The full register of the policies and procedures by which Executive Search operates. Each entry sets out purpose, scope, principles, procedure, controls, the evidence we retain, and the regulatory regimes the policy is aligned to. The register is reviewed on a published cycle and is auditable on request.
Define the criteria, conflicts screening, and ratification path under which Executive Search accepts mandates from chairs, nomination committees, institutional investors, and regulators.
Codify Executive Search's NDA-by-default posture and the operational controls that preserve the discretion required by chairs, sitting CEOs, and institutional investors.
Govern the protection of client data, candidate data, telemetry artefacts, and proprietary models against unauthorised access, modification, or exfiltration.
Ensure that engagement data is stored, processed, and accessed in jurisdictions consistent with client mandates, regulatory requirements, and the firm's NDA-by-default posture.
Ensure every model used in board-grade decisions — succession ranking, derailment-risk vectors, skills-mix drift, candidate-slate construction — is auditable, bias-controlled, and defensible to clients, regulators, and litigants.
Define how Executive Search lawfully collects, processes, retains, and discloses candidate-identifying data for assessment, succession, and search engagements.
Prohibit bribery and corruption in any form and prevent the appearance of impropriety through bright-line gift, hospitality, and political-contribution rules.
Establish protected, independent channels through which employees, partners, contractors, candidates, and clients may raise concerns about misconduct, fraud, regulatory breach, or unethical behaviour.
Prevent personal, financial, or relationship interests from compromising the firm's empirical, independent posture.
Embed empirical anti-bias controls in every assessment, search, and succession decision, and hold the firm itself to a measured, transparent standard.
Ensure continuous availability of board-grade engagement services through disruption — including infrastructure outage, geopolitical disruption, pandemic, and supplier failure.
Set the retention, destruction, and legal-hold rules for every category of record the firm holds, balancing audit defensibility with data-minimisation obligations.
Ensure that every third party handling firm or client data, providing critical infrastructure, or acting on the firm's behalf is subject to risk-based due diligence and continuous oversight.
Govern detection, containment, investigation, notification, and learning from incidents — privacy, security, operational, ethical, or regulatory.
Ensure the firm does not act for, place, or process data of sanctioned parties, and that politically exposed persons are subject to heightened due diligence.
This register is maintained by the General Counsel. Material amendments are ratified by the Partnership Council and the effective date is set explicitly per policy. Historical versions are retained for the lifetime of the firm and are available to clients and regulators on request.
Clients, regulators, and prospective clients may request the underlying policy documents, evidence packages, or attestations in full. Requests are handled under the Discretion Protocol set out in ES-POL-002.