Security and confidentiality
Working with an assistant, without losing control of your accounts.
Handing work to someone new means handing over some access. This page sets out what we ask of the assistants we place, and the practical safeguards we recommend so you keep control of your systems and your clients' information.
What we ask of every assistant
Confidentiality is expected, in writing
Assistants placed through The Peak Hire are expected to keep your business information confidential and to use it only for the work you assign. We put that expectation in writing with the assistant before the engagement starts.
You set the access rules
You decide which systems, files, and accounts an assistant can reach. We ask assistants to follow your access and data-handling requirements, including anything specific to your industry or clients.
You stay the owner of your accounts
Access is granted by you, in your own systems, and can be changed or revoked by you at any time. We do not ask you to move data into tools of ours in order to work with an assistant.
Tell us your requirements early
If your business has confidentiality obligations to its own clients, or internal rules an assistant must follow, share them before onboarding so we can confirm what is realistic and brief the assistant properly.
Safeguards we recommend on your side
These are ordinary, low-effort practices that make delegation safer for any remote worker, including the assistant we match you with. We are happy to walk through them during onboarding.
Least-privilege access
Give access only to the systems and folders the work actually requires, and widen it later if the role grows.
Separate user accounts
Create a named account for your assistant in each tool rather than sharing an existing login, so activity is attributable and access can be removed cleanly.
Two-factor authentication
Turn on two-factor authentication wherever your tools support it, for your assistant's accounts as well as your own.
A password manager instead of shared passwords
Share credentials through a password manager rather than email, chat, or documents, so passwords can be rotated and revoked in one place.
Periodic access reviews
Every few months, review who can reach what and remove access that is no longer needed for the current work.
Prompt offboarding
When an engagement or a role changes, remove or reassign accounts straight away and rotate any credentials that were shared.
Being straight about what we are not claiming
We would rather be accurate than impressive. The Peak Hire is a matching and support service, not a certified security provider. We do not claim SOC 2, HIPAA, or GDPR certification, formal compliance programmes, third-party audits, background-check services, specific encryption standards, or insurance coverage.
What we do provide is a clear confidentiality expectation with every assistant, a willingness to follow your rules, and a conversation before onboarding about anything your business or your own clients require.
Special compliance requirements? Let's discuss them first.
If you work in a regulated field, carry confidentiality obligations to your own clients, or need a specific agreement in place, raise it on the free role-mapping consultation. We will tell you honestly whether we can meet it before you commit to anything.
See also our Privacy Policy, Terms of Service, and pricing.