For executive search firms, confidentiality becomes a practical decision every time someone opens a candidate record, shares interview notes, or sends a shortlist. The Association of Executive Search and Leadership Consultants’ Candidate Bill of Rights emphasizes protecting a candidate’s interest in a new position and establishing a mutual understanding of the assignment’s confidentiality. Turning that commitment into daily practice requires deciding who can see which information, at each stage of the search.
Consider a confidential CFO replacement. The lead consultant knows why the incumbent is being replaced. Researchers are identifying potential candidates. A coordinator is arranging interviews. Two board members will review the shortlist.
All four groups contribute to the assignment. Their information needs are different.
Separate the candidate’s identity from their participation in a search
An executive’s name, employer, and professional background may already be public. Their willingness to consider a new position can be highly sensitive.
That distinction should guide access decisions.
A researcher may need to identify executives with relevant experience. A consultant may need to know that one of those executives is interested, has discussed compensation, and will only speak outside working hours. Another team working with the same executive’s employer should not automatically see those conversations.
When reviewing access, ask two questions:
- Who needs to see this person’s professional profile?
- Who needs to know that they are involved in this particular assignment?
A shared candidate database should not automatically make confidential search participation visible across the firm.
Agree on access before research and outreach begin
At the start of a confidential assignment, define the search team, the authorized client reviewers, and who can approve changes to either group.
Also clarify what is confidential. Is it the client’s identity, the position, the reason for the search, candidate participation, or several of these?
“Confidential search” is too broad to guide a coordinator deciding what to put in a calendar invitation.
The following matrix provides a starting point for discussion. Actual access should reflect each person’s responsibilities and the agreed confidentiality arrangements.
| Role | Information they may need | Information to restrict unless required |
|---|---|---|
| Lead consultant | Search brief, candidate discussions, assessments, and approved client feedback | Unrelated sensitive information from other assignments |
| Assigned researcher | Relevant professional profiles, sourcing activity, and outreach status | Private negotiation details and sensitive client context |
| Interview coordinator | Contact details, availability, approved interview logistics | Assessment notes, shortlist rankings, and reasons for replacing an incumbent |
| Authorized client reviewer | Approved candidate profiles and role-relevant assessments | Raw internal notes and information about candidates outside their review scope |
| Other firm employees | General talent information permitted by firm policy | Confidential assignment participation and private search discussions |
Access should follow the task. Seniority alone does not explain why someone needs a candidate’s private notes.
Keep internal notes separate from client-facing assessments
A consultant’s working notes and a client-ready candidate assessment serve different purposes.
Working notes might include an unverified point to explore, a reminder about contacting the candidate discreetly, or a private explanation of why they are considering a move. A client assessment should present relevant, supported information that has been reviewed for sharing.
For example:
Internal coordination note: “Candidate requests calls on personal mobile after 6 p.m. Current employer is unaware of discussions.”
Client-facing assessment: “Candidate is available for an initial discussion next week and has relevant experience leading finance transformation.”
The client needs enough information to evaluate and progress the candidate. They do not necessarily need the full conversation history.
Before sharing an assessment, check:
- Does each detail help the client assess suitability for this role?
- Are observations clearly distinguished from verified facts?
- Is the information appropriate to share under the candidate’s agreed expectations?
- Have internal reminders and unrelated personal details been removed?
Write notes with an identifiable purpose and audience. Avoid treating every note on a candidate record as material for the next report.
Share shortlists with named reviewers
A shortlist can reveal who is considering a move, how the firm assesses them, and which direction the client is taking.
Before releasing it, confirm the recipients rather than assuming everyone in a client email thread is authorized.
A practical shortlist process records:
- Which candidates and documents are included.
- Which version has been approved.
- Who is authorized to receive it.
- Whether candidate authorization has been obtained for the intended disclosure.
- Who can approve additional reviewers.
An anonymized summary may be useful during an early discussion. However, removing a name does not guarantee anonymity. A distinctive title, employer, acquisition history, or career sequence may still identify an executive.
Review the combination of details, not just the name field.
Check where information travels outside the ATS
Access controls on a candidate record do not govern every copy created during the search.
Review the places where confidential information can move:
- Calendar invitations: Subject lines, descriptions, attendee lists, and attachments.
- Email: Recipient lists, forwarded threads, and attached résumés.
- Teams or other collaboration tools: Channel membership, messages, and shared links.
- Documents: File names, comments, tracked changes, and sharing permissions.
- Reports and exports: Candidate names, assignment labels, and assessment fields.
For a firm working across Microsoft 365, these checks should form part of the search workflow. A restricted record can still produce a broadly shared document if the export and sharing steps are overlooked.
Use neutral scheduling details where appropriate, verify recipients, and share only the information needed for the next action.
Review access when the assignment changes
Confidential searches evolve. A new board member joins the selection process. A researcher moves to another assignment. A candidate withdraws. The client pauses the search.
Each change should prompt a review of access and responsibility.
When someone leaves the assignment, check their access to the search records, shared folders, collaboration spaces, and live document links. Removing access to one system may leave other routes open.
When the search closes, decide which records remain available for future recruiting, which assignment-specific material stays restricted, and how existing sharing links will be handled under the firm’s retention policy.
An executive’s professional profile may remain useful for another opportunity. Private discussions from a previous search should not automatically become shared context for every future assignment.
Test confidentiality with a real search scenario
Before relying on your setup, walk through a sample confidential assignment using the access available to each role.
Can a researcher discover private negotiation notes through a report? Can a coordinator open assessment attachments? Can an unrelated consultant see that an executive is interviewing with a particular client? Can a client reviewer access candidates beyond the approved shortlist?
These checks show whether the agreed boundaries hold across records, documents, search results, and sharing workflows.
The goal is to give each participant enough information to do their work while keeping sensitive details within the agreed audience.
Book a Dynamics ATS demo to discuss how your executive search workflow and access requirements can be supported within your Microsoft environment.







