What You Can and Cannot Put in a Portfolio From a Confidential Job

If your work sat inside a bank, a hospital, a law firm or a government office, the portfolio question is genuinely awkward. Here is the practical position.

The default assumption

Anything you produced at work belongs to the employer, and client data belongs to the client. That holds whether or not you signed anything specific — and if you did sign an NDA, read it before you publish anything.

But confidentiality protects information, not your ability to describe your own work. That distinction is the whole answer.

What is almost always fine

• Describing the problem in general terms. "A Nigerian fintech with about forty support staff" rather than the name.
• Describing your method. How you categorised tickets, how you structured the queue, how you built the model.
• Percentages and relative change. "Cut response time by roughly 70 percent" reveals nothing proprietary.
• Recreating the structure with invented data. Same dashboard, same logic, numbers replaced.
• Your own templates and process documents, stripped of anything specific to that employer.

What is not fine

• Real customer names, account numbers, health information, or anything identifying a person
• Absolute revenue, client lists, pricing, or internal financials
• Screenshots showing live data, even partially blurred — blurring is reversed more easily than people think
• Source code owned by the employer
• Anything an NDA names explicitly

The safest technique: rebuild it

Take the thing you actually made, rebuild it from scratch with invented data, and present that. Same structure, same reasoning, nothing real inside it. Label it clearly: "Recreated with sample data; the original was built for a previous employer and is confidential."

That sentence does more good than harm. It demonstrates the work and it demonstrates that you handle confidentiality properly — which, for anyone hiring into finance, health or legal support, is itself a hiring signal.

The written case study, when you can show nothing at all

Sometimes even the structure is sensitive. Then write four short sections and show no artefact: the situation in general terms, the constraint you worked under, what you did, and what changed in percentages.

This is weaker than a visual piece and it is far stronger than an empty portfolio. Most hiring managers accept it readily, because they have worked under the same restrictions.

If you are unsure, ask

A short message to your current or former employer asking whether you may include a de-identified version is often answered with a yes, and it costs nothing. Permission in writing removes the question permanently.

The line worth holding

Do not publish something borderline because a job depends on it. A breach follows you, and the roles worth having are the ones where that judgement is being assessed.

Turning restricted work into evidence a stranger can evaluate is exactly what Stage 4 does with you. See Stage 4.