Five pillars. Two are shipped and already running in production in our own response engine. Three -- the open self-serve signup, the full type registry, and live billing -- are in development. Each is marked honestly.
One authoring surface, aimed at any question type
The pitch is breadth: surveys, quizzes, polls, forms, assessments, intake, voting, RSVPs, applications, NPS, feedback, and waivers, all built on one registry of question types instead of a different tool for each. Today the database wall admits five question types at authoring -- open text, a 1-to-5 scale, single-choice, ranking, and conjoint -- and that is a real constraint, not just a client-side check. Three of those shapes accept a submitted answer today (text, scale, and choice); ranking and conjoint refuse answers until their answer wall lands, so the submit lane does less than the authoring wall allows and we state both numbers rather than average them. The self-serve builder composes those shapes into the formats above; a scored quiz, a wider NPS scale, and a signature capture each need an answer shape the registry does not enforce, and we say so plainly rather than badge them available early.
Five question types enforced at authoring (migration 1164); three accept an answer today
Sign up, create, distribute, analyze
The whole loop lives in one place: ask us to open an account, build a question or a whole set, share a link, and read what comes back in a response feed. Authoring is already open: any signed-in staff or studio account can author questions and question sets today, on the engine running in production. What does not exist is a PUBLIC SELF-SERVE SIGNUP -- there is no form on this page that opens an account, so an account is opened by us, by hand. That signup is what this page is pitching; the authoring surface behind it is not waiting on it.
Authoring open to staff and studio accounts -- no public self-serve signup
A response engine with no identity column, by construction
There is no identity column in the response table at all -- no name, email, IP address, account, browser fingerprint, or session column. Not hidden, not masked, simply never created, so a future bug cannot fill in a column that does not exist. The stored submission time is coarsened to the hour before it is written, so even the moment of a response cannot be lined up against the moment a link went out to work out who answered. This is a real, provable property of the data model, backed by our own response engine, already proven in production, and the self-serve builder is being extended to expose the same option on every creator's own sets.
Shipped -- proven in production today
Moderation and abuse limits run before a response ever reaches your feed
Every incoming response passes a server-side moderation pass for likely foul language or spam before it lands anywhere -- a flagged response is labelled, never silently thrown away, so nothing disappears without a record. A salted, rotating rate limit bounds how many responses one source can send in a time window; the limiter key cannot be reversed back to a sender and is never written to the response table. Both checks are server-authoritative: neither can be skipped by a client, and both are already proven in production in our own response engine today.
Shipped -- server-authoritative, already running
Self-serve signup and billing are not built: no signup form, no checkout, no card charged
There is no public signup form or live checkout on this page. A contact request does not itself create an account or charge a card. No pricing is offered on this page.
Not built -- no signup route and no billing route exist; no card is charged