Privacy by design
Anonymity is built into the system.
- Groups of 5 or moreNo score is shown for a group smaller than 5. Demographic cuts need 10 responses and open text needs 30.
- Filters cannot narrow a groupEach threshold holds when filters are combined.
- Personal results for the employee aloneEmployers see aggregated group results only.
- No passwords storedEmployees sign in with a secure email link.
- Anonymized benchmarksBenchmark data is stripped of organizational identifiers.
Security controls
Protection at every layer.
Encrypted in transit and at rest
TLS 1.2+ in transit and AES-256 at rest, including backups.
Least-privilege access
Role-based access control, enforced multi-factor authentication and regular access reviews.
Continuous monitoring
Logging, alerting and audit trails across systems.
Independent testing
Third-party penetration testing and vulnerability scanning.
Vendor due diligence
Every sub-processor is assessed and bound to equivalent standards.
Secure development
Code review, dependency scanning and separate environments.
GDPR
An EU company, built around GDPR.
thrive at work s.r.o. is registered in Prague. The customer is the data controller for its employees’ responses, and thrive at work acts as processor under a Data Processing Agreement.
Where is the data hosted?
On AWS in the EU.
Is a Data Processing Agreement available?
Yes. A standard Data Processing Agreement is available to every customer.
Which data-subject rights are supported?
Access, rectification, erasure, portability and objection.
How are incidents handled?
Breaches are notified to the authorities and affected users within 72 hours.
Is AI used on employee data?
thrive at work never uses AI for research, for science or to process personal data.
How can our security team get documentation?
Email security@thriveatwork.ai.
Start with the research
Personal results stay personal.
Talk to the team about security reviews, works councils and data protection.
Start the change today.
- Perform better.
- Feel better.
- Live better.