sumvadis
🇪🇺 Hosted in the EU · Anonymous by design

A European platform for deploying surveys

On-demand campaigns — the protection regime is chosen first, then enforced.

Sumvadis runs survey campaigns on its own EU infrastructure. Every campaign declares its protection regime up front — anonymous, pseudonymous or identified — and that choice determines what may be collected, what is stored, and what leaves the platform when the campaign closes.

The protection regime comes first

🔒 Anonymous

No account, no e-mail, no IP kept — nothing stored can identify a respondent. At campaign close, any combination of characteristics shared by fewer than five respondents is suppressed (k-anonymity) before any export.

🎫 Pseudonymous

Participants are known by a code only they hold — codes are derived cryptographically, never stored. Designed for repeated measures (retest) without ever naming anyone.

🪪 Identified

Consent comes first: every collected field is declared when the campaign is created, and data stays on the EU data plane. The survey owner acts as data controller (see Terms).

What the platform enforces

🇪🇺 EU data residency

The data plane lives in the European Union (Frankfurt) — per campaign, by default.

🔒 Anonymous by construction

No login, no e-mail, no IP kept. Raw data lives in the EU and is k-anonymised (rule of five) when the campaign closes.

📱 Scored on the phone

Each participant’s profile is computed by our native engine on their own device — the result never has to leave it.

🚫 No cookies, no trackers

No cookies, no trackers, no analytics — on this site or in the app. Only your device’s local storage, for strictly functional needs.

📊 Live restitution

Join-QR, live counter, and the room’s aggregate profile — refreshed as answers arrive, without exposing anyone.

🌐 Multilingual by design

English, French and German across the whole journey — instruments, screens and restitutions.

Proven under load

Load-tested: 2000 simultaneous submissions absorbed in 12.7 s — zero loss, zero identifiers.

2000simultaneous submissions (load test) 12.7 sto absorb the full burst (load test) 0identifiers stored or logged

How a deployment works

The regime first

The campaign declares its protection regime, its instrument and its languages — this frame is set before anything is collected.

Configuration

Questionnaire, additional fields and consent are frozen in the campaign definition when it is created.

Participation

A link or a QR code; everyone answers on their own device, and each profile is computed on that device.

Close

The campaign closes; the dataset — k-anonymised in the anonymous regime — is exported for aggregate analysis.

Standards and transparency

🪪 Media provenance (C2PA)

AI-generated media served by the platform carry C2PA-signed provenance and a visible AI mark.

🔐 Responsible disclosure

A public security contact (RFC 9116 security.txt), acknowledgement within 72 hours.

📐 Reproducible analyses

Analyses are produced by scripted, versioned tools — reproducible, with no manual case-by-case inspection.

Every guarantee, with its proof →