Legal
Data Handling & Anonymity Policy
Last updated: March 1, 2026
1. Overview
This Data Handling & Anonymity Policy describes how ManagerSignal collects, processes, anonymizes, and stores manager review data. Our approach is designed to maximize data utility while ensuring complete anonymity for review submitters.
2. Data Collection
ManagerSignal collects structured feedback through standardized questionnaires covering the six ManagerSignal Score dimensions. Data collected includes: categorical responses to structured questions; scaled ratings on specific leadership dimensions; optional free-text fields for additional context (subject to moderation). We deliberately do not collect: real names, email addresses, or contact information of anonymous submitters; IP addresses or device fingerprints; precise dates, locations, or other potentially identifying metadata.
3. Anonymization Process
Our multi-layer anonymization process includes: (a) Metadata Stripping: all connection metadata (IP, user agent, timestamp precision) is removed at the point of submission; (b) Content Anonymization: moderators identify and remove or generalize any personally identifiable information within response text; (c) Temporal Generalization: specific dates are generalized to month/quarter to prevent correlation; (d) Geographic Generalization: specific office locations are generalized to metro area or region level.
4. Data Processing
Anonymized data is processed to generate: individual dimension scores (Communication & Clarity, Coaching & Development, Trust & Psychological Safety, Team Health & Support, Execution & Decision Velocity, and Culture Impact & Values Alignment) for each review; aggregate ManagerSignal Score calculations per manager; trend analysis over time; industry and peer benchmarking comparisons. All processing uses anonymized data only. No individual review can be traced back to its submitter.
5. Minimum Aggregation Thresholds
To prevent statistical identification, ManagerSignal enforces a minimum aggregation threshold: a manager's ManagerSignal Score and dimension breakdown are only published once at least 3 reviews have been submitted for that manager. Below this threshold, no score or aggregate data is displayed. This threshold is designed to prevent small-sample identification risks.
6. Data Storage
All data is stored in encrypted databases (AES-256) hosted on SOC 2 Type II compliant infrastructure in the United States. Anonymized review data and raw (pre-anonymization) data are stored in separate, isolated databases. Raw data is retained for a maximum of 30 days for moderation and quality assurance purposes, after which it is permanently deleted.
7. Access Controls
Access to data is strictly controlled: only the moderation team can access pre-anonymization data, and only during the 30-day moderation window; employer subscribers access only aggregate analytics through their dashboard, and only once the minimum review threshold is met; ManagerSignal engineering staff access anonymized data only, through audited and logged processes.
8. Data Deletion
Review submitters cannot request deletion of individual anonymized reviews, as the anonymization process makes it impossible to associate specific reviews with specific individuals. Employer subscribers may request deletion of their account data, which will be processed within 30 days.
9. Third-Party Data Sharing
ManagerSignal does not share raw or individually identifiable data with any third party. We may share anonymized, aggregate statistics for: academic research partnerships (with IRB approval); industry benchmark reports published on our Insights page; regulatory compliance when required by law.
10. Incident Response
In the event of a data security incident, ManagerSignal will: notify affected parties within 72 hours; engage independent forensic investigators; provide regular updates throughout the investigation; implement corrective measures to prevent recurrence. Our anonymization architecture means that even in the event of a breach, individual submitters cannot be identified from stored data.
11. Contact
For questions about our data handling practices, contact our Data Protection Officer at legal@signalsuitehq.com.