State in both the invitation and the introduction that responses are anonymous and only aggregated results reach managers, then use confidential response collection that strips identifying metadata from individual replies. Avoid asking for name, ID, or department in the survey itself; if you need to segment, hold that linkage in your HR system rather than the form. When employees see that no individual result is ever shared, trust in the process builds over time.