The confidentiality paradox: reassuring the manager without blinding HR

In short. A manager only opens a tool about a conflict if they're certain no one in the company will read it. But the HR leader who pays for it won't deploy a black box. We reconcile the two with a simple principle: the individual is sacred (never the content or the identity), the collective is measurable (aggregated, anonymous signals). Confidentiality isn't an obstacle, it's the condition of value.

The double bind no one dares name

There's a tension few HR-tech vendors dare to say out loud. Here it is, bluntly.

A manager will never open an app to talk about a conflict, a doubt or a tension if they think a single person in the company could read what they write. Confidentiality isn't a nice-to-have, it's the entry condition.

But on the other side, an HR or training leader won't deploy a black box. They commit a budget, they have to account for it, they want to know whether the tool does anything.

These two needs seem mutually exclusive. And it's precisely this contradiction that kills the adoption of most tools: either they reassure the manager to the point of being useless to HR, or they give HR visibility at the cost of the manager's trust.

The wrong reflex, which we refuse

The classic temptation is to give HR access to conversations, or a dashboard along the lines of "who has problems in the team." That's a mistake, for two reasons.

First, it's surveillance, however it's dressed up. And a manager who feels watched will never tell the tool the truth. So the tool becomes useless.

Second, it's a product red line. At Vikl, there's no role that lets an employer, an HR leader or a manager open the content of an individual situation. No scoring of people, no surveillance, no sharing without consent. It isn't a configuration option: it's baked into the architecture.

The guiding principle: the individual is sacred, the collective is measurable

The way out of the double bind fits in one sentence: the content and identity of a situation stay private, but collective usage can be measured anonymously.

On the individual side, the manager is protected by design. No one in the company can read their exchanges. Separation is enforced at several levels (strict separation between organizations, application-level access control, and isolation down into the database), and no company-side admin role grants access to conversation content.

On the collective side, HR never sees a situation, an identity or any content. They see aggregated, anonymous signals at the organization level: the number of active members, the volume of exchanges over a period, the average per member, and the trend over time. Enough to answer the only question that matters to them at this stage: is the tool being adopted and used?

What HR really gets, and what it doesn't

Let's be precise, because the nuance is what makes it credible.

What HR gets today: proof of adoption and usage, aggregated and anonymous. No names, no content, no conversation identifiers, ever. These indicators are anonymous by construction: they're computed at the organization level, with no per-individual breakdown.

What HR doesn't get, and what we won't invent for show: there's no named dashboard, no detection of "who's struggling," no scoring of people. A finer reading of relational culture or impact is something we approach cautiously, precisely because any more detailed aggregate must first guarantee that no individual can be re-identified. Until that guarantee is absolute, we'd rather show less.

The reversal

This is where it all flips. The manager's confidentiality isn't a bug to work around in order to reassure the buyer. It's the very condition of value.

A manager who knows they're being watched waters things down, or doesn't open the tool. The data becomes false, usage collapses, and HR ends up with a precise dashboard… of nothing. Conversely, a manager who knows they're protected tells the truth, uses the tool, and grows. It's that real adoption that produces the only aggregate signal worth anything.

In other words: confidentiality isn't in tension with HR's interest. It's its source. It's by protecting the individual that you make the collective measurable. That's how, at Vikl, we stopped choosing between the two.