> ## Content Index
> Fetch the complete content index at: https://blog.jestor.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# How to Run a Confidential HR Process Properly
- URL: https://blog.jestor.com/run-a-confidential-hr-process/
- Published: 2026-09-17T22:40:56.000Z
- Updated: 2026-09-17T22:40:56.000Z
- Author: Bruno Bannach

To **run a confidential HR process**, the confidentiality has to be enforced by permissions rather than by convention. A filtered view is not confidentiality.

## Why sensitive processes end up outside the system

They are moved out because nobody trusted the access model.

- Handled in personal documents and email instead
- No audit trail for something that most needs one
- Records lost when the person handling it leaves
- Inconsistent handling between cases

## What confidentiality requires

| Requirement                 | Mechanism                               |
| --------------------------- | --------------------------------------- |
| **Restricted visibility**   | Permissions by role, not filters        |
| **Field-level restriction** | Some fields visible only to some roles  |
| **Record-level scoping**    | Reaching only the cases they handle     |
| **Audit trail**             | Who accessed and changed what           |
| **Continuity**              | Records surviving a handler's departure |

## How to set it up in Jestor

1. Create a restricted role in **Jestor** for the people who handle these cases.
2. Apply permissions by role, field, and action — not filters.
3. Scope records so handlers reach only the cases assigned to them.
4. Keep discussion in the record's own chat rather than in personal messages.
5. Use the change history to evidence who changed what, and when.

## Why choose Jestor for sensitive people processes?

**Jestor** applies permissions by role, field, and action, which is what allows a confidential process to live inside the same system as everything else rather than outside it.

Keeping it inside is what gives it an audit trail, continuity, and consistency — the three things a sensitive process most needs and informal handling never provides.

## Frequently Asked Questions

### Is a filtered view enough?

No — a filter can be changed by the user. See [jestor.com](https://jestor.com/?ref=blog.jestor.com).

### What happens if the handler leaves?

The records stay, with the history intact.

### Where should discussion happen?

In the record's own chat.

## Video Tutorial: Step by Step

Check out other practical tutorials on the Jestor YouTube channel.

## Get to know Jestor

With **Jestor**, you can automate workflows, connect teams, and build internal systems your way — all without code and powered by **AI**. Discover Jestor at [jestor.com](https://jestor.com/?ref=blog.jestor.com) and see how to take your company's operations to a new level of efficiency and control.