Your team can be honest, because their data stays theirs.
Anonymity isn't a setting we bolt on — it's the architecture. Individual responses are never attributable, everything lives in India, and AI only ever sees the aggregate.
Security you can explain to your team in one sentence.
No jargon wall. Here's exactly how PulsePoint protects the people answering and the company asking.
Anonymous by design
Responses are decoupled from identity the moment they're submitted. Results are only ever shown when 5+ people answer, and no one — not managers, not HR, not us — can trace an answer back to a person.
Encrypted & in India
Every byte is encrypted in transit (TLS 1.2+) and at rest (AES-256), stored only in AWS Mumbai (ap-south-1). Your data never leaves the country. On any paid plan, bring your own encryption key.
Least-privilege access
Role-based access means managers only ever see their own team's aggregates, never individuals. Every sensitive action is written to an immutable audit log. SSO available on Enterprise.
The link between a person and their answer is broken on purpose.
People answer honestly only when they trust the promise. So we engineered it to be true, not just stated.
Encrypted, resident in India, and yours to control.
Encryption everywhere
TLS 1.2+ in transit; AES-256 at rest on encrypted volumes and backups. Secrets and tokens are hashed, never stored in plaintext.
Data residency: India only
All customer data is stored and processed in AWS ap-south-1 (Mumbai). It does not leave Indian borders in the normal course of operation.
Bring your own key (all plans)
Supply your own AES-256 key from AWS KMS, Google Cloud KMS, or Azure Key Vault. Revoke it and your data becomes unreadable — to everyone, including us.
Retention you decide
Cancel and your workspace drops to read-only, then data is retained for 90 days and permanently deleted. Export anytime; request deletion under the DPDP Act.
Role-based access & audit
Roles (hr_admin, manager, observer) scope every view. Managers see only their team's aggregates. Sensitive actions are written to an append-only audit log.
SSO & provisioning (Enterprise)
SAML single sign-on and enforced 2FA on Enterprise, so access follows your identity provider and is revoked the moment someone leaves.
Claude reads the aggregate — never the person.
PulsePoint uses Claude (Anthropic) to write the weekly narrative and surface themes. It only ever receives pre-aggregated, anonymised snapshots — the same suppressed, 5+-respondent numbers you see. Individual responses and free-text verbatims are never sent to any model.
Every subprocessor, and where they sit.
The third parties that help run PulsePoint, what they do, and the region your data touches. We notify customers before this list changes.
| Subprocessor | Purpose | Data touched | Region |
|---|---|---|---|
| Amazon Web Services | Hosting, database & storage | All application data (encrypted) | Mumbai · ap-south-1 🇮🇳 |
| Anthropic (Claude) | AI narrative & theme generation | Anonymised aggregates only | US · no-training |
| Razorpay | Subscription billing & payments | Billing contact & payment refs | India 🇮🇳 |
| Amazon SES | Transactional email delivery | Recipient email & message body | Mumbai · ap-south-1 🇮🇳 |
| MSG91 | SMS delivery (opt-in channel) | Mobile number & pulse link | India 🇮🇳 |
Registered in India, run to Indian law.
Operated by FirstHR Services Pvt. Ltd. (Kokum HQ), Mumbai — a GST-registered Indian company, aligned to the Digital Personal Data Protection Act, 2023.
DPDP Act 2023 aligned
Consent, purpose limitation, data-principal rights (access, correction, erasure), and breach notification are built into the product and our processes.
DPA on request
A Data Processing Agreement covering roles, sub-processing, and security measures is available for every paid customer — signed before you go live.
Grievance Officer
A named Grievance Officer handles data-related complaints within statutory timelines. Details are published in our legal centre.
Backups & recovery
Automated encrypted backups with point-in-time recovery, tested restores, and monitored infrastructure so your programme keeps running.
Found a vulnerability?
We welcome responsible disclosure. Email security@pulsepoint.in with details and steps to reproduce — we acknowledge within 2 business days and won't pursue good-faith researchers. Please don't access others' data or run automated scans against production.
See it for yourself — free, no card.
Run your first anonymous pulse this week and watch the 5-response threshold and aggregates work in practice.