The risk for a high-profile family is rarely the visa itself. It is the paper trail. A passport scan sitting in a shared inbox at a travel desk. A net-worth declaration photographed at a crowded visa centre. A nanny refused at the airport because someone booked her on a tourist visa instead of the route that actually exists for her. For most families a botched application is an inconvenience. For a founder mid-fundraise or a family whose name carries a share price, it is a headline waiting to happen.
The uncomfortable truth: the visa rules for personal staff, security and household are not secret. They are public, decades old, and used badly. The failures are almost never legal. They are operational. Data handled by people who should never have seen it, staff filed under the wrong category, and a family forced to queue in the same hall as everyone else because nobody asked for the alternative that was sitting there all along.
This is a quiet field. We will not name clients and neither should anyone you hire. What we can do is tell you how the routes work, where families get burned, and what a serious handling actually looks like.
The real exposure is data, not refusal
A standard visa file for a UHNW family is an intelligence dossier. Home address. Itinerary down to the hotel and the night. Bank statements. Company shareholdings. Children's full names, dates of birth, school. Biometrics. Assembled in one place, that file tells a stranger exactly where your family will be, when, and what you are worth.
Now count the hands it passes through on a normal application. The travel agent. The agent's assistant. A visa centre operator and its outsourced staff. A courier. Often a WhatsApp group. Each hop is a copy, and each copy is permanent. You cannot un-send a passport scan.
The exposure is worse for public figures because the data has resale value. An itinerary is useful to a stalker, a kidnapping crew, a tabloid, or a short-seller who wants to know the founder is out of the country during a board week. None of that requires a refusal to go wrong. The application can be approved and the damage already done.
So the first question a serious advisor asks is not "which visa" but "who touches this file, and can I cut that number to almost nobody." That is a confidentiality design problem before it is an immigration one.
Moving the household: staff travel on their own routes
The most common and most avoidable error is putting personal staff on a tourist visa. A private chef, nanny, valet or security officer who works for you abroad and travels with you is, in immigration terms, an employee performing duties. File them as a tourist and you have created a false statement on a government form. That is the version that leaks badly.
The legitimate routes exist and they are specific.
United States: the B-1 domestic employee
The US has a dedicated path under the B-1 visitor classification for personal or domestic employees. It is real and it is used. The requirements, per the State Department's Foreign Affairs Manual, are exacting: the worker must have been employed by you abroad for at least six months before your US trip, or you must show you regularly employ domestic staff in that role; the worker needs at least one year of relevant experience; and there must be a written employment contract, signed and dated by both parties, in a language the worker understands, carried to the port of entry. The category covers cooks, butlers, chauffeurs, housemaids, valets, nannies, au pairs and paid companions.
Crucially, this works when the employer ordinarily lives outside the US and is travelling temporarily. It is the correct route for an Indian family visiting the US with their own chef or nanny. It still requires the staff member to apply, attend OFC biometrics and interview, and qualify on their own merits. There is no skipping that.
United Kingdom: Overseas Domestic Worker
The UK runs an Overseas Domestic Worker in a Private Household visa for staff accompanying a visiting employer. As of 2026 the conditions are tight: the worker must be aged 19 or over, must have worked for the same employer for at least 12 consecutive months before applying, must remain with that employer, and the visa permits a stay of up to six months. It does not lead to settlement and dependants cannot join on it. It is a short-stay accompaniment route, not an immigration path, and it should be treated as exactly that.
Schengen: the work-permit question
The Schengen side is messier and country-specific. France, for instance, has specific work-permit categories that cover personal and domestic staff accompanying an employer, tied to the employment contract or letter of assignment. There is no single "Schengen domestic staff" stamp; the route runs through the work-permit and visa system of the specific member state you enter first or stay longest in. This is the part families get wrong most often, because they assume one Schengen visa behaves like every other. It does not when there is employment involved. Verify the rule for the exact country, every time.
For 2026 there is an added wrinkle across Schengen: the move to digital entry records means first-time entrants give facial images and fingerprints, and manual passport stamping is being phased out. For staff and security travelling on their own documents, that is one more biometric appointment to plan, not improvise.
| Household role | US route | UK route | Key condition |
|---|---|---|---|
| Chef, nanny, valet, housekeeper | B-1 domestic employee | Overseas Domestic Worker | Prior employment with you (6 months US / 12 months UK) + written contract |
| Chauffeur | B-1 domestic employee | Overseas Domestic Worker | Same; role must be genuine and documented |
| Private security / close protection | B-1 (business, role-specific) | Standard visitor / work route by activity | Cannot bear arms; "protection" is not always a permitted activity. Verify per trip |
| Private pilot / flight crew | Crew or B-1 depending on aircraft registration and operation | Crew route by operation type | Depends on whether the aircraft is privately owned or chartered |
Security and aviation deserve a flag. Close-protection staff cannot simply assume a tourist or business visa lets them perform a security function, and they certainly cannot carry weapons across borders on the strength of a visa. Pilots and crew sit in a separate regime that turns on how the aircraft is registered and operated. These two get filed by activity, not by convenience, and they are where amateur handling shows.
