Encrypted in transit and at rest
TLS 1.2 or higher for every connection and AES-256 encryption for stored data and backups.
Privacy & Trust
Recognition people trust, because there is nothing hidden behind it
Grati5 is built on a simple rule: help people appreciate each other, and help the company see patterns, without ever turning either into surveillance.
What we collect
Only what recognition needs
What Grati5 holds
- Name, work email, team, manager and location from your HR records
- Recognitions people choose to send, with value, points and visibility
- Reward redemptions and delivery status
- Basic usage logs for security and support
What Grati5 never touches
- Chat channels, direct messages or email content
- Keystrokes, screen time or activity tracking
- Performance ratings or compensation data
- Anything used to score or rank individuals
Who sees what
Visible as the sender chooses
Every recognition is posted to the company feed, a team channel or kept private between the recipient and their manager. Admins set defaults but cannot make a private recognition public.
Insights
Team level, with a hard floor
Insights are aggregated at team level. Groups below five people are merged. There is no individual engagement score and no disengagement flag, anywhere in the product.
Security
Controls your security team will ask about
Role-based admin access
Admin, HR, manager and employee roles with the least access each needs. Sensitive actions are logged.
Minimum group size
Insights below five people are merged into a parent group, everywhere, including exports.
No communication monitoring
Grati5 reads only what people post in Grati5. Never chat channels, email or files.
Data residency options
Enterprise customers can choose the region where their data is stored.
Audit trail
Every admin change to values, points, visibility or access is recorded and exportable.
Does Grati5 use our data to train AI models?
No. AI features run through enterprise providers under terms that prohibit training on customer data and limit retention to the request itself.
Can an employee see what is held about them?
Yes. Every employee can view and download the recognitions they have sent and received, and their reward history, from their profile.
What happens to data when we leave?
You can export everything at any time. After the contract ends, customer data is deleted from production systems within 30 days and from backups on their normal cycle.
Can you support our security review?
Yes. We complete security questionnaires and share our policies under NDA. Enterprise customers get a named contact for the review.
Start the ripple
Culture insight your people will actually support.
See Grati5 with your own values and team structure. We will show you where recognition flows today and where it is quiet.