We take security seriously. Here's everything you need to know about how we protect your employee feedback data.
All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Your employee feedback is protected from the moment it's submitted.
When anonymous mode is enabled, we cryptographically strip all identifying information before storage. Not even we can trace responses back to individuals.
We host on AWS with SOC 2 compliant infrastructure. Regular security audits and penetration testing ensure our defenses stay strong.
Role-based access control ensures only authorized users can view sensitive data. Full audit logging tracks every action.
Independently audited controls for security, availability, and confidentiality.
Full compliance with EU data protection regulations. DPA available.
California Consumer Privacy Act compliance for US customers.
All data is stored in AWS data centers in the United States by default. Enterprise customers can choose EU data residency (Frankfurt) for GDPR compliance.
Never. Your data is yours. We make money from subscriptions, not from selling or monetizing your employee feedback data. This is a core company principle.
We retain your data for as long as your account is active. Upon account deletion, all data is permanently removed within 30 days. You can export your data anytime.
Only authorized PulseFeedback employees with a business need can access customer data, and all access is logged. We use the principle of least privilege.
We have a documented incident response plan. In the unlikely event of a breach, we commit to notifying affected customers within 72 hours.
Yes. We're happy to complete security questionnaires and provide additional documentation. Contact garrett@pulsefb.com.
Okta, Azure AD, Google, OneLogin
Automatic user management
Restrict access by network
Define your own policies
Complete activity history
Tailored agreements
Named security contact
Share our reports
Our security team is happy to answer any questions or complete security questionnaires.