charts and rankings are calculated by rules. The summary paragraphs and short interpretation notes can be drafted by an AI model. The model receives only finished figures for your organisation, namely the organisation name, industry, scores, participation figures and priority titles. It does not receive staff names, email addresses, individual answers or free-text comments. Any figure in the drafted text is checked against the calculated results, and text that does not match is replaced with rule-written text. We do not use your data to train a model.
Where data goes
| Provider | What it does | Location |
|---|---|---|
| Supabase | Database, sign-in and the code that runs the service | Database hosted in Sydney, Australia |
| Netlify | Hosts the website and app pages | Global content network, United States headquarters |
| Stripe | Card payments and tax calculation for purchases | United States and other regions; Stripe handles card details, not us |
| Resend | Sends invitations, sign-in codes and report emails | United States |
| Anthropic (Claude) | Drafts some of the report's summary wording from finished scores, organisation name and industry only | United States |
| Baby Love Growth | Writes the articles on the blog and sends them to this website. It does not receive visitor, customer or survey information. Article images may load from an image host the service uses | Not stated by the provider |
| Google Analytics and Tag Manager | Measures visits to this marketing website only. Not used on the survey, the app or the report | United States and other regions |
Because some providers operate outside Australia, personal information such as email addresses can be handled overseas. The privacy policy explains this in more detail.
Report a concern
If you believe you have found a security problem, or you think data has been mishandled, use the contact page and say so in the message. Please do not include survey answers or personal information in your report.