Employee trust is a product requirement, not a disclaimer.

Each diagnostic covers only the topics the customer approves. Tezox does not run open-ended exploration or introduce conversation topics beyond the approved scope.

Conversation topics are reviewed and signed off by the customer before any participant invitation is sent. No question reaches a participant without explicit HR approval.

Tezox identifies patterns and recommends actions. It does not make hiring, firing, promotion, compensation, disciplinary, or performance-management decisions. Every consequential decision requires human review.

Every participant receives a clear explanation of the diagnostic purpose, topic scope, and how their response will be handled — before they answer the first question. Participation is voluntary.

Individual responses are never surfaced. Findings are reported only for groups that meet the minimum participant threshold. Groups below threshold are noted but not broken out.

Findings are attributed to themes and populations, not to individuals. Representative evidence is presented as synthesized themes, not individual quotes that could identify a participant.

Participants may contact HR to dispute or correct information about how their participation was represented. Disputes are acknowledged within two business days and resolved within ten business days by the customer's HR team, with platform support as needed.

Conversation data is retained only for the period specified by the customer during configuration. Customers can specify shorter retention periods for sensitive diagnostics.

Customer data is logically isolated at the application layer using per-tenant data partitioning. Each customer's conversation data, findings, and reports are stored in dedicated, scoped partitions. One customer cannot access another customer's data through the platform, the API, or the reporting layer.

Data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management service with automatic rotation.

Actions taken within the platform — approvals, report access, data exports — are logged and auditable by the customer. Audit logs are retained for the duration of the customer contract plus 12 months and are accessible to customer administrators through the governance dashboard.

Different users see different things. An HRBP may see full findings; a business leader may see the action plan only. Access levels are configured by the customer.

HR reviews diagnostic scope, participant communications, and findings before anything reaches business leaders. The platform does not bypass the HR function.

Conversations that suggest a situation requiring human investigation are flagged for HR review — not acted on autonomously. Tezox routes concerns; it does not resolve them.

Tezox does not attempt to infer mental health status, medical conditions, personality traits, or psychological profiles from participant responses.

Every finding carries a confidence rating. Low-confidence findings are flagged as such and are not recommended as the basis for consequential decisions without additional evidence.

Every report includes a dedicated limitations section. Findings without acknowledged limitations would not be honest — and they would not be useful.

The customer is responsible for communicating the diagnostic purpose to their workforce, complying with applicable employment and privacy law, and ensuring that findings are used appropriately.

For diagnostics with employee-relations implications, Tezox recommends that findings are reviewed by the customer's legal counsel before any action is taken.

Tezox is designed to support customer compliance with GDPR, CCPA, and applicable employment-privacy regulations. The platform provides data-retention controls, participant consent mechanisms, data-export and deletion capabilities, and processing records that customers can use to meet their regulatory obligations. SOC 2 Type II certification is in progress.