What records can be shredded?

Only records that have met the retention period and are not subject to legal hold or ongoing care obligations should be destroyed. Confirm retention rules, check for active legal holds, and document the basis for destruction before proceeding.

Is an electronic signature valid?

Yes. Electronic signatures are legally binding under the ESIGN Act (15 U.S.C. §7001) and UETA where adopted, provided intent, consent, attribution, and record retention requirements are satisfied.

Does HIPAA allow shredding?

HIPAA does not prohibit destruction; covered entities must protect PHI until disposal and retain required records for six years under 45 CFR §164.530(j). Use secure methods that render PHI unreadable or indecipherable.

Do I need a witness or notary?

Most routine record destruction authorizations do not require notary acknowledgment. Follow internal policy and state law; obtain witness or notary when your organization or state statute specifically requires it.

What proof should the vendor provide?

Request a signed certificate or manifest showing volume destroyed, date, and witness; retain chain-of-custody logs and vendor insurance or SOC reports for vendor-managed destruction.

How long keep the destruction record?

Retain the shredder form and any vendor certificates for a period consistent with your records retention policy; commonly keep destruction evidence for at least three to seven years to support audits or inquiries.

Electronic Signature
Templates
Miscellaneous
Counseling Services Shredder

Counseling Services Shredder

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

COUNSELING SERVICES SHREDDER AGREEMENT

This Counseling Services Shredder Agreement ("Agreement") is entered into on by and between Client Name: and Shredder Company: .

WHEREAS

WHEREAS, Client operates counseling services and maintains client records and sensitive materials that require secure destruction in accordance with applicable privacy and data-protection laws; and

WHEREAS, Shredder Company is engaged in the business of secure document and media destruction and represents that it has the necessary facilities, equipment, trained personnel and procedures to perform secure destruction in a manner designed to protect confidentiality and client privacy; and

WHEREAS, the parties desire to set forth their respective rights and obligations with respect to the collection, transport, secure destruction and documentation of counseling records and related materials.

SCOPE OF WORK

Shredder Company shall provide secure collection, transport, shredding and disposal services for physical records and media as described below. Shredder Company shall perform all services in a professional manner consistent with industry standards and in compliance with all applicable privacy and data protection laws.

Detailed Scope (describe records, frequency, locations) Collection Method

Select method of collection: On-site pickup Client drop-off Locked secure bins

Certificate of Destruction

Shredder Company shall issue a written certificate of destruction for each completed destruction event. Certificate required

PAYMENT TERMS

Client shall pay Shredder Company the amounts specified below in consideration of the services performed. All payments shall be due in accordance with the schedule set forth in this section.

Total Contract Amount Payment Schedule Late Payment Fee

Past due balances shall incur a late fee of % per month (or the maximum permitted by law), plus reasonable collection costs.

TERM AND TERMINATION

This Agreement commences on Start Date and continues until End Date unless earlier terminated as provided herein.

Termination Notice

Either party may terminate for convenience upon written notice to the other party not less than days prior to the effective termination date. Either party may terminate immediately for material breach if the breach is not cured within thirty (30) days after written notice.

CONFIDENTIALITY

Shredder Company acknowledges and agrees that in the performance of services it may receive or have access to confidential information, including but not limited to client-identifiable records, protected health information, and other sensitive data (collectively, "Confidential Information"). Shredder Company shall: (a) maintain such Confidential Information in strict confidence; (b) use Confidential Information solely for purposes of performing services under this Agreement; (c) not disclose Confidential Information to any third party except as required to perform services or as required by law; and (d) implement administrative, physical and technical safeguards reasonably designed to protect Confidential Information from unauthorized access, use or disclosure.

Will Shredder Company handle protected records?

Yes — shredding and destruction of client records and other protected materials

Security Procedures

LIABILITY AND INDEMNIFICATION

Each party shall indemnify, defend and hold harmless the other party and its officers, directors, employees and agents from and against any and all claims, liabilities, losses, damages and expenses (including reasonable attorneys' fees) arising out of the indemnifying party's negligence or willful misconduct in performing its obligations under this Agreement. Notwithstanding the foregoing, Shredder Company's aggregate liability for any claim arising under this Agreement shall be limited to direct damages not to exceed the total fees paid by Client to Shredder Company under this Agreement during the twelve (12) months preceding the claim; in no event shall either party be liable for consequential, incidental or punitive damages except for damages resulting from intentional misconduct or gross negligence.

GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the State of without regard to its choice of law principles.

ENTIRE AGREEMENT

This Agreement constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, proposals, negotiations and communications, whether written or oral. Any amendment or modification of this Agreement must be in writing and signed by an authorized representative of both parties.

PARTY CONTACT INFORMATION

Client Contact Name Client Address Shredder Contact Name Shredder Address

Client:

By:

Date:

Shredder Company:

By:

Date:

What the Counseling Services Shredder is and why it exists

The Counseling Services Shredder is a written authorization and process checklist used by counseling practices and their administrators to document secure destruction of client records. It records who approved destruction, which records are covered, the retention basis, the destruction method (for example, cross-cut shredding or secure digital deletion), and the date of destruction. The form creates an audit trail for compliance with federal and state retention rules and demonstrates a defensible process for secure disposal of protected health information and other sensitive client data.

Why a formal shredder form matters for counseling records

A formal Counseling Services Shredder creates documented consent and an auditable record that destruction followed an approved policy. It reduces legal and regulatory risk by showing the retention period was observed and that confidential health and client data were destroyed using appropriate methods.

Who completes and signs the shredder form

Signatures typically include an authorizing officer and a witness or compliance reviewer; organizations should specify signer roles in their retention policy.

Practice administrator or records manager responsible for retention and destruction policies.
Privacy officer or HIPAA compliance designee who verifies method and authorization.
Treating clinician or supervising clinician when clinical approval is required for patient records.

Core components to include in a professional shredder form

A complete Counseling Services Shredder should capture authorization, covered records, retention justification, destruction method, chain-of-custody steps, and signatures. Each component supports compliance with HIPAA and applicable state laws and provides evidence in the event of an audit or client inquiry.

Authorization

Name and title of the person approving destruction; reason for approval.

Record scope

Clear description of the records to be destroyed (dates, file types, client identifiers).

Retention basis

Reference to retention policy or statute that permits destruction.

Destruction method

Method used (cross-cut shredder, pulping, secure deletion) and vendor if outsourced.

Chain of custody

Transfer logs, dates, and custody signatures to avoid unauthorized access.

Signatures

Authorizer, witness, and person performing destruction with dates.

Step-by-step: completing and executing the shredder process

Follow a consistent sequence to verify retention eligibility, obtain authorization, and complete secure destruction with documented proof.

01

Verify Eligibility: Confirm retention period expired and exceptions do not apply.
02

Obtain Approval: Get signature from authorized approver before destruction.
03

Perform Destruction: Carry out the specified method and record chain-of-custody details.
04

Archive Certificate: Attach destruction certificate or vendor manifest to the shredder form.

Typical workflow for shredding counseling records

Most organizations route destruction requests through a records team, require approval, then either destroy in-house or send to a certified vendor while logging the activity.

Initiation: Staff flags records that meet retention criteria.
Review: Records manager verifies no active holds or legal holds exist.
Authorization: Authorized official signs the shredder form.
Execution: Destruction performed and certificate attached.

Configuring a digital destruction workflow

Set up a repeatable digital workflow to collect approvals, lock the record during review, and attach destruction proof to the client file.

Field	Configuration
Approval Path	Records manager -> Privacy officer
Authentication	Email + SMS or SSO for signers
Document Attachments	Vendor manifest and certificate required
Retention Flagging	Automated flag from EHR after retention date

Digital signing and evidence collection considerations

Ensure any eSignature vendor supports HIPAA (BAA available), encryption at rest and in transit, and long-term storage formats for legal defensibility.

Authentication Options: Email, SMS, SSO, or advanced methods
Audit Trail: Timestamps, IP, and action log required
File Formats: PDF/A or PDF with embedded attachments

Security and compliance data points to record

Encryption: AES-256 at rest

In-transit: TLS 1.2/1.3

Audit trail: Timestamped events

BAA status: BAA required for HIPAA

Access control: Role-based permissions

Retention flag: Policy-based hold indicator

Real-world examples of shredder form use

Two anonymized examples show how the form documents destruction for in-house and vendor-based workflows.

