Fantenna/Future Fan PanelJoin

Methodology

How we keep your panel data safe, and how we prove the panel exists the way we say it does.

ISO 27001 ISMS coverage

Fantenna operates within Monterosa Productions' certified ISO/IEC 27001 information-security management system, the international standard for information-security governance. Our parent organisation's Data Protection Officer is also Fantenna's DPO. Penetration testing, supplier management, incident response, and change control all run through the same controls our parent operates against the cert. We commission an annual independent privacy audit on top of this, publish our sub-processor register, and provide every customer with a signed cohort-attestation report tied back to a Merkle root they can verify themselves. Identity verification of panellists is handled by ComplyCube, an ICO-registered UK provider; raw selfies are destroyed within 24 hours of avatar generation.

Validation pipeline

Every response passes through a four-layer validation pipeline before it is rewarded and before it is delivered to the customer who commissioned the survey.

  1. 1
    Layer A: technical signals

    Submission time, device fingerprint, IP reputation, and channel-of-origin. Filters out clearly automated submissions.

  2. 2
    Layer B: content quality

    A language model scores the response against a per-survey rubric for coherence, on-topic-ness, and originality. Boilerplate or copy-paste answers are flagged.

  3. 3
    Layer C: optional voice biometric

    If voice is enabled, a speaker-embedding match against the panellist's onboarding sample confirms identity. Optional and consent-gated.

  4. 4
    Layer D: human review (when in doubt)

    Anything in the grey zone is escalated to a human reviewer before payment. Panellists can also request human review on any individual decision.

Attestation reports

Each customer engagement is closed with a signed attestation report that includes a Merkle root over the panellist set and the response set. Customers can verify the report cryptographically. The report binds the engagement to a specific verified-panellist roster so the numbers cannot be inflated retrospectively.

Retention

  • Liveness selfies: destroyed within 24 hours of avatar generation.
  • Face vector hash: kept while panellist active and biometric consent granted.
  • Raw audio and video responses: destroyed 60 days after submission.
  • Transcripts: pseudonymised after 36 months.
  • Reward records: 7 years (UK) or 10 years (DE) per tax law.
  • Consent log: account active + 7 years.