Wellbeing your people will actually use, because we don't tell you about them.

Cohorts smaller than 5 members are mathematically suppressed before they reach an admin screen.

Not "fewer than five." Zero. The architecture cannot surface a single member to HR. Ever.

Every privileged action is recorded with who did it, what they did, to whom and when, and your admins can read the whole ledger in the console. An erasure additionally returns a verifiable proof hash.