What changed
- AnonymityA design that rigorously protects respondents
- TenancyIsolated per client company
- Release platformRapid deploys with AWS Amplify
Challenge
A SaaS for employee stress checks and organizational surveys has to firmly protect the anonymity of respondents (employees) while still giving HR and leadership aggregated results at a granularity that lets them read the state of the organization. The crux is balancing two conflicting requirements: "don't identify any individual, but make the trends visible." And because a single SaaS serves multiple client companies, the boundaries for tenant isolation and data handling had to be built in from the very start.
Approach
- 01 Mapped the workflow of a stress check and survey (distribution, response, aggregation, reporting)
- 02 Unified front-end and server-side processing with Next.js
- 03 Adopted AWS Amplify as the hosting and authentication foundation
- 04 Chose Neon (cloud Postgres) for the database and paired it with Amplify to secure a fast startup
- 05 Ensured per-tenant data isolation at the database-design level
- 06 Set the aggregation boundary at the smallest unit that cannot identify an individual (e.g. department × N or more people)
- 07 Organized the aggregation-report screens for HR and administrators around their workflow
Key success factors
- Balancing anonymity and analysis
- Setting a 'minimum of N people' as the aggregation boundary eliminated individual-identification risk at the design level.
- Rigorous tenant isolation
- We cleanly separated each client company's data boundary starting from the database design.
- Startup speed with Amplify + Neon
- Combining Amplify's hosting and authentication with Neon's managed database secured speed for the initial build.
- Reporting designed around HR work
- An aggregation-report UI aligned with administrators' workflow made it a tool that actually gets used in the field.
Solution
With the combination of Next.js + AWS Amplify + Neon, we quickly stood up the hosting, authentication, and data layers. We separated each tenant's data boundary at the database-design level, and by setting the aggregation boundary at the "smallest unit that cannot identify an individual," we achieved both anonymity and organizational analysis. Amplify's CI/CD gives it a foundation that keeps its momentum as features are added.
Facing a similar challenge?
Whatever your industry or scale, let's start with a conversation.
Contact form