Account protection
Surveyor uses established authentication and session safeguards to help protect account access.
SECURITY AT SURVEYOR
Security built into how we work.
This page explains the controls Surveyor uses, the boundaries of those controls, and what the product does not yet provide. Customers can use it to decide whether Surveyor fits a study's security requirements.
Controlled access
Workspace permissions are designed to limit actions and information to authorised members.
Data protection
We apply safeguards intended to protect customer and respondent information throughout the service.
Ongoing improvement
Security is reviewed as the product evolves, and credible reports are investigated and prioritised by risk.
ENCRYPTION BOUNDARIES
Encrypted transport and storage are not end-to-end encryption.
These terms answer different threat models. The table below describes Surveyor's current production model without implying that one control provides another.
Data in transit
Encrypted in transit
Production traffic between a respondent or workspace member and Surveyor is served over HTTPS/TLS by our hosting provider.
Data at rest
Provider-managed encryption
Survey and account data is stored on managed infrastructure with encryption at rest. Surveyor does not currently add a separate customer-held encryption layer to response fields.
Application access
Decrypted when authorised
The service must process readable data to render surveys, enforce logic, calculate analytics, and create exports. Server permissions, workspace roles, and database row-level policies restrict that access.
End-to-end encryption
Not currently offered
Surveyor does not currently provide customer-held keys or end-to-end encryption that prevents the service from reading response content. Do not use Surveyor for a study whose approval requires that model.
Report a security concern
If you believe you have found a vulnerability, report it privately and include enough information for us to investigate. Do not access data that is not yours, disrupt the service, use social engineering, or publish an unresolved issue.
Email the security teamSecurity reviews
Customers evaluating Surveyor may contact us with reasonable security, privacy, or procurement questions. Sensitive implementation details are not published on this page.
Contact SurveyorSecurity questions: security@surveyor.ng · Privacy requests: privacy@surveyor.ng