What happens to workplace data

Individual answers belong to the person who gave them. Your organisation never receives them — not on request, not in a summary, not in a conversation.

Aggregate reporting requires at least 20 respondents. Below that we do not produce one, and we do not produce a rounded or softened version instead.

This is workplace education, not a clinical assessment. It does not diagnose anything and it is not a measure of anybody's performance.

There are two different things, and they are collected differently on purpose.

The session map. When somebody scans the code at the end of a session, they answer eleven questions about their own work and see their own map. Nothing is stored at that point. If they never ask for a copy, no record of their answers exists.

If they do ask for their map by email, we then store that email, their answers, and which session they came from — because they have asked us to send them something and, if they want, one follow-up question about ninety days later.

The leader's check. A manager or executive answering the Concentration Check is describing their organisation rather than themselves. Nothing is stored until they ask for the written summary; at that point we keep their business email, role, organisation, size band, industry and answers.

Because below it, a percentage stops describing a pattern and starts naming people.

In a team of six, “67% report regularly absorbing work that is not theirs” identifies four of them to anyone who knows the team. There is no wording that makes that safe, so we do not soften it — under twenty respondents there is no report, and we say so rather than producing a vaguer one.

The threshold is enforced in the software, not only in this document. It is not a setting.

Where a session has at least twenty respondents and the organisation has asked for it: which areas of work people most often report ending up owning, and which they most often report somebody else owning.

Patterns, never names. No individual maps, no identifiable subsets, no “your engineering team specifically” where that team is small enough to be a person.

Figures are described as what people reported, because that is what they are. Nothing here is a validated instrument and there is no norming sample.

NORM Rhythm is built by a licensed therapist, and a clinical practice sits alongside it. Workplace data is kept in a separate store from any clinical record and is never joined to one.

Taking a workplace session creates no patient relationship, no chart entry and no clinical record of any kind.

Every email we send about a map or a written summary carries a link that deletes it. Following that link removes the answers, the record of the session, and the email address itself — it does not merely unsubscribe.

You can also write to privacy@neurospirelabs.com and ask. There is no form to complete and no reason to give.

Once deleted, those answers are also gone from any future aggregate. Somebody who has withdrawn should not still be counted in a report given to their employer.

You can answer honestly. Your employer is not going to see what you said, the software will not produce a number small enough to point at you, and if you would rather none of it existed, one link removes it.

That is the whole arrangement, and it is the same one whether twelve people answer or four hundred.