Confidentiality in Crisis: How to Vet a Strategic Liaison

A family office director called me once to ask whether I could verify the credentials of someone his principal had already engaged. Not hired through a referral. Found through a search at an hour when searches happen privately and quickly. The person had a professional-looking website, a warm manner on the phone, and a personal story that made the principal feel understood. That was the entirety of the vetting.

Six weeks in, the principal had disclosed things that were now being referenced in ways that made the family office director deeply uncomfortable. The engagement ended badly. The damage was contained, but only just.

This is the specific risk of an unregulated field. Unlike medicine or law, there is no universal standard governing who can call themselves a recovery specialist, a sober companion, or a strategic liaison. Anyone can build a website and begin taking calls. Some of them are skilled and ethical practitioners who have simply not formalized their credentials. Others are not. The person in crisis at two in the morning, searching privately and hoping the IT department does not monitor search histories, has no reliable way to tell the difference from a homepage.

So the due diligence falls to the person making the decision, or more often to the advisor around them who has been asked to find someone quickly and discreetly.

The minimum standard I would apply before any engagement is formal certification from a recognized credentialing body. The IC&RC, the International Certification and Reciprocity Consortium, is the most widely recognized. CCAR is another. These organizations require documented training, supervised hours, and ongoing education to maintain certification. They also require practitioners to operate under a code of ethics with mechanisms for accountability if that code is violated. Without certification from a body of this kind, the practitioner is accountable to nobody except their own judgment. In an unregulated field, that is not a sufficient protection for a principal whose disclosure could carry professional or legal consequence.

Certification is the floor, not the ceiling. What matters equally is whether the practitioner has genuine experience with this specific population. The pressures of high-functioning professional life are not the same as the pressures addressed by most behavioral health training. A practitioner who has spent their career working in standard clinical settings may be technically credentialed and still entirely wrong for a principal who cannot step away from a merger to attend weekly sessions, whose travel schedule crosses multiple time zones in a given week, and whose professional community is close enough that an unguarded disclosure could surface within days.

The question I would ask directly is what their experience is with principals who cannot interrupt their professional obligations for care. The answer will reveal whether they understand the actual conditions of the work or whether they are going to recommend a model that does not fit the situation and call it the principal's resistance when it fails.

The confidentiality question requires specifics, not reassurances. General promises to keep things private are not adequate when the stakes include a board position, a public-facing role, or a family office's institutional reputation. The right practitioner can describe their specific protocols. How communications are handled. Whether they use encrypted channels. What their policy is on notes and records. Whether there are circumstances under which they would be required to disclose, and what those circumstances are. A practitioner who responds to this question with warmth and vague assurance rather than documented procedure is telling you something important.

The abstinence question is one I consider a reliable filter. A practitioner who will only engage with a principal who commits upfront to complete and permanent sobriety does not understand how change actually happens for high-control individuals, and does not understand the population they are claiming to serve. The right practitioner can work with a principal who is uncertain about what he wants, who is not yet ready to name the problem clearly, who needs to understand the impact on his performance before he is willing to discuss anything beyond that. Rigidity at this stage produces early dropout and a principal who is now more defended than before the engagement began.

The red flags I have learned to name clearly: a practitioner whose primary qualification is their own personal experience with recovery, without formal training or supervised practice. A practitioner who promotes a single approach as the only valid one, regardless of the principal's circumstances or preferences. A practitioner who cannot answer the confidentiality question with specifics. A practitioner who has never worked with someone whose professional obligations cannot be suspended.

The family office director who called me after the bad engagement told me he had not asked any of these questions at the beginning because the speed of the situation had felt like the priority. I understand that. Crisis does not create ideal conditions for due diligence. But the vetting takes one conversation and protects against the kind of damage that takes much longer to repair.

The field is unregulated. That is not going to change. The protection is in knowing what to ask before the engagement begins, not in hoping the person on the other end of the call has the principal's interests as their primary consideration. Most of them do. Some of them do not. The questions are how you tell the difference.