Privacy is discussed as a value and protected as a procedure. The most concrete question any private residence can be asked is also the least asked: who can enter, when, and under whose supervision?
Ask the owner of a private residence about privacy and the answer is usually a conviction: it matters absolutely. Ask the same owner who, in practice, can currently open the doors of that residence — every key, every code, every remote, every gate fob issued over the past five years — and the answer is usually a pause. Somewhere between the conviction and the pause lies one of the most common, least examined gaps in how serious homes are run.
The gap grows innocently. A key is cut for a contractor during the renovation and never collected. A gate code is shared with a delivery service one busy August and never changed. The pool company has a fob; so does the gardener’s brother, who covered for him one summer; so does a housekeeper who left two years ago on good terms, and whose key is presumably in a drawer somewhere, presumably her own. Each decision was reasonable on the day it was made. Nobody has ever listed them in one place, which means that the honest answer to “who can enter this house?” is: nobody knows precisely — and a privacy that cannot be enumerated cannot really be said to be controlled.
The point is not suspicion. The overwhelming majority of the people holding those keys are exactly who they seem to be. The point is that access is the place where privacy stops being a sentiment and becomes an operational fact. A residence can have discreet staff, careful lawyers and strict social rules, and still be, in physical terms, a building that a dozen loosely tracked people can walk into. Access is also where several serious concerns meet at once: the family’s security, the insurer’s conditions, the protection of staff themselves — the first people under suspicion when something goes missing — and the simple dignity of a home that is entered only by the people meant to enter it.
Bringing access under governance is unglamorous work, which is perhaps why it is so often skipped. It begins with an inventory: every key, code, card and remote in circulation, who holds it, and why. It continues with rules that would sound obvious anywhere else. Entry rights follow roles, not relationships — the plumber’s access ends when the plumbing does. Contractors work under supervision or under defined, time-limited permissions, not on a copied key. Codes change when people change, and on a calendar besides. Departures — friendly or otherwise — trigger a collection, not an assumption. And entries by outside parties are recorded: who came, when, for what, let in by whom. Not because anyone is accused of anything, but because a record protects everyone in it.
There is a temptation to believe technology has solved this — that smart locks and cameras have made the question obsolete. They have made it sharper. Electronic access is easier to grant, easier to forget having granted, and easier to duplicate silently than any brass key ever was. A code shared by message travels; an app permission outlives the job it was created for. The hardware is only as disciplined as the governance behind it. A smart lock with an unmanaged permission list is simply a faster way of not knowing who can enter.
What does a well-governed house feel like? Exactly like a home — that is the test. The family notices nothing: no ceremony, no friction, no sense of living inside a checkpoint. The discipline is entirely backstage: a current list, a collection ritual, a change of codes that takes ten minutes twice a year, a log that no one reads until the one day it matters. Privacy, in the end, is not produced by conviction, however sincere. It is produced by administration — by someone knowing, at any given moment, exactly how many ways there are into the house, and being able to prove it. Every key is a decision. A residence that takes itself seriously knows where all of its decisions are.
Prefer to speak first? Book a discovery call →
