The Architecture

The discretion of the Psychological Private Office rests on a structure that expresses the same stance as the conversation itself. This structure extends from the first contact to beyond the end of a mandate, and its parts interlock.

A structure in which the content of conversations never becomes data.

Once data has been stored, it can no longer be fully protected. Privacy policies govern the conditions of use, not whether it occurs at all. Storage itself is already a form of use. Where the need for discretion is exceptionally high, that is not enough. Zero Data Retention therefore begins earlier: what does not exist can neither be stored nor disclosed.

The term is familiar from technology, where it denotes the principle of not storing content. In the Psychological Private Office, it refers to the content of conversations: no recordings, no notes and no file are made of it, whether a conversation takes place in person or via Signal. Only what appointments and invoices require is stored, as sparingly as possible, with fixed deletion periods and quantum-resilient encryption; the privacy policy sets this out in detail.

Signal is suited to this principle: the messenger encrypts content end to end between the devices of those involved, its encryption protocol has been independently examined by researchers, and no content is kept on the operator’s servers once it has been delivered. Together with a fixed setting for the automatic deletion of messages, Zero Data Retention can thus be put into practice digitally as well. Email, by contrast, cannot achieve this, since every message remains stored on servers, and is therefore reserved for organisational matters.

This removes the risk that stored content entails: what was never recorded can neither be misread nor misused, nor can its surrender be demanded.

Putting Zero Data Retention into practice in psychological work is not a matter of technology alone. It requires a conversational architecture that works without recording and still allows depth, and a very small number of concurrent mandates. The consequence-free space rests on this principle.

From this principle it is possible to derive how conversations are conducted and how everything that accompanies them is handled.

The First Contact

The first contact is organisational by nature. Even so, the same protected connection used for the conversations of a mandate is available from the outset; on request, Zero-Data Retention applies to the organisational arrangements as well. This allows even the question of whether and how a mandate comes about to be explored more freely, and the mandate follows on directly from it. Those who prefer the familiar route may equally use email or telephone for organisational matters; neither, however, offers the same level of protection.

At the heart of the mandate is what everything else leads to: the conversation itself and the expert appraisal that takes place within it. The mandate is supported by a contractual framework that makes loyalty binding, and by a dedicated procedure that secures the identity of the other party in every conversation. Conversations are held over a protected connection or, where the occasion arises, in person.

All ways of getting in touch are listed in the Contact Portal.

Conversations over a Protected Connection

Over such a connection, one can telephone, write in real time or asynchronously, or hold a video call. Which form is appropriate depends on the situation and on personal preference. For a long time, video calls had a confirming effect: one saw someone familiar and relied on that. That certainty no longer exists. In the Psychological Private Office, the protection and confirmation of the other person’s identity do not depend on the form of communication.

The installation of Signal alone can be noticed by others, since registration runs through a telephone number. If the installation is to go unnoticed, a separate number that appears in no one else’s address book is advisable. Help with the setup is available from the Psychological Private Office on request.

Protecting Identity

Anyone who grants a mandate is known through the contract. What remains open in every conversation over the protected connection, however, is who is on the other end. Not only an image but also a voice can now be convincingly imitated, and a phone can fall into other hands.

Identity is therefore confirmed neither by the profile under which someone appears, nor by voice or image, but by codes that the client has received by a separate route. At the beginning of a mandate this happens more often, later less often, and immediately whenever something in the conversation seems unusual. Every change to the connection is also confirmed separately, and a routine agreed in advance covers the loss of the phone.

Conversations in Person

Conversations can also take place in person. The Psychological Private Office is not tied to a fixed place; where to meet and how the conversation proceeds are agreed in advance. A conversation in person needs no technology. Nothing is retained from a conversation in person either. Identity is protected just as in the other conversations, since it builds on what was already confirmed over the protected connection.

Restraint

Because nothing is retained from the conversations, a mandate leaves only organisational matters: a contract, appointments, invoices. And what they contain reveals as little as possible.

Invoices bear the issuer’s legal name and no professional title. The service is described neutrally and allows no inference about content. The payment reference contains only the invoice number, and the receiving account is likewise held in the legal name. In a standing mandate, invoices remain the same month after month and reveal neither how often conversations took place nor for what reason.

As a rule, the contracting party is the client. If the client has the payment made through their Private Office or Family Office, the office sees no more than the invoice described above.

Organisational data is deleted as soon as it no longer needs to be kept. Until then, it is encrypted in a quantum-resilient manner. Conventionally encrypted data is already being collected today in order to decrypt it once the necessary computing power becomes available. Research findings suggest that this could happen sooner than previously assumed.

After the Mandate

A public review, however favourable, makes visible what had been protected until then. A single trace online is enough to expose a collaboration that remained invisible by every other route. What has once been posted there cannot be taken back.

Anyone who wishes to pass on a good experience has a better place for it than the internet: a recommendation within a trusted circle reaches only those it is meant to reach. It naturally remains at one’s own discretion. Direct feedback is equally welcome, through the usual channels.

Epilogue

The structure this page describes is an expression of a stance, but not the stance itself. That requires a person who lives it.

The final anchor is therefore personal in nature: your trust, secured by the pledge of my reputation. An inner handshake that carries the entire architecture.

Karl-Heinz Meisters

Publications
Texts for closer study

The Conversation
Ethics as Foundation
The Science of Normality
The Space – Strategic Calm
Publications
Profile
Contact Portal
Home

---

04