Team surveys only work if people can answer honestly. This is how we protect their answers, and what to hand to your works council or data protection officer.
Confidential results
Results appear only once at least five team members have answered; the team owner's own answer does not count. Breakdowns by group appear only when each group is large enough on its own. Individual answers are never shown to anyone. The rule in detail
Hosted in the EU
Our database runs in an AWS data centre in Ireland (Supabase), and our application servers run in Dublin (Vercel). Error monitoring and product analytics use EU data regions. Every provider, including the few outside the EU, is listed on the sub-processors page.
Encrypted connections
All traffic to peakteams.io is encrypted with TLS (HTTPS). Stored data is encrypted at rest by our database provider.
Access control in the database
Row-level security in the database limits every account to the data it is permitted to see. Team owners have no read access to individual answers at all; the report is built from aggregates on the server. Passwords are stored only as hashes. Survey sessions use signed, script-inaccessible cookies.
Analytics only with consent
Google Analytics, PostHog and session recordings only run after you opt in. Without consent we only use cookieless page-view statistics. Cookie Policy
Your rights and our paperwork
You can request access to, correction or deletion of your data at any time. Organisations can sign a data processing agreement (Art. 28 GDPR); the DPA template explains how to request the signed version. Email legal@peakteams.io.
The anonymity threshold: five
Results appear only once at least five team members have answered; the team owner's own answer does not count; individual answers are never shown to anyone.
- The floor is enforced by the software on every results request, not promised in the copy. Below it, nothing is visible, not even to the owner.
- The owner's own answer is excluded from the count so that an owner can never subtract their own view and work out what the others said. A team therefore needs at least six people including the owner before a report can exist.
- The same floor applies to every breakdown by group, for example by seniority: a group that would fall below five, or leave fewer than five in the rest of the team, is not shown.
- The minimum is a platform-wide setting and the same for every team. A team smaller than that can use the free team check and the self-tests, which need no threshold because they report to the person who answered.
Confidential, not anonymous
We store answers together with a reference to the personal survey invitation, so people can pause and resume and each person answers only once. That reference is never shown to the team owner. Free-text answers are shown word for word without a name, so they should not contain details that identify the person writing them. Where a survey module asks members to rate colleagues, members appear in the results as letters, not names. Privacy Policy, section 8
Works council (Betriebsrat) and employee representation
PEAKTEAMS is a team-level tool. It measures how a team works together, scored as 18 KPIs and a four-letter team identity, and it reports aggregates to the team owner only once the threshold above is met. It is not a performance review, not an engagement survey reporting to HR, and not a monitoring system. In Germany a works council usually wants to see exactly that in writing before a survey opens, so here is what the team survey collects and what it never does.
What the team survey collects
- Answers to statements about how the team works, on a 1 to 5 scale, grouped into 18 team KPIs and four identity dimensions
- Optional free-text comments, shown to the team owner word for word and without a name
- The time spent on each question, when the survey was started and submitted, and the browser used
- A reference to the personal invitation, so people can pause and resume and each person answers only once
What it never does
- No names, employee IDs or personal data attached to any answer the owner can see
- No individual results, rankings or scores for any single person, and no way for the owner to filter down to one
- No performance ratings of individuals and nothing written into an HR system: there is no integration with HR software
- No monitoring of working time, location, devices or behaviour outside the survey itself
- No sale of data, no use for advertising, and no training of models on survey answers
The controller is Libaty GmbH, Heusenstamm, Germany (Impressum). The works-council one-pager puts these points, the threshold rule and the KPI definitions from the methodology page into one document you can forward. We are also happy to join a call with your Betriebsrat.
Trust documents
Works-council one-pager
What the survey collects, what it does not, and how the threshold is enforced, on one page for a Betriebsrat or staff representation.
Sub-processors
Every provider that processes personal data on our behalf, with its role, location and transfer basis.
Data processing agreement (template)
An Art. 28 GDPR template in English and German, covering subject matter, instructions, security measures, sub-processors, data subject rights, deletion, audits and transfers.
Details are in our legal documents. Security questions or a vulnerability to report? Contact us