Public Tokens and QR Codes
Overview
Survanta has three distinct access-token scopes. SingleSurvey links and their QR renderings allow answering one survey. TenantActiveSurveys opens a tenant-wide portal of eligible surveys. ResponseViewer is read-only results access and never submits or edits responses.
What Is a Single-Survey Token?
A SingleSurvey token is a hash-only bearer credential bound to one survey. It can have optional start/expiry times, open/response limits, a passcode, and anonymous/multiple-submission controls. A guest response is anonymous; an eligible tenant user who supplies JWT can be attributed while retaining public-token origin.
Authorized users generate single-survey tokens within the dashboard. Each token is:
- Scoped to a single survey — it cannot be used to access any other survey, tenant, or dashboard
- Optionally time-limited — start and expiry are nullable for
SingleSurvey - Revocable — Tenant Admins can revoke a token at any time, immediately invalidating it
What Is a QR Code?
A QR code is a visual encoding of the same /p/{token} link. It does not create a second credential or quota pool: links and QR codes share the underlying SingleSurvey token and MaxPublicSurveyLinks limit.
The QR code provides the same access as the underlying viewer token. If the token is revoked or expires, scanning the QR code will no longer grant access.
What Respondents Can Do
A respondent accessing a survey via a single-survey link or QR code can:
- View the survey questions
- Submit a response
A respondent cannot:
- Access any other survey, even from the same tenant
- View other respondents' answers
- Access the Survanta dashboard
- Create or modify any content
What Respondents Cannot Do
Single-survey tokens and their QR codes are strictly scoped. Possessing one for Survey X does not grant any of the following:
- Access to Survey Y (even in the same tenant)
- Access to any tenant dashboard pages
- Access to any Platform Admin tools
- Access to any website user account features
Managing Tokens
Authorized users can manage single-survey tokens from Access Links & Tokens → Public Survey Links. Actions include:
- Generate a new token for a specific survey
- Set availability/capacity — optional start, expiry, maximum opens, and maximum responses
- Revoke — immediately invalidate a token without waiting for it to expire
If a QR code or token link has been distributed and you discover it was shared more widely than intended, revoke the token immediately. A new token can be generated for legitimate respondents.
Frequently Asked Questions
Does a respondent need an account to use a QR code? No account is required for a guest flow. The token may still require a passcode and must pass tenant, subscription, plan, survey, availability, and capacity checks.
Can the same QR code be used multiple times? This depends on how the token was configured by the Tenant Admin. Tokens can be set to single-use or multi-use within the expiry window. Check with your Tenant Admin for the specific settings used.
Are responses linked to the respondent's identity?
Guest responses have no attributed submitter and are permanently immutable. If an eligible logged-in tenant user submits with JWT, the response is attributed to that user while retaining PublicAccessTokenId and may later be edited only through authenticated endpoints when all editability rules pass.