ValidatedScale runs your validated instruments as rigorous studies. The protocol locks at launch, the field is monitored against a k-anonymity threshold, and the evidence exports arrive ready for analysis, with a codebook your statistician won't have to fix.
Data is stored and processed in the EU. No transfer clauses to negotiate.
Purpose, retention, and lawful basis are declared in the protocol, not in a PDF afterthought.
Every report enforces a minimum group size. Below threshold, values are suppressed and say so.
Versioned consent text and timestamped agreement, ready for your IRB or ethics board.


The protocol a researcher writes, and the sheet a respondent sees. Synthetic data.
Your people sign in with their workplace account. No new passwords to manage.
Import people and groups from your organization's directory, with admin consent.
Invitations and reminders from a verified sender domain, with delivery tracking.
Bring a cohort from any spreadsheet. Preview first, import when the rows are clean.
Exports ship with a codebook that documents every variable, so any stats tool reads them.
Any instrument you hold the rights to imports as a first-class citizen.
A study begins as a document: the instrument you hold the rights to, the identity mode, the consent text, the scoring rules. When you launch, the protocol locks. What you report later is exactly what you declared.
Anonymous longitudinal linking uses self-generated participant codes, so waves connect without anyone holding a name.
Share open links or send email invitations. The console shows what a defensible dataset needs: response counts, unit coverage against the k threshold, and nothing that identifies an individual.
Scores are computed by the locked scoring rules and versioned. Re-open a study in two years and you get the same numbers. Waves compare side by side, linked by participant codes no one can reverse.
Exports arrive ready for analysis: clean CSV, labels SPSS understands, and a codebook that documents every variable, recode, and suppression.
Anonymous longitudinal linking via self-generated codes, consent records your IRB will accept, and exports that go straight into analysis. EU hosting means no data-processing agreement odyssey.
White-label workspaces per client, legally mandated assessments run to protocol, and reports with the suppression rules written in, ready for compliance review and defensible in front of any works council.
Monitoring wave over wave, on dashboards where the protection is structural: nobody, including you, can re-identify an individual from a report.
Student wellbeing pulses, course evaluations, PhD programme monitoring. The anonymity is structural, so students actually answer.
Engagement and workload tracking employees can trust: nobody, including you, can drill a dashboard down to one person.
Patient-experience and staff safety-climate surveys with consent records and retention rules an auditor will accept.
Workforce stress monitoring for police, emergency services and schools, with governance that survives procurement. EU-hosted.
Run client studies in white-label workspaces; deliver defensible reports instead of spreadsheets.
If you measure the same people twice and need to link answers without knowing names, this is the instrument for it.
Bring any questionnaire you have the right to use. The platform runs it with the same rigor.
Respondents see one calm sheet: the study in plain words, consent before a single item, and a progress rail that tells the truth. No accounts, no app, no dark patterns to inflate completion.
In anonymous studies they build their own participant code from stable personal facts. It links their waves without ever identifying them.
Your answers are anonymous. Results are only reported for groups of 5 or more. You can stop at any time; partial answers are discarded.
Stored and processed in the EU, full stop.
Row-level security in the database, failing closed. One workspace can never read another.
The reporting threshold can be raised, never lowered. It is a constraint in the engine, not a setting.
Every consent text is versioned; every agreement is timestamped against its exact version.
Each study declares how long data lives and what happens then. Anonymization is the default.
Who did what and when, recorded across setup, launch, collection and export.
A built-in withdrawal workflow: requests are tracked, approved and executed, not emailed around.
A signed data-processing agreement and a methods description for your ethics board, on request.
Formal certifications are on our roadmap. The mechanisms above are in the product today, and we would rather show you how they work than show you a logo.
One study, one wave. For trying the method on a real question.
€ — / studyLongitudinal studies, collaborator seats, invoicing that fits grant budgets.
€ — / yearWhite-label client workspaces and reports that stand up to compliance review.
€ — / clientPricing is being finalised with pilot partners, so ask us for current numbers.
We'll give you a description of the platform ready to paste into your methods section: data flows, anonymity model, consent handling, hosting. Plus a signed DPA and whatever your ethics board asks for.