Privacy & Security
How we protect your team's privacy
The first question every employee asks about a benefits or EAP program is always the same: “Is this really anonymous?” If the answer isn't a believable yes, usage dies before it ever starts. Here's how we built Lazos so the answer is yes: by design, not by policy.
Anonymity isn't a feature. It's the foundation.
Most benefits programs fail long before anyone evaluates their content. They fail at the trust gap: employees assume that anything they say, ask, or use inside a company-provided tool can somehow make its way back to their employer. Faced with that doubt, the safest option is not to open the door at all.
That's why anonymity in Lazos is not a setting you toggle or a promise in a PDF. It's a structural decision: the system is built so that individual data can't reach your company. Not “won't”: can't. Trust that depends on someone choosing to behave well is fragile. Trust that's enforced by architecture isn't.
What stays with the employee
Everything personal in Lazos lives in the employee's private space: their conversations, the context about their relationships, their goals and their day-to-day check-ins. That information is used for one thing only: helping that person, with better advice and better-timed recommendations.
This data is never exposed to the employer, never attached to a name in any report, and never used to build individual profiles for the company. What an employee shares with Lazos belongs to them.
What HR actually sees
HR sees exactly one thing: how many people opened the app at least once in the last month. That's it. No names, no individual timelines, no usage per benefit, no wellbeing scores. Nothing else leaves the employees' private space.
And even that single number is never exact. We report it in ranges (“between 200 and 225”, “between 500 and 550”) so it can never be combined with other information to single someone out. Enough to know the program is alive; never enough to know anything about anyone.
Encrypted everywhere, even from us
All data in Lazos is encrypted, in transit and at rest. Identity information and usage data are kept strictly separated, access inside Lazos follows least-privilege principles with full audit trails, and we practice data minimization: we don't collect what we don't need to help the employee or produce aggregate insight.
The consequence matters more than the checklist: not even the Lazos team can read an employee's personal content. There is no admin panel into private conversations, no support backdoor, no “just this once”. And of course, the employer gets nothing either: the only thing that ever leaves the private space is anonymous, aggregated signal.
Zero-retention AI, guaranteed by contract
Lazos runs on AI infrastructure configured for zero data retention. Employee interactions are processed to generate a response and are never stored by the AI provider: nothing is written to their logs, nothing is kept, nothing can be reconstructed afterwards.
And this is not a handshake agreement. Our contracts with AI providers legally guarantee that no human can read employee interactions and that those interactions are never used to train or improve models. All of it over encrypted connections, on infrastructure that meets the strictest European data protection standards. If a provider can't commit to that in writing, we don't work with them.
What we will never do
Some things are worth stating explicitly. We will never sell or share personal data with third parties, not now and not ever; it is not a business model we have or will ever have. We will never run advertising inside Lazos. We will never give an employer individual-level reporting: no exceptions, no “premium tier” that unlocks surveillance.
If a capability would compromise employee anonymity, we don't build it. That constraint is not negotiable, because the moment it bends, everything else on this page stops being true.
Why this is good news for HR too
It might look like anonymity limits what HR can learn. In practice, it's the opposite. Programs employees don't trust get single-digit usage, and single-digit usage produces meaningless data. Programs employees trust get used daily, and daily use produces the honest, aggregate picture that no survey ever will.
Anonymity is not the price you pay for insight. It's what makes real insight possible.
See what your team would actually get
We'll show you the employee experience, the single ranged metric HR gets, and exactly how anonymity holds up end to end.
Request demo