Legal
Data Handling & Anonymity Policy
Last updated: August 17, 2026
1. Overview
This Data Handling & Anonymity Policy describes how ManagerSignal collects, processes, anonymizes, and stores manager review data. Our approach is designed to maximize data utility while protecting reviewer anonymity.
2. Data Collection
ManagerSignal collects structured feedback through standardized questionnaires covering the six ManagerSignal Score dimensions. Data collected includes: categorical responses to structured questions; scaled ratings on specific leadership dimensions; optional free-text fields for additional context (subject to moderation). We collect only what a signal needs and deliberately minimize information that could identify a submitter. We do not request: real names, email addresses, or contact information of anonymous submitters; connection metadata that could identify a submitter; precise dates, locations, or other potentially identifying metadata.
3. Anonymization Process
Our multi-layer anonymization process includes: (a) Metadata Stripping: connection metadata (IP, user agent, timestamp precision) is not retained in association with review submissions; (b) Content Anonymization: moderators identify and remove or generalize any personally identifiable information within response text; (c) Temporal Generalization: specific dates are generalized to month/quarter to prevent correlation; (d) Geographic Generalization: specific office locations are generalized to metro area or region level.
4. Data Processing
Anonymized data is processed to generate: individual dimension scores (Psychological Safety, Coaching & Development, Empowerment & Autonomy, Clarity & Direction, Communication & Recognition, and Fairness & Inclusion) for each review; and an overall ManagerSignal Score, calculated by aggregating the six dimension scores and normalizing the result to a 0-100 scale, for diagnostic reporting. Team eNPS is captured separately and is never folded into the overall score. All processing uses anonymized data. Individual review data is not surfaced to employers, and reviews are not intended to be traceable to individual submitters.
5. Minimum Aggregation Thresholds
To prevent statistical identification, ManagerSignal enforces a minimum aggregation threshold: aggregate diagnostic results (scores and dimension breakdown) are only shown once at least 3 qualifying responses (anonymous responses that have cleared moderation) have been collected for a given diagnostic. Below this threshold, no score or aggregate data is displayed. This threshold is designed to prevent small-sample identification risks and protect reviewer anonymity.
6. Data Storage
All data is stored in encrypted databases hosted on cloud infrastructure in the United States. We build toward SOC 2-aligned security practices and will reflect any formal certification on this page when achieved. Anonymized review data and raw (pre-anonymization) data are stored in separate, isolated databases. Raw data is retained for a maximum of 30 days for moderation and quality assurance purposes, after which it is permanently deleted from our active systems.
7. Access Controls
Access to data is strictly controlled: access to pre-anonymization data is generally restricted to the moderation team, and only during the 30-day moderation window; employer subscribers access aggregate diagnostic results through their dashboard, once the minimum response threshold is met; ManagerSignal engineering staff access anonymized data through audited and logged processes.
8. Data Deletion
Review submitters cannot request deletion of individual anonymized reviews, as the anonymization process makes it impossible to associate specific reviews with specific individuals. Employer subscribers may request deletion of their account data, which will be processed within 30 days.
9. Third-Party Data Sharing
ManagerSignal generally does not share raw or individually identifiable data with any third party. We may share anonymized, aggregate statistics for: academic research partnerships (with IRB approval); aggregate research published on our Insights page; regulatory compliance when required by law.
10. Incident Response
In the event of a data security incident, ManagerSignal aims to notify affected parties and will work to contain and remediate the issue promptly. Our anonymization architecture is designed so that no identity link connects a submission to an individual, which is intended to limit the scope of any potential exposure.
11. Contact
For questions about our data handling practices, contact our Data Protection Officer at legal@signalsuitehq.com.