How it protects people
The safeguards are the product. Everything below is enforced by the software, not promised in a policy.
Nobody is identifiable
No accounts, no names, no personal links, and nothing that traces an answer to a person. Nobody logs in to answer, nobody is emailed a link of their own, and the software does not record who answered, from where, or on what. If two people give the same answers, there is nothing to tell them apart, and that is by design.
Small groups are protected
Results for a small group are never shown on their own. When a team is too small for its answers to be shown without someone being recognisable, its answers are folded into the wider group, and one other group goes with it, so nothing can be worked out by comparing the figures. The software does this itself, and nobody can switch it off or tidy a number by hand.
Your data stays in Australia
Nothing about a person is collected in the first place. Where answers are kept, and who can reach them, is answered in writing before any service holds them.