Trust & security
Compliance was our first feature.
Primary database location in the EU. Designed for GDPR compliance and for organizations with employee representation and data protection officers. Data flows, sub-processors, and safeguards are documented.
Principles
Three principles that govern every data decision.
Diagnose the organization, not the individual
Applied Integral produces organizational intelligence. Pulse survey data is aggregated. Organizational network analysis works on communication metadata, not content. The output is a picture of how the organization works, not a profile of how any one person performs.
Aggregation and protection against inference
Structured Pulse responses are processed without name attribution and displayed only above the defined group threshold. Results for groups below six people are suppressed. Original free text is shown without names but may still be identifiable from its content or writing style.
European data protection at the foundation
GDPR compliant. Hosted in the EU. Built for organizations that take co-determination seriously. Built on European data protection requirements from the start.
Data handling
What we collect, how it's handled, and who sees it.
Different data types have different identifiability levels. This table documents exactly how each type is handled.
| Data type | What it measures | Individual-level? | Who sees results |
|---|---|---|---|
| Change Lens | Individual approach to change, and the organizational challenges the participant perceives | Yes — a personal report for each participant | By default, each participant sees only their own report. The organization can use role-based settings to grant broader visibility to authorized people, teams, or organizational units. |
| Maturity Atlas | Organizational maturity across multiple dimensions | Yes — a personal assessment for each participant | By default, each participant sees only their own results. The organization can use role-based settings to grant broader visibility to authorized people, teams, or organizational units. |
| Pulse Surveys | Weekly organizational sensing across four dimensions | Structured responses are aggregated without name attribution. Free text may still be identifiable from its content. | Structured results are displayed at group level only above the minimum threshold. Original free text may be shown without a name and is not automatically anonymous. |
| ONA (Network Analysis) | Communication and collaboration patterns | No — aggregated metadata analysis | Team and department-level patterns only. No individual communication data visible. |
| KPI Integration | Operational performance indicators | N/A — organizational data, not employee data | As configured by the organization. |
Individual approach to change, and the organizational challenges the participant perceives
Yes — a personal report for each participant
By default, each participant sees only their own report. The organization can use role-based settings to grant broader visibility to authorized people, teams, or organizational units.
Organizational maturity across multiple dimensions
Yes — a personal assessment for each participant
By default, each participant sees only their own results. The organization can use role-based settings to grant broader visibility to authorized people, teams, or organizational units.
Weekly organizational sensing across four dimensions
Structured responses are aggregated without name attribution. Free text may still be identifiable from its content.
Structured results are displayed at group level only above the minimum threshold. Original free text may be shown without a name and is not automatically anonymous.
Communication and collaboration patterns
No — aggregated metadata analysis
Team and department-level patterns only. No individual communication data visible.
Operational performance indicators
N/A — organizational data, not employee data
As configured by the organization.
Anonymization
How aggregation and anonymization work. Specifically.
Minimum aggregation threshold
Pulse survey data is only displayed when a group contains at least six respondents. This threshold applies to every level of reporting: team, department, business unit.
What happens below the threshold
If a team has fewer than six pulse survey respondents in a given period, results for that group are suppressed. They are not displayed, not accessible through filters, and not available through the API. The data is included only in higher-level aggregates where the threshold is met.
How anonymization works technically
Structured Pulse responses are processed without name attribution and displayed only as group values above the minimum threshold. Original free text is handled separately: it may be shown without a name, but its content does not automatically become anonymous.
Organizational network analysis methodology
ONA analyzes metadata from communication tools: frequency, directionality, response patterns between teams. It does not read message content, email bodies, chat messages, or file contents. ONA output is aggregated to team and department level. No individual communication profiles are generated or stored.
No individual performance scoring
Applied Integral does not score, rank, or benchmark individual employees against each other. There is no individual performance rating, no comparative ranking, and no mechanism for managers to evaluate individuals through Applied Integral’s organizational data.
Structured results are displayed as group values only above the minimum threshold.
Co-determination
Built for organizations with employee representation.
Most SaaS platforms treat employee representation requirements as an afterthought, something to address in a legal addendum. Applied Integral is designed for co-determination from the ground up.
The principle
Where employees have statutory representation rights over workplace monitoring and data collection, Applied Integral respects those rights fully. Employee representatives can review the methodology, the data handling, and the platform configuration before and during use. Applied Integral provides template agreements as a starting point for each jurisdiction.
Template agreements by jurisdiction
Applied Integral provides jurisdiction-specific documentation so employee representatives can review and adapt agreements for their legal framework.
Germany (Betriebsvereinbarung)
Template works agreement under BetrVG. Covers data collection scope, processing purposes, access controls, retention, and deletion. Designed for co-determination under Section 87(1) No. 6. The template is a starting point for the works council to review and adapt.
Austria (Betriebsvereinbarung)
Template agreement under the Arbeitsverfassungsgesetz (ArbVG). Covers the same scope, adapted for Austrian co-determination requirements.
France (Accord d'entreprise / CSE consultation)
Documentation for Comité Social et Économique consultation on employee data collection tools, covering scope, methodology, and access controls.
Other jurisdictions
Applied Integral provides equivalent documentation adapted to your jurisdiction’s employee representation framework.
Lawful participation
The deploying organization determines the legal basis and participation conditions and fulfils applicable information and co-determination duties. Applied Integral does not include a feature intended to use response content to sanction non-participation.
Employee representative access
Employee representatives (works councils, staff committees, or equivalent bodies) can review the anonymization methodology, aggregation logic, data handling procedures, and platform configuration at any time. Applied Integral supports granting representative bodies read access to system documentation and data processing records.
Not a performance evaluation tool
Applied Integral is not designed as an individual performance evaluation tool. Structured Pulse results are displayed at group level; original free text may still be identifiable despite the absence of a displayed name. Individual assessments produce personal development reports whose broader visibility can be configured by the organization through role-based settings.
Infrastructure
Where your data lives and how it's protected.
GDPR
GDPR compliance in detail.
Legal basis for processing
For customer data, the deploying organization acts as controller, determines the applicable legal basis, and fulfils information and co-determination duties. Applied Integral processes that data as a processor under documented instructions and the DPA. Applied Integral acts as controller for its own contract and business contact data.
Data minimization
Applied Integral collects what is needed for organizational diagnosis. Pulse surveys collect responses to organizational questions, not personal information beyond what's required for group-level aggregation. ONA processes communication metadata, not content. Individual assessments collect responses relevant to the assessment purpose.
Data subject rights
Individuals generally exercise their rights to access, rectification, erasure, restriction, and portability with the deploying organization as controller. Applied Integral supports the organization under the DPA. Requests sent to privacy@appliedintegral.com are forwarded to the responsible party or handled where Applied Integral acts as controller.
Data retention
Customer data is processed under the contractual retention and deletion rules. Following contract termination or a deletion instruction, production data is deleted; rotating backups are overwritten or deleted no later than the period stated in the DPA, generally 90 days.
Data portability
Organizations can export their data in standard formats at any time during the contract period.
Data processing agreement
The DPA covers everything you'd expect. And a few things you wouldn't.
The standard Data Processing Agreement forms part of the customer contract and applies before processing begins. It contains the arrangements required by Article 28 GDPR, including general authorisation and a change procedure for sub-processors as well as technical and organizational measures.
Questions
Common questions from DPOs, legal counsel, and employee representatives.
Questions about data protection?
If you need additional detail for your DPO, legal team, or employee representatives, we're happy to walk through the specifics.