One goals system for 1,200 people, built in-house, safely.
Vision, Methods and Targets for every employee. Transparent by default, confidential where it matters.
Eight rules that keep it safe.
Who uses it
Security bar to match
Systems in play
Headcount and certifications come from public sources (see Sources) and should be verified internally.
The system at a glance.
Click any block to open its card. Hover a block to trace its connections.
#c/hibob, a flow with #f/rating or a phase with #p/3.What runs in Cellebrite's cloud.
Everything Cellebrite builds runs in a dedicated corporate IT account, separate from the product and FedRAMP environments. Vendor systems stay in their own SaaS.
Every block, one card.
Open a card for its purpose, data, controls, connections and open questions.
How the data moves.
Each flow opens as its own clickable diagram with a step-by-step explanation.
Who sees what.
| Tier | Contents | Default visibility | Stored in |
|---|---|---|---|
| Tier 1 Org-visible | Visions, Methods, Targets (metric, baseline, target, actual, due date), progress, calculated status | Everyone, once published | Main database |
| Tier 2 Manager chain | Status comments, override reasons, check-in notes | Employee, manager chain, HR (company-wide is D2) | Main database |
| Tier 3 Confidential | Self-assessment, rating 1–5, values ratings, calibration notes, development goals | Employee after release, direct manager, HR for that org | Confidential store (own key) |
| Out of scope | PIPs, salary, disciplinary records | Not held in VMT | Existing HR systems |
| Viewer | Tier 1 | Tier 2 | Tier 3 | Exports | Audit log |
|---|---|---|---|---|---|
| Employee – own record | Read and write until the cycle locks | Read and write | Writes self-assessment and development goals. Reads ratings after release | — | Own access report on request |
| Employee – anyone else | Read | TBD (D2) | No | — | — |
| Direct manager | Read, and override status with a reason | Read and write | Writes draft rating. Reads self-assessment after it is submitted | Own team, Tier 1 only | — |
| Manager chain | Read | Read | TBD (D6) | — | — |
| HR partner | Read | Read | Read, and calibrate for the assigned org | Assigned org | Assigned org |
| Central HR admin | Read | Read | Read. Amend after release only with a reason | Company | Company |
| System admin | Configuration only | No | No. Break-glass needs a ticket and alerts InfoSec | — | Read |
Connected, minimally.
| System | Purpose | Direction and data | Safety rule | Phase |
|---|
Thirteen calls to close.
| # | Decision | Recommendation | Owner | Close at |
|---|
Six phases, six gates.
Follows the phases and gates in the original brief. Click a bar or a gate for its outputs, the components it delivers, the decisions it closes and its exit criteria.
What we need from Cellebrite IT & engineering.
The technical answers that unblock the next steps. Questions marked Blocks G1 must be answered before the discovery gate closes. Tick questions off as they're answered, then copy the open ones to send.
What could go wrong.
| Risk | Impact | Mitigation |
|---|---|---|
| A permission bug exposes ratings | Loss of trust, legal exposure | A single policy module, full matrix tests as a launch gate, a separate confidential store, and SIEM alerts |
| Wrong manager data in HiBob | Wrong people see or rate goals | Validation and an anomaly hold on sync, plus a data clean-up before the pilot |
| Very tight timeline | Quality and security shortcuts | A narrow MVP. Everything else after the pilot |
| Resistance to full transparency | Low adoption, gaming of goals | Visibility badges, private drafts, comments limited to the manager chain |
| Multi-country legal constraints | Rollout delays | Early legal opinion, DPIA, rollout in country waves |
| AI drifting into evaluation | Regulatory exposure | AI limited to drafting, enforced in the AI gateway |
| No-code platform holding HR data | Fails InfoSec review | Base44 for prototypes only. Production in Cellebrite's own cloud account |
- VMT in-house build: decision brief (High-level Design Brief PDF)
- Cellebrite – Compliance (ISO 27001, SOC 2, FedRAMP)
- Dealroom – Cellebrite (headcount, country split)
- Revelio Labs – Cellebrite employees
- Clay – Cellebrite office locations
- Juno Journey documentation