Security and privacy

Your read is yours. Here’s who sees what.

Each person sees their own read, and your organization sees group results and how far along each person is. Here’s how that’s enforced.

Two colleagues reading closely at their laptops.

What everyone sees

Your working style, Jordan

Where you’re strong

You spot the flaw in a plan early.

Working with you

Bring a problem early, with a first idea.

Only you see this

  • Working styleYes
  • Competency readYes
  • Coaching chatsYes
  • Plan and goalsYes
  • 360 feedbackThemes, once 3 answer
  • Team resultsTheir team, 3 or more

A coach the person chooses and HR approves also sees their full assessment results, their plan and goals, their 360 answers without names, and short labels for any strain Sphere notices. Never what they’ve said to Sphere. Anyone can turn off the tips colleagues get about working with them. What HR sees is the default setting: only a Client Executive can change it, and anyone can keep their own results out of it in Settings.

How it’s enforced

Private by default

Each person sees their own results. Your organization sees group results, with small groups left out, and by name only how far along each person is, never what it's about. In the default setting, HR never sees a named person's scores.

Locked down in the database

Row-level security in the database ties each person's records to their own account.

How scores are made

Assessment scores come from fixed scoring rules, and Sphere explains what a result means. What an AI reads in a career story or 360 comments can add to a score, and never carries one alone.

Answers stay anonymous

360 and pulse answers never carry a name. Themes appear only once enough people answer, shuffled so nothing points back to anyone.

Encrypted everywhere

TLS 1.2 or higher in transit and AES-256 at rest. Credentials for the systems you connect get a second layer of AES-256-GCM encryption.

Consent by country

Opt-in can be required for everyone or for chosen regions, and people marked EU, EEA, UK or Quebec start on it. Under opt-in, no answer counts as no, and that person's results stay out of what your organization sees.

Every change on the record

Changes admins make to privacy settings are written to an audit log: who, what, when.

Delete anytime

Anyone can delete their account and everything in it, uploaded files included. People do it from their settings, and admins ask us.

For your security review

Ask for our data security brief. Send us your questionnaire and we’ll complete it, then walk your team through it on a call.