Security for Pilot Experiments

Pilot Overview

LaunchGuard360™ pilots (typically 4–6 weeks) are designed to validate sustainment practices with minimal risk. We collect feedback via anonymous paper forms, neutralize quickly, and retain only anonymized insights. This approach minimizes data exposure while demonstrating the Closed-Loop Sustainment™ value.

Pilot Scope & Data Types

• Collected: Anonymous rollout feedback, high-level context (e.g., department or role type), and timing for governance cycles.
• Not Collected: Names, emails, personal identifiers, performance evaluations, or opinions about specific individuals.

Where pilots intersect with regulated contexts (e.g., healthcare/education), our process avoids PHI/PII by design.

Anonymous Collection Method

• Feedback captured on paper forms to avoid digital identifiers and tracking.
• Forms are handled in controlled environments and routed promptly for neutralization.
• No user accounts or digital identity are required for submission.

Neutralization

Raw feedback is converted into anonymized, actionable insights:

• Identifiers are removed or generalized.
• Responses are aggregated into themes and prioritized by urgency.
• No single response remains traceable to a specific person.

No Raw Data on Laptops

Raw feedback data is not stored on employee laptops or desktops. If a digital step is required during neutralization, raw data exists only ephemerally in a secure processing environment and is deleted immediately after insights are produced.

Data Lifecycle & Deletion

Ingest → Neutralize → Delete Raw → Retain Insights

• Raw inputs are processed only long enough to generate anonymized insights.
• Raw copies are destroyed immediately after processing (paper destruction or secure deletion).
• Only anonymized insights are retained for governance and trend analysis.

Access Controls (Pilot)

• Limited staff access to handle paper forms and produce insights.
• Need-to-know principle for viewing neutralized outputs.
• Basic logging of collection, neutralization, and destruction events.

Encryption (Where Applicable)

• Neutralized insights stored in secured repositories protected by standard access controls.
• If any digital transit occurs, it uses TLS (HTTPS).
• At-rest encryption applies to the storage systems holding neutralized insights; raw data is not retained digitally.

Because pilots use paper-first, anonymous collection with immediate raw-data destruction, heavy endpoint controls are typically unnecessary.

Client Responsibilities (Pilot)

• Protect collected paper forms until LaunchGuard360™ receives them for neutralization.
• Avoid adding identifiers (e.g., names, emails) to forms.
• Designate a governance contact to receive neutralized insights and route actions.

FAQ

Do you encrypt laptops for pilots?
We avoid storing raw data on laptops. If any device touches raw data during processing, it is temporary and deleted immediately after neutralization.

Can we run a digital-only pilot?
Yes, but to keep risk minimal, we recommend paper-first submission for pilots. Digital pilots require confirming equivalent anonymization and deletion controls.

What about HIPAA/FERPA?
Our pilot method avoids PHI/PII collection. If your context requires it, we’ll confirm scoping to ensure no regulated identifiers are captured.