Security
Nobody reads individual answers from new starters, line managers and buddies, and the starter knows that from the first email. Accolgo’s software turns the answers into a color, the reasons behind it and a suggested next step, which is what lets a line manager spot someone struggling and have a conversation in time.
A starter’s note to their manager reaches the head of people only if the next check-in is still not settling, and when Accolgo picks up a safety concern in a note, it also goes to HR. Beyond those note routes, the private word is the part the database walls off. If a starter asks to speak with someone senior instead of their manager, that request is walled off in the database itself: it reaches the head of people and any named senior contacts, and the manager cannot reach it through the app, an export, or a direct query. The one exception is an organization with nobody senior besides the manager, where the starter is told, before sending, that it goes to that manager by name.
Line managers and buddies without a work inbox will soon be able to get their check-ins by WhatsApp instead of email. New starters get theirs by email.
How it is built
Each organisation's data is separated in the database itself and checked again by the application, so one organisation cannot see another's.
Check-in links are randomly generated, single-use tokens that expire after 14 days. A guessed or shared URL opens nothing.
Line managers see their own team. The Head of People sees their organisation. Nobody reads individual answers from new starters, line managers and buddies. Accolgo’s own platform operators can see that a check-in and a note exist, not their content, on an internal page open only to Accolgo’s own staff.
A private word with someone senior reaches the head of people and any named senior contacts, never the manager, unless the manager is the only senior person available, in which case the starter is told this before sending. It is stored in the database like other check-in answers, and access to that data is restricted to Accolgo's own authorised technical staff, who need it to run the service.
Encryption, how changes are reviewed, and how the service is monitored are set out in full in our security policy. Read the security policy
Where your data lives, and what it is used for
Check-in answers are stored in the UK, in London. A few providers handle limited data in the United States, as our privacy notice explains.
See the full list of providers we use (sub-processors)We never sell your data or use it for advertising. Decisions about a person are always taken by someone at your organisation, not by our software.
The detail, and reporting a concern
The full security policy sets this out in detail. Our data processing terms and retention schedule are linked in the footer of every page. If you believe you have found a vulnerability, email dermot@clickonic.co. We welcome responsible disclosure and are glad to hear from you. We acknowledge reports promptly, we do not take action against good-faith researchers, and we simply ask that you steer clear of anyone else’s real data while demonstrating an issue.