In-house destruction

A community clinic disposed of client intake forms from 2008–2010 after retention period expired

Performed cross-cut shredding onsite in locked room
The clinic attached the destruction log and approver signature to each client file for audit readiness and HIPAA records.

Vendor-managed shredding

A multi-site practice scheduled quarterly vendor pickup for physical files older than ten years

Vendor provided a signed manifest at pickup
The practice retained the vendor manifest with the shredder form and recorded the certificate of destruction for compliance documentation.

Timing rules and critical dates to monitor

Track retention start date, review windows, authorization deadlines, and destruction execution dates to ensure compliance.

Retention review:

Annual review of records reaching retention threshold

Authorization window:

Approval must precede destruction; document the approval date

Destruction execution:

Record actual destruction date and attach proof

Post-destruction retention:

Retain destruction certificate per policy (commonly 3–7 years)

Legal hold override:

Pause destruction immediately if legal or regulatory hold is issued

Common mistakes to avoid when preparing destruction

Destroying records without confirming there is no active legal hold or pending litigation
Failing to record precise record identifiers and date ranges, causing overbroad destruction
Not obtaining proper authorization from a designated officer or failing to document the approver's authority
Using uncertified vendors without retaining a signed certificate of destruction and chain-of-custody records

Key penalties and risks from improper destruction

HIPAA Violation: Civil and possible criminal exposure

Regulatory fines: State board or agency sanctions

Civil liability: Damages from improper disclosure

Professional discipline: Licensing sanctions

Lost evidence: Adverse outcomes in litigation

Reputational harm: Loss of client trust

How to amend or update an existing shredder authorization

Follow controlled amendment steps to change scope, retain prior approvals, and document versions.

01

Identify change:

Specify what portion of the original authorization is amended or rescinded

02

Obtain new approval:

Authorized signers must sign the amendment

03

Version control:

Attach the amendment to the original shredder form and note version/date

04

Communicate:

Notify impacted staff and vendors of the change

05

Retain prior forms:

Keep originals per retention policy for auditability

06

Execute corrected destruction:

Perform or reschedule destruction consistent with the amendment

Comparing eSignature vendors for shredder form workflows

Basic vendor capability and pricing comparisons help select an eSignature provider to capture approvals and evidentiary audit trails. signNow is listed first per platform comparison rules.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by vendor	Varies by vendor	Varies by vendor	Varies by vendor
Bulk Send	Yes (premium)	Yes	Yes	Yes	Varies
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes (BAA)	Yes (BAA)	Yes (BAA)	Varies	Varies

Frequently asked questions about the Counseling Services Shredder

Answers address common execution, legal, and technical questions about documenting and performing secure record destruction.

Need help? Contact support

What records can be shredded?
Only records that have met the retention period and are not subject to legal hold or ongoing care obligations should be destroyed. Confirm retention rules, check for active legal holds, and document the basis for destruction before proceeding.
Is an electronic signature valid?
Yes. Electronic signatures are legally binding under the ESIGN Act (15 U.S.C. §7001) and UETA where adopted, provided intent, consent, attribution, and record retention requirements are satisfied.
Does HIPAA allow shredding?
HIPAA does not prohibit destruction; covered entities must protect PHI until disposal and retain required records for six years under 45 CFR §164.530(j). Use secure methods that render PHI unreadable or indecipherable.
Do I need a witness or notary?
Most routine record destruction authorizations do not require notary acknowledgment. Follow internal policy and state law; obtain witness or notary when your organization or state statute specifically requires it.
What proof should the vendor provide?
Request a signed certificate or manifest showing volume destroyed, date, and witness; retain chain-of-custody logs and vendor insurance or SOC reports for vendor-managed destruction.
How long keep the destruction record?
Retain the shredder form and any vendor certificates for a period consistent with your records retention policy; commonly keep destruction evidence for at least three to seven years to support audits or inquiries.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now