Choose survey- and link-level authentication appropriate to the identity risk.
Overview
Choose survey- and link-level authentication appropriate to the identity risk.
Key points
- Survey modes include anonymous, verified email, and invitation only.
- Public-link modes include anonymous, optional sign-in, and required sign-in.
- The server should enforce the stricter combined rule.
- Verified identity supports safer response resolution.
- An email answer is not account verification.
Recommended procedure
- Classify the survey data and identity requirements.
- Choose the least permissive distribution and access model that meets the need.
- Protect links, tokens, exports, and integration secrets.
- Audit administrative actions and test isolation, retention, and recovery.
Troubleshooting
Sensitive data is exposed
Disable or rotate affected access, preserve evidence, and follow the incident procedure.
The policy is unclear
Keep the article in draft until product, engineering, security, and legal approve the contract.