Employees don't sign in or give a name and email to use Ally - scanning the link starts a fully anonymous chat, identified only by a session cookie on their own device. You can optionally require a work-email domain match or a shared access code before someone's first session, so people outside your company can't open the link and start seeing your policies - but even then, no identity is collected, just a one-time check.