Trust & security

Compliance was our first feature.

Primary database location in the EU. Designed for GDPR compliance and for organizations with employee representation and data protection officers. Data flows, sub-processors, and safeguards are documented.

Principles

Three principles that govern every data decision.

01

Diagnose the organization, not the individual

Applied Integral produces organizational intelligence. Pulse survey data is aggregated. Organizational network analysis works on communication metadata, not content. The output is a picture of how the organization works, not a profile of how any one person performs.

02

Aggregation and protection against inference

Structured Pulse responses are processed without name attribution and displayed only above the defined group threshold. Results for groups below six people are suppressed. Original free text is shown without names but may still be identifiable from its content or writing style.

03

European data protection at the foundation

GDPR compliant. Hosted in the EU. Built for organizations that take co-determination seriously. Built on European data protection requirements from the start.

Data handling

What we collect, how it's handled, and who sees it.

Different data types have different identifiability levels. This table documents exactly how each type is handled.

Individual-levelAnonymizedOrganizational
Data typeWhat it measuresIndividual-level?Who sees results
Change LensIndividual approach to change, and the organizational challenges the participant perceivesYes — a personal report for each participantBy default, each participant sees only their own report. The organization can use role-based settings to grant broader visibility to authorized people, teams, or organizational units.
Maturity AtlasOrganizational maturity across multiple dimensionsYes — a personal assessment for each participantBy default, each participant sees only their own results. The organization can use role-based settings to grant broader visibility to authorized people, teams, or organizational units.
Pulse SurveysWeekly organizational sensing across four dimensionsStructured responses are aggregated without name attribution. Free text may still be identifiable from its content.Structured results are displayed at group level only above the minimum threshold. Original free text may be shown without a name and is not automatically anonymous.
ONA (Network Analysis)Communication and collaboration patternsNo — aggregated metadata analysisTeam and department-level patterns only. No individual communication data visible.
KPI IntegrationOperational performance indicatorsN/A — organizational data, not employee dataAs configured by the organization.
Change Lens
What it measures

Individual approach to change, and the organizational challenges the participant perceives

Individual-level?

Yes — a personal report for each participant

Who sees results

By default, each participant sees only their own report. The organization can use role-based settings to grant broader visibility to authorized people, teams, or organizational units.

Maturity Atlas
What it measures

Organizational maturity across multiple dimensions

Individual-level?

Yes — a personal assessment for each participant

Who sees results

By default, each participant sees only their own results. The organization can use role-based settings to grant broader visibility to authorized people, teams, or organizational units.

Pulse Surveys
What it measures

Weekly organizational sensing across four dimensions

Individual-level?

Structured responses are aggregated without name attribution. Free text may still be identifiable from its content.

Who sees results

Structured results are displayed at group level only above the minimum threshold. Original free text may be shown without a name and is not automatically anonymous.

ONA (Network Analysis)
What it measures

Communication and collaboration patterns

Individual-level?

No — aggregated metadata analysis

Who sees results

Team and department-level patterns only. No individual communication data visible.

KPI Integration
What it measures

Operational performance indicators

Individual-level?

N/A — organizational data, not employee data

Who sees results

As configured by the organization.

Anonymization

How aggregation and anonymization work. Specifically.

Minimum aggregation threshold

Pulse survey data is only displayed when a group contains at least six respondents. This threshold applies to every level of reporting: team, department, business unit.

What happens below the threshold

If a team has fewer than six pulse survey respondents in a given period, results for that group are suppressed. They are not displayed, not accessible through filters, and not available through the API. The data is included only in higher-level aggregates where the threshold is met.

Min. 65 respondentsNot displayed6 respondentsResult shown

How anonymization works technically

Structured Pulse responses are processed without name attribution and displayed only as group values above the minimum threshold. Original free text is handled separately: it may be shown without a name, but its content does not automatically become anonymous.

Pulse surveysIdentityResponseIdentity removedAggregation engineno identityDashboard

Organizational network analysis methodology

ONA analyzes metadata from communication tools: frequency, directionality, response patterns between teams. It does not read message content, email bodies, chat messages, or file contents. ONA output is aggregated to team and department level. No individual communication profiles are generated or stored.

Team A → Team BReadsNever reads
ReadsFrequency · Direction · Response patternsNever readsMessage content · Email · Chat · Files

No individual performance scoring

Applied Integral does not score, rank, or benchmark individual employees against each other. There is no individual performance rating, no comparative ranking, and no mechanism for managers to evaluate individuals through Applied Integral’s organizational data.

