Trust & security
Built to protect the people in the data.
Performix measures how teams work — which means it touches the most sensitive data an organization holds. People only tell the truth when they trust that the truth can't be traced back to them. So anonymity isn't a promise on a survey here; it's engineered into how the system computes. This page is the plain-language version. The working proof — including a real attrition cell suppressed below the floor rather than exposed — lives in Protected Feedback.
01 · Tokenization
Names never enter the analysis. Stable tokens do.
Raw identities never reach the model. Every person becomes a stable, meaningless token — the same person always maps to the same token, so trends over time still work, but the token can't be turned back into a name.
MoreHide
01 · Tokenization
Names never enter the analysis. Stable tokens do.
Raw identities never reach the model. Every person becomes a stable, meaningless token — the same person always maps to the same token, so trends over time still work, but the token can't be turned back into a name.
Think tk_9f3k2instead of “Maria in Accounts.” The mapping is deterministic and one-way: consistent enough to track a team's trajectory across measurements, irreversible by design so no reader can walk a result back to a person. Tokenize first, then gate — together they make anonymity structural rather than a label.
02 · The minimum-group-size gate
If a group is small enough to guess who said what, the system shows nothing.
A hard minimum-group-size floor runs before any summary is allowed to render. Below the floor, the surface shows a 'below threshold' state — not a number.
MoreHide
02 · The minimum-group-size gate
If a group is small enough to guess who said what, the system shows nothing.
A hard minimum-group-size floor runs before any summary is allowed to render. Below the floor, the surface shows a 'below threshold' state — not a number.
The gate is structural: it executes before a result is composed, so no number from a too-small group ever crosses the boundary. In the from-to attrition view, a destination with too few leavers renders honestly as suppressed rather than exposing a tiny, identifying count. See it working on real-shaped (seeded, illustrative) data in Protected Feedback.
03 · Aggregation
Leaders see patterns, never people.
The product output is one accountable card per team — the binding condition, the evidence, a recommended action. It is a read on the system, not a file on a person.
MoreHide
03 · Aggregation
Leaders see patterns, never people.
The product output is one accountable card per team — the binding condition, the evidence, a recommended action. It is a read on the system, not a file on a person.
Performix is a measurement instrument for conditions — Capability, Alignment, Motivation, Support — at the team level. There is no individual scoreboard, no ranking of named employees, no manager dashboard of who-said-what. The unit of analysis is the team, and the deliverable is a decision about the team.
04 · Honest status
What's structural today — and what we're still wiring up.
We don't put a certification seal on this page that we haven't earned. Here's the honest line.
MoreHide
04 · Honest status
What's structural today — and what we're still wiring up.
We don't put a certification seal on this page that we haven't earned. Here's the honest line.
True today, by construction: deterministic tokenization, the minimum-group-size gate, and team-level aggregation are how the engine computes — not policies we ask you to trust, but properties of the pipeline.
Not claimed:Performix is pre-launch and working with design partners. You won't find a SOC 2 or ISO badge here, because that audit isn't done — and putting the seal up before it's earned is exactly the kind of thing this product exists to call out.
In conversation:hosting, encryption, retention windows, sub-processors, and a DPA are the questions your security team will ask, and we'll answer them directly as part of a design- partner engagement rather than gesture at them here.
Have a security review to run?
Bring your questions. We'd rather walk your team through the architecture than hand you a badge.