.svg){kind=small}
Step 01
Respondent's browser
Encrypts the answer with your public key before it leaves the device.
Your survey data stays yours, even from us
Responses get encrypted in the respondent's browser, and only your private key can unlock them. We never hold your keys, so we can't read your data. Independent SOC 2 Type II and ISO 27001 audits back every claim on this page.
Trusted by leading brands for secure, privacy-first surveys
Everything your security review asks, answered on one page
Security
- Zero-knowledge, end-to-end encryption
- TLS 1.3 for all data in transit
- Annual third-party penetration test
- Default-deny cloud firewalls on GCP
- Written incident response plan
- Annual disaster recovery exercise
Privacy
- No personal data collected by default
- No trackers or IP logging on forms
- We never sell personal information
- Signed Data Processing Agreement
- Named Data Protection Officer
- EU data residency on request
Compliance
- SOC 2 Type II
- ISO/IEC 27001:2022
- HIPAA, with BAA on Team plan and up
- GDPR and CCPA
- Third-party FERPA audit
- Quarterly internal audits
Access and data control
- SAML 2.0 SSO, including Okta
- You hold your encryption keys
- MFA on all production access
- Role-based, need-to-know staff access
- Access logs kept for at least one year
- Delete your data any time
Encrypted in the browser. Unlocked only by you
Zero-knowledge encryption
Every account gets its own TweetNaCl key pair at signup. Each survey gets a fresh key pair derived from your account's private key. Data stays encrypted at rest, backups included. See how the encryption works
Default-deny cloud infrastructure
BlockSurvey runs fully on Google Cloud Platform and Render. Firewalls block all inbound traffic unless we open a port on purpose, and production runs apart from development and testing.
Tested by outside experts every year
An independent firm runs a penetration test on our web application every year. We fix findings under a written patch and vulnerability management policy, and code review plus CI security checks gate every release.
A plan before anything goes wrong
Our incident management policy covers detection, containment, recovery, and review. If an incident affects your data, we notify you within [48 / 72] hours. Encrypted backups get an integrity check before every restore.
From respondent to you, encrypted the whole way
Step 02
Encrypted storage
Holds ciphertext only. We keep no keys, so we can't open it.
Step 03
Your browser
Decrypts the response with your private key. Only you see it.
Your data is never our product
We don't sell personal information. We don't use your responses for ads, model training, or anything you didn't authorize.
No personal data unless you ask for it
Surveys collect no IP addresses, device IDs, or trackers by default. Test it yourself: create a survey, submit a response, and export the results. Read our Privacy Policy
US hosting, with an EU option
Data lives on Google Cloud in the US region by default. Need EU data residency for GDPR, academic, or enterprise work? We offer custom deployments in the EU region.
Your rights, honored
Request a copy of your data or delete it from your account at any time. Vendors that help with billing, email, and support sign Data Processing Agreements and act only on our instructions. Read our Data Processing Agreement
Audited inside and out, every year
Independent audits
SOC 2 Type II and ISO/IEC 27001:2022, verified by outside auditors each year. We also run internal audits every quarter.
Built for sensitive research
HIPAA safeguards with a signed BAA on Team plans and up. A third-party FERPA audit covers student data for schools and universities.
People you can vet
Our CTO serves as CISO and Data Protection Officer. Every team member passes a background check, signs an NDA, and trains on security and privacy each year.
AI features that never learn from your data
Our AI runs in a stateless mode. It never trains on, logs, or keeps what you give it.
No training on your data
Your responses never enter any internal or third-party training pipeline. Read our AI policy
Personal data filtered first
Automated filters strip personal and health information before any text reaches a model.
Analysis on our own servers
AI data analysis runs on custom models we host. Question generation may use providers such as OpenAI, with filtered text only.
You stay in charge
Every AI suggestion is optional. You choose which outputs to keep.
Security documents for your review team
Read our public policies and agreements.
Have your own security questionnaire? Send it over and our security team will fill it in for you.
Request questionnaire reviewSecurity and privacy questions, answered
- Yes. BlockSurvey encrypts every response end to end, and only your private key can decrypt it. Independent auditors check our controls every year for SOC 2 Type II and ISO 27001.
Send us your security questionnaire
Have your own security questionnaire? Send it over and our security team will fill it in for you.