Confidentiality as a product requirement, not a promise
In executive search a leak is not a technical incident: it can cost the mandate and the client relationship. Confidentiality therefore has to sit in the design of the system rather than depend on each consultant's individual care.
In practice that means mandates visible only to the assigned team, client names that can stay hidden even inside the firm, explicit control over what leaves when a shortlist is shared, and a record of who accessed each file. A candidate in post has far more to lose than the firm does.
- Access restricted per mandate inside the organization
- Client and profiles anonymizable in the early stages
- Log of access and document downloads
- Explicit control over what is shared with the client