RS MEASURE Start a round

Polls ask. A ballot protects.

The secret ballot
for teams.

Ask a group how it’s really doing — and read the answer as a group, never as individuals.

Start a round

No employee accounts · Group results only · Five-response floor

One team · one round

Quiet enough
for the truth.

It’s Monday standup. You go around the room. Everyone says “fine.” You’ve heard “fine” every week for a month, and you still don’t know if it’s true.

So the lead creates a round — three short questions, a smiley scale — and puts a QR code on the wall.

A round takes a minute to make. No accounts for the people answering.

Five private workplace ballots enter one sealed box; a single collective red signal emerges.
Five private answers. One shared picture.
A colleague accesses a round at the workplace, five colleagues contribute privately, and the group discusses one shared result.
Access the round · answer privately · act on the shared picture
Five colleagues produce one protected group result; with only four colleagues, the result remains closed.
Five can speak as a group. Four reveal nothing.

The privacy floor

Five phones come out. One quiet minute. Then the answer comes back — not five answers, not a leaderboard.

3.8
One number, for the team

When fewer than five have answered, there is nothing to show — just dashes. The number only appears once it can stand for the group, never for a person.

Next month

A pulse,
not a survey.

Run the same round again, and the two numbers become a trend line.

So on Monday, the lead brings the number to standup: “We’re at 3.8 on how we’re holding up — let’s talk about it.” No name attached, no one on the spot — just a number the team owns, out loud. The next round, it’s 4.1.

The same workplace reads its protected group pulse across three new rounds and brings it into a shared conversation.

Trust architecture

How protection works

Measure separates access, response and reporting so the workplace can receive a useful collective picture without building an employee trail.

  1. 01Fresh round codeOne entry point for this round only.
  2. 02Response without an accountNo employee login or stable respondent profile.
  3. 03Protected aggregationThe reporting floor is applied before release.
  4. 04Group resultThe workplace sees the collective picture, not an individual row.

Identity boundary

People answer without an employee account or stable respondent identity. A new code is issued for every round; old posters do not enter later rounds.

Publication floor

A result requires at least five responses for each reporting slice and trend point. Below the floor, the output remains closed.

Round separation

Codes are replaced between rounds. Measure does not create a longitudinal respondent profile that connects a person through time.

Operational boundary

Measure runs on an EU instance. Response data is deleted after 180 days and is never used to train AI.

We believe the secret ballot belongs at work. Measure turns private participation into a result the group can own—and does not release that result below the five-response floor.

— Runi Services