The appointment hall problem
Biometrics and interviews are the part families dread, and for good reason. A visa centre or consular OFC is a public room. You sit, you wait, you are photographed and fingerprinted in front of strangers, some of whom have phones. For a recognisable face this is not a queue. It is an exposure event.
Here is the honest part: you cannot buy your way out of biometrics. There is no legitimate VIP lane that skips fingerprinting, and any agent who promises one is either lying or planning something that will end your client's mobility for good. The US, for instance, grants expedited appointments only for genuine emergencies at consular discretion, not for status.
What you can do is manage the encounter. Interview-waiver eligibility, where it applies, removes the consular visit for qualifying renewals entirely. Where biometrics are unavoidable, the levers are timing and sequencing: first-slot-of-day appointments before the hall fills, the least-crowded centre in a city rather than the default one, the whole family and entourage batched into a single coordinated visit rather than seven separate trips, and ground handling that moves people through without lingering. None of that bends a rule. All of it shrinks the window in which something can go wrong.
The families who handle this worst are the ones who treat the appointment as a clerical errand and send a junior staffer to "sort it." The ones who handle it well treat it as a movement, planned like any other movement of a principal.
Coordinating the principal, the family and the entourage
A single founder is one application. A family travelling with two children, a chef, a nanny and two security officers is seven applications on three or four different visa categories, with biometrics that must land in a workable window, a shared travel date, and zero tolerance for one person being approved while another is stuck.
The failure mode is predictable. The principal gets approved fast. The nanny's file, filed late and on the wrong category, gets queried. Now the family flies and the childcare does not, or the whole trip slips. We have seen this break a wedding, a board offsite and a medical trip. The fix is unglamorous: treat the group as one case with a dependency map, file the slowest and most fragile applications first, and never let the principal's convenience set the timeline for the staff whose approval is actually the bottleneck.
This is also where the reputational risk concentrates. A founder refused entry is a story. A founder whose security officer is refused, leaving an awkward gap in a public itinerary, is a different and quieter kind of vulnerability. Coordination is not admin. It is part of the security posture.
What confidentiality actually looks like
Discretion is a word every agent uses and few operationalise. In practice it means a short, specific list of controls, and you should ask for them by name.
- A signed NDA before a single document moves. Mutual, naming the family office or the individual, with real teeth on data handling and onward disclosure.
- A named, accountable handler. One person, not a pool. The fewer hands on the file, the smaller the leak surface. You should know who that person is.
- No shared inboxes, no WhatsApp document dumps. Sensitive files move through controlled channels, are not forwarded, and are deleted on a defined schedule once the visa is issued.
- Minimal disclosure. Many staff at a normal agency see the whole file because the workflow is lazy. A serious handling shows each person only what their step requires.
- Aliases and routing where lawful. Not to deceive a government, never that, but to keep a recognisable name off internal trackers, courier labels and third-party systems that do not need it.
And one rule that matters more than any of these: the application to the government is always complete and truthful. Confidentiality is about who in the private chain sees the data, not about what the consulate is told. The moment an advisor offers to hide something from the state rather than from the courier, walk away. That is the path that produces the leak you were trying to avoid, with a fraud finding attached.
How SaathiVisa thinks about this
We handle these cases as movements, not paperwork: one accountable handler, an NDA before anything moves, the group filed as a single dependency-mapped case with the staff routes built first, and the appointment treated as an exposure to be managed rather than a queue to be endured. The routes for your household are legitimate and they are specific. The job is to use them correctly, quietly, and with as few hands on your family's data as the law allows. When the case is genuinely high-stakes, it does not get delegated.
FAQ
Can my private chef or nanny travel with us on a tourist visa?
No, and it is the most common mistake. If they work for you and perform duties on the trip, they are an employee in immigration terms. The US offers the B-1 domestic employee route and the UK the Overseas Domestic Worker visa, both requiring prior employment with you and a written contract. Filing staff as tourists is a false statement on a government form, and that is exactly the kind of error that leaks badly later.
Is there a way to skip the public biometrics appointment?
Not legitimately. No real visa programme lets you buy out of fingerprinting, and any agent promising a VIP lane that skips it should be avoided. What can be managed is the encounter itself: interview-waiver eligibility removes the consular visit for qualifying renewals, and for unavoidable biometrics the levers are timing, choice of centre, and discreet ground handling. You cannot bend the rule. You can shrink the window of exposure.
What stops my family's personal data from leaking during an application?
Process, not promises. A signed NDA before documents move, a single named handler instead of a pool, controlled channels rather than shared inboxes or WhatsApp, minimal disclosure so no one sees more than their step needs, and deletion on a schedule once the visa issues. The government file stays complete and truthful; the private chain is where data discipline either holds or fails.