"Is it safe to give a virtual assistant access to my business email?" is the question every new client asks. It can be very safe, if access is shared the right way and the right agreements are in place. Here is the practical playbook.
Rule 1: Never Send Passwords by Email or Chat
Passwords sent by email live forever in two inboxes. Use a password manager such as 1Password, LastPass or Bitwarden and share a vault with only the logins a task needs. Our clients use the encrypted secure vault in their account: logins and documents are encrypted, only the account manager and admin can open them, and you can see who opened each item and when.
Rule 2: Give Each Assistant Their Own Login
Wherever the tool allows it, add your assistant as a separate user with limited permissions: a staff account in Shopify, a user in QuickBooks, a delegate in Gmail or Outlook, a team member in your CRM. You keep the owner account, see their activity and remove them in one click.
Rule 3: Turn On Two-Factor Authentication
Keep two-step verification on for every important account. Use an authenticator shared through your password manager or approve codes yourself for the most sensitive accounts.
Rule 4: Sign the Right Agreements
- NDA: every assistant should sign a non-disclosure agreement before seeing anything. Ours do. You can also upload your own NDA to your account.
- BAA: medical and dental practices must have a HIPAA business associate agreement before an assistant touches protected health information.
- Service agreement: clear terms on confidentiality, data return and what happens when the service ends.
Contractor vs Employee
When you hire a freelancer directly, you are responsible for classifying them correctly as a 1099 contractor or W-2 employee and paying them legally. When you hire through an agency, the agency employs or contracts its staff and you pay one invoice. That is one reason businesses choose a managed service. Ask your accountant about your situation.
Contracts, Replacement and Leaving
Before you sign, ask:
- Do they require a long-term contract? (We do not: month to month.)
- How does replacement work if the fit is wrong? (Ours is free.)
- What happens on vacation or sick days? (Professional and Full-Time packages include a trained backup.)
- How do you leave gracefully? (Give notice before the next invoice; your assistant hands over documentation of every process.)
Higher-Security Work
For defense contractors, government work or regulated industries, ask about US-Based Specialists, background checks and compliance logging. Some roles require a security clearance, which must be confirmed before the assistant starts.
Read our confidentiality page for how we handle your data, or start on the order form.