Structured results are displayed as group values only above the minimum threshold.

Co-determination

Built for organizations with employee representation.

Most SaaS platforms treat employee representation requirements as an afterthought, something to address in a legal addendum. Applied Integral is designed for co-determination from the ground up.

The principle

Where employees have statutory representation rights over workplace monitoring and data collection, Applied Integral respects those rights fully. Employee representatives can review the methodology, the data handling, and the platform configuration before and during use. Applied Integral provides template agreements as a starting point for each jurisdiction.

Template agreements by jurisdiction

Applied Integral provides jurisdiction-specific documentation so employee representatives can review and adapt agreements for their legal framework.

Germany (Betriebsvereinbarung)

Template works agreement under BetrVG. Covers data collection scope, processing purposes, access controls, retention, and deletion. Designed for co-determination under Section 87(1) No. 6. The template is a starting point for the works council to review and adapt.

Austria (Betriebsvereinbarung)

Template agreement under the Arbeitsverfassungsgesetz (ArbVG). Covers the same scope, adapted for Austrian co-determination requirements.

France (Accord d'entreprise / CSE consultation)

Documentation for Comité Social et Économique consultation on employee data collection tools, covering scope, methodology, and access controls.

Other jurisdictions

Applied Integral provides equivalent documentation adapted to your jurisdiction’s employee representation framework.

Lawful participation

The deploying organization determines the legal basis and participation conditions and fulfils applicable information and co-determination duties. Applied Integral does not include a feature intended to use response content to sanction non-participation.

Employee representative access

Employee representatives (works councils, staff committees, or equivalent bodies) can review the anonymization methodology, aggregation logic, data handling procedures, and platform configuration at any time. Applied Integral supports granting representative bodies read access to system documentation and data processing records.

Not a performance evaluation tool

Applied Integral is not designed as an individual performance evaluation tool. Structured Pulse results are displayed at group level; original free text may still be identifiable despite the absence of a displayed name. Individual assessments produce personal development reports whose broader visibility can be configured by the organization through role-based settings.

Infrastructure

Where your data lives and how it's protected.

HostingEUPrimary database location: AWS Frankfurt (eu-central-1). Limited access or processing outside the EEA occurs only through the providers and transfer mechanisms described in the DPA.
Encryption at restEncryption of stored data through the infrastructure providers used.
Encryption in transitTLS-encrypted connections.
Access controlsRole-based access. Administrators configure who sees what at each organizational level. Permissions are auditable.
Security testingRisk-based security, authorization, and dependency testing. Specific external penetration tests are committed only when expressly agreed.
Sub-processorsCurrent list: https://www.appliedintegral.com/legal/subprocessors. Changes are announced under the DPA procedure.

GDPR

GDPR compliance in detail.

Legal basis for processing

For customer data, the deploying organization acts as controller, determines the applicable legal basis, and fulfils information and co-determination duties. Applied Integral processes that data as a processor under documented instructions and the DPA. Applied Integral acts as controller for its own contract and business contact data.

Data minimization

Applied Integral collects what is needed for organizational diagnosis. Pulse surveys collect responses to organizational questions, not personal information beyond what's required for group-level aggregation. ONA processes communication metadata, not content. Individual assessments collect responses relevant to the assessment purpose.

Data subject rights

Individuals generally exercise their rights to access, rectification, erasure, restriction, and portability with the deploying organization as controller. Applied Integral supports the organization under the DPA. Requests sent to privacy@appliedintegral.com are forwarded to the responsible party or handled where Applied Integral acts as controller.

Data retention

Customer data is processed under the contractual retention and deletion rules. Following contract termination or a deletion instruction, production data is deleted; rotating backups are overwritten or deleted no later than the period stated in the DPA, generally 90 days.

Data portability

Organizations can export their data in standard formats at any time during the contract period.

Data processing agreement

The DPA covers everything you'd expect. And a few things you wouldn't.

The standard Data Processing Agreement forms part of the customer contract and applies before processing begins. It contains the arrangements required by Article 28 GDPR, including general authorisation and a change procedure for sub-processors as well as technical and organizational measures.

Processing purposes and scope
Categories of data processed
Data retention and deletion obligations
Sub-processor management and notification
Notification of personal data breaches to the controller without undue delay
Audit rights for the data controller
Technical and organizational security measures

Questions

Common questions from DPOs, legal counsel, and employee representatives.

Questions about data protection?

If you need additional detail for your DPO, legal team, or employee representatives, we're happy to walk through the specifics.