How boutique consulting firms prove results under client NDAs
Your best consulting engagements are the ones under NDA, so prospects asking for case studies get thin testimonials and the deal stalls. Three proof artifacts that de-risk the decision without ever naming the client.
By Stacey Tallitsch | July 7, 2026
A prospect gets to the end of a strong discovery call and asks the question you have learned to dread. Who else have you done this for, and can I see the results? You run a boutique consulting firm. Your best work — the turnaround, the pricing overhaul, the quiet acquisition your client did not want anyone to know they were weighing — is exactly the work you are not allowed to talk about. The engagements that would close this deal are the ones locked behind a non-disclosure agreement (NDA). So you send over the two thin testimonials you managed to scrape loose, both a version of "great to work with," and the conversation goes cold.
You do not have a marketing problem. You have a proof problem, and it is structural.
The instinct is to treat the NDA as the obstacle. It is not. The obstacle is that you are trying to reproduce a format your firm is legally barred from producing. The named enterprise case study — logo at the top, a client executive quoted by name, a hard number bolted to a recognizable company — is the proof artifact that large firms and software vendors lean on. You imported their template into a business that cannot legally fill it in, found the blanks unfillable, and concluded you have no proof. You have plenty. You are formatting it wrong.
What the prospect is actually asking for
Separate the two things happening when someone asks to see your results. The surface request is for evidence. The real job underneath it is risk management. A buyer about to hand a stranger a six-figure problem is trying to answer one question: is this person going to make my situation worse. The named logo is one proxy for lowering that risk. It is not the only one, and for confidential work it is frequently not even the strongest one. A recognizable client name tells the prospect that someone reputable took the bet. It says nothing about whether the work resembled their problem, whether the result held, or whether they would have hired you again. Those are the things that actually de-risk the decision, and none of them require you to say the client's name out loud.
There is a timing point here that most firms miss, and it changes where proof has to live. By the time a prospect asks you for results in a meeting, they have already done most of their evaluation without you in the room. Gartner's research on how B2B buyers actually buy found that buyers spend only about 17% of their total purchase time meeting with any potential suppliers at all — and when they are comparing several firms, each individual firm gets a low single-digit slice of that. The verbal ask in your discovery call is not the moment the decision gets made. It is a spot check on a conclusion the prospect mostly reached on their own, earlier, reading whatever you had sitting in public. Proof that only exists inside your pitch meeting is proof arriving after the buyer has already scored you.
So the work is not to win the meeting. It is to build proof that de-risks the decision, requires no client's name, and sits where the prospect does their private evaluation. That splits into three artifacts, and most confidential-heavy firms are missing all three.
The three artifacts that replace the named case study
The sanitized engagement narrative
This is the case study your NDA actually permits, and it is more useful than founders expect. You strip the identity and keep the structure: the situation, the specific problem, what you did, and the measurable result. The client becomes a role-based descriptor precise enough to be credible — "a 40-person regional insurance brokerage," "a founder-led manufacturer around $30M in revenue" — and the number stays real. "Cut their close cycle from 90 days to 41" carries the weight. The logo was never carrying it.
The move that makes this defensible is a lightweight approval, not a legal battle. You write the sanitized version first, then send the client two sentences: here is how we would describe this engagement without naming you or anything identifying — are you comfortable with it. Most clients who would never let you publish their name will clear an anonymized paragraph in a day, because you have removed the thing they were protecting. Build three of these from your strongest confidential engagements before you touch anything else. Three specific, sanitized, number-carrying narratives outperform a page of named logos with nothing behind them.
The engineered reference roster
Written proof gets a prospect most of the way. A live reference call closes the gap, and it is a different asset that most firms never deliberately build. They wait until a deal is on the line, then scramble to find a client willing to take a call, and hand the prospect whoever picks up. That is the same ad-hoc reflex that keeps a founder-led practice fragile everywhere else — the same pattern I unpacked in why a referral-driven advisory firm plateaus when every move is improvised.
Engineer it instead. Identify four or five clients who are genuinely happy, whose situations map to the kind of work you are trying to win more of, and ask them directly to be occasional references. Confidentiality rarely blocks this — a private phone call between two operators is a different act than a published case study, and a client who will not appear on your website will often gladly tell a peer you were worth the money. A curated roster of five references matched to your target engagement does more than fifty logos a prospect cannot call.
The process artifact
The third piece is the one confidential firms neglect hardest, and for them it is the most important. When you cannot show the outcome, show the method. Publish the actual diagnostic framework you run in the first two weeks. Show a redacted deliverable — a real slide, a real model, with the client details blacked out — so a prospect can see the quality of your thinking rather than take it on faith. Walk through how you scope, where you push back, what you refuse to do.
For a confidential practice this is not a consolation prize. It is stronger proof than a named result, because a logo tells a prospect you succeeded once while a visible method tells them why you will succeed for them. It is also the durable version of authority — evidence of how you work, not volume of exposure — which is the distinction I drew in why fractional executives should stop chasing reach and build credible evidence instead.
Who this does not fix
Run the protocol only if the constraint is real. Two situations look like a confidentiality problem and are not.
The first: you have named clients you could ask, and you have simply never done the work of asking. That is not an NDA barrier. That is avoidance wearing a compliance costume, and no sanitizing framework will save you from the phone call you keep not making.
The second, and harder: your results are not actually strong enough to show, named or not. If you cannot fill in the sanitized narrative because there is no clean before-and-after — because you are not sure the engagement moved anything — the missing artifact is not a marketing asset. It is a signal about the work. Before you build proof, be certain you have something worth proving, which usually means getting honest about which engagements actually produced a result and which just produced activity. That is the same discipline as running an unflinching review after a deal you expected to win slips away, the practice I laid out in how to run a win-loss review that tells you the truth.
Here is the step you can take before you close this tab. Pull up your three best confidential engagements. Pick the one with the cleanest measurable result and write the sanitized version now — situation, problem, what you did, the number — with the client rendered as a role, not a name. Then email that client the two-sentence approval ask. You will have your first real proof artifact cleared and in hand this week, and you will stop losing deals to a template you were never allowed to use in the first place.
— Stacey Tallitsch, Stronghold CMO
About the Author
Stacey Tallitsch is the President of Stronghold CMO, a Fractional AI CMO service operating under Talisman Capital, Inc. He is a 30-year tech veteran and the author of 21 books on systems thinking, operator-grade decision-making, and personal sovereignty, with more than 30,000 students across his Udemy course catalog.
- LinkedIn: https://www.linkedin.com/in/stacey-tallitsch-729b6336a/
- Books on Amazon: https://www.amazon.com/s?i=stripbooks&rh=p_27%3AStacey%2BTallitsch&s=relevancerank&text=Stacey+Tallitsch&ref=dp_byline_sr_book_1
- Courses on Udemy: [https://www.udemy.com/user/staceytallitsch/](https://www.udemy.com/user/staceytallits