Anonymous pulse surveys. Responses carry no identity. Only a separate completion receipt tracks who has answered.