How to Moderate Anonymous Questions in a 500-Person All-Hands Without Looking Like a Dictator
The room is 500 people. The screen cannot be a raw firehose.
Moderating anonymous questions at a 500-person all-hands means a private queue, a public list of approved items, and a rule we say out loud before the first question lands. It does not mean hiding criticism. It does not mean a CEO scrolling Slack while someone yells from the floor.
| Setup | What the room sees | What the moderator sees |
|---|---|---|
| Unmoderated anonymous board | Every submission, including abuse and duplicates | The same firehose |
| Moderated upvote Q&A | Approved questions, vote counts, pinned item | Pending queue, reject reasons, duplicates |
| Named mic line only | Whoever walks to the stand | Nothing until it is too late |
We have run rooms where the first anonymous line was a personal attack on a named director. If that line hits the LED wall, we spend the next twelve minutes on HR, not strategy. If we silently delete it with no rule, the room decides we are dictators. The mechanical fix is boring: moderate for abuse, confidentiality, and duplicates. Do not moderate for discomfort.
Harvard Business Review’s work on meeting load is about too many meetings. A town hall still has to be one meeting that does not become a pile-on. Google’s research on psychological safety is about whether people can take a risk. Anonymous Q&A is that risk. Moderation is the guardrail so the risk is about the business, not about a person.
What we actually filter, and what we pass
Pass: hard questions about strategy, layoffs, comp bands, product delays, a skipped diversity goal. Pass them even if the CEO will hate the wording. Reframe only if the question names a junior employee. The room came for the substance.
Block: slurs, threats, medical rumors about a named person, client names under NDA, “who is sleeping with whom,” and the third copy of “when is the bonus.” Approve the clearest duplicate. Reject the rest. Upvotes on the survivor show how many people cared.
The sentence you say before join
“Anonymous questions are on. We will not show abuse, private HR matters, or repeats. We will show hard business questions. If we skip yours, it is in the follow-up doc by Friday.” Say it. Put it on a slide with two lines of text. If we skip the sentence, every reject looks political.
We live-host the Q&A. We do not embed it in a slide deck the AV team cannot moderate from a second laptop. Upvoted Q&A in our live poll workspace is the board. A second person sits on a laptop with the pending list. The public screen never shows pending. That split is the whole job.
A 500-person all-hands is a large room. We do not invent a 500-person capacity number for us. We size the plan to the room. The moderation workflow does not change with headcount. The queue speed does.
Roles so the CEO is not the filter
Host: answers. Does not scroll the raw queue. Moderator: approves, rejects, pins, marks answered. Producer: time, backup host, “we have three minutes.” If the CEO is the moderator, every skip is a power move. Give the queue to comms or HR ops. Train them for twenty minutes. The framework is one page, not a 40-page policy.
Reddit threads on anonymous Q&A keep asking for a tool where only the moderator sees submissions. That is the pending queue. The public board is the approved set. If we show both on the same screen, we have no moderation. We have a delay.
Slido will do Q&A. Mentimeter will do pretty slides. Kahoot will do a quiz we did not need in this hour. We are not writing a generic alternatives list. We are telling hosts to keep the pending list off the wall. Four town halls a year do not require a classroom stack.
How not to look like a dictator
Publish the filter rules before the calendar invite. After the meeting, publish a list of themes we did not get to, with owners. If we rejected a question as HR-confidential, say “that is a private HR matter, not a town-hall topic,” not “inappropriate.” The second word is a verdict on the person. The first is a bucket.
Do not let vote counts become a popularity contest that buries a quiet but material risk. Pin one “must answer” even if it has twelve votes. Tell the room why we pinned it. Transparency is a sentence, not a dashboard.
Keep the join path on phones. A 500-person room will not install an app because we asked nicely. Live-host, QR or PIN, no embed. If the AV laptop dies, a backup in a shared folder can open the same Q&A from a second machine. Rehearse that. Do not describe a magic failover button that is not the topic of this post.
After the hour
The unanswered queue is the actual product of a good all-hands. Bucket it: answer in writing, take to ELT, HR private, duplicate. Send the buckets. If we only air the safe questions and ghost the rest, people will stop submitting. Then we will congratulate ourselves on a clean board.
We refuse classroom gimmicks on this stage. No countdown music under a layoff question. No spinning wheel to pick who the CEO answers. The wheel is for a booth. This is a trust event.
Time the queue. A 500-person room can generate 80 questions in twelve minutes. The moderator cannot read 80 with care while the CEO is mid-sentence. Batch: scan for abuse first, then duplicates, then novelty. Pin one hard item every segment so the wall does not fill with easy wins. If two questions are the same complaint in different words, keep the sharper one and reject the rest as duplicate. The sharper one is the one a stranger would understand without internal slang.
Do not let the pending laptop become a second all-hands. The producer owns the clock. If we are three minutes from close, stop approving new items. Say so. “New questions stay in the follow-up.” People will still type. That is fine. The follow-up is the contract. Without it, the last ten minutes are a graveyard of ignored text.
Named questions still have a place. If a VP wants to stand up, let them. Do not mix named and anonymous on the same public list without labels. The room should know which voice is a person with a job title and which is a phone. Mixing them without labels is how a pointed anonymous line gets blamed on whoever is sitting in the third row.
Moderate the queue. Show the room the rule. Answer the hard ones. That is how we avoid looking like dictators. Looking like a dictator is what happens when we skip the rule and still hide the question.