**Source:** https://heykiku.com/glossary/client-confidentiality

# Client Confidentiality

A freelance designer joins the team to help with Client A's rebrand. To do their job, they get a login to the shared workspace where the agency keeps its files. That same login also opens Client B's unreleased product roadmap, Client C's media budget, and a competitor teardown the agency ran for Client D last quarter. Nobody intended that. The freelancer wasn't snooping. But **the access was binary**, so context for one account quietly became visibility into every account — and the agency just breached three confidentiality agreements without anyone noticing.

Client confidentiality is the promise an agency makes — sometimes in a signed NDA, often just implied by the relationship — that what a client shares stays inside the people who need it. Agencies hold genuinely dangerous material: campaigns that move markets when they leak early, forecasts that reveal a client's runway, competitive intelligence that would be valuable to the very competitors sitting in the next account folder. **The duty doesn't scale down because the team is small or the contractor is trusted.** A leak from a five-person studio carries the same legal and reputational weight as one from a hundred-person shop.

The hard part is that the same people who create confidentiality risk are the people agencies depend on. Freelancers and contractors work across multiple clients — that's the model. A copywriter might be on three of your accounts and four of someone else's in the same month. **Trust isn't a control.** "We've worked with her for years" is not a defense when a client asks how a contractor on their account could also see a rival's pricing. Confidentiality has to be enforced by what the system allows people to open, not by everyone remembering to be careful.

heykiku enforces confidentiality through four access tiers inside a single agency workspace—general, internal, sensitive, and owner-only—each mapped to a separate Mistral library, where users only receive the library IDs their role permits. The freelancer on Client A's rebrand queries the general and project material they're cleared for and never sees the sensitive forecasts or owner-only intel sitting in the same workspace. Confidentiality becomes structural: the boundary is in the tier, so **the contractor physically can't retrieve what they weren't granted, no matter how they phrase the question.**

## Related terms

- [Freelancer Access Control](https://heykiku.com/glossary/freelancer-access-control)
- [Client Relationship History](https://heykiku.com/glossary/client-relationship-history)
- [Statement of Work (SOW)](https://heykiku.com/glossary/statement-of-work)
- [Single Source of Truth](https://heykiku.com/glossary/single-source-of-truth)