Three separate things get called confidentiality
Data handling: what the agency collects about you, where it keeps it and for how long. Contact discretion: whether communication with you can expose the fact that an enquiry exists. Field discretion: whether the investigation itself reveals who is asking and why.
These require different safeguards and fail in different ways. An agency with excellent field tradecraft can still expose you by calling at the wrong moment.
Data handling: collect less, keep it shorter
The strongest protection is not encryption but minimisation. An agency that asks for your documents, your family details and your full history when the case needs a name, an age and a city is creating risk without adding capability.
Ask three questions: what information do you actually need from me, who inside the firm will see this file, and how long will it be kept after the case closes. A firm that has thought about this answers immediately.
You should also never be asked for passwords, OTPs, banking credentials or intimate images. No legitimate investigation requires them, and an agency requesting them is either planning something unprofessional or does not understand its own work.
Contact discretion: usually where it goes wrong
For clients in a joint household or a shared workplace, the greatest exposure is typically not the fieldwork but a call at the wrong time, a voicemail identifying the firm, or a message preview on a lock screen.
A proper contact protocol is agreed before any work begins and covers: which number or channel may be used; which hours; whether voicemails may be left and what they may say; what we say if someone else answers; and whether a different name should be used when calling. If an agency does not raise this with you, raise it with them.
Field discretion: how enquiries are structured
The principle is that no single contact should reveal who is asking or why. In practice that means enquiries are distributed across sources rather than concentrated; the subject and their immediate household are not approached; observation is conducted at a distance with rotation where the budget allows; and locality enquiry is structured so it has a plausible reason to exist.
It also means pacing. In smaller towns and dense older neighbourhoods, a cluster of questions in a short period is noticed and discussed within hours. Cases in those settings are deliberately slower, and an agency that promises the same turnaround everywhere has not thought about it.
What no agency can honestly promise
Zero risk. Surveillance can be noticed. A source can mention a conversation. A coincidence can occur.
What a competent firm can promise is that you will be told in advance when a proposed step carries real exposure, so that you decide rather than discovering afterwards. An agency that guarantees absolute secrecy is making a claim nobody in this work can support.
Talk it through before you commit to anything
If this guide leaves you unsure whether your situation needs an investigator, the quickest way to find out is a short call. It is free, and you will get a direct answer — including when the answer is that nothing should be commissioned.