Can I request shredding of PHI?

Yes, but only after confirming retention obligations. For PHI, ensure a signed Business Associate Agreement (BAA) with the vendor and document the additional safeguards required by your privacy program.

Is notarization required to authorize destruction?

Not usually. Most organizations accept an authenticated signature from an authorized official. Notarization is rarely necessary unless your internal policy or a contract requires extra formalization.

Who can sign the request?

An authorized records custodian, compliance officer, or delegated approver can sign; the signature must reflect someone with authority to release records for disposal.

How do I confirm destruction occurred?

Require a Certificate of Destruction and chain-of-custody report from the vendor and retain it with your original request for audit evidence.

Can I submit the request electronically?

Yes. Electronic submission and e-signatures are acceptable when they capture intent, consent, attribution, and retention. Use platforms that preserve an audit trail.

What if records are under legal hold?

Do not proceed with destruction. Mark the request as suspended, notify legal counsel, and maintain the records until the hold is officially released.

Electronic Signature
Templates
Miscellaneous
Document Shredding Request

Document Shredding Request

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

DOCUMENT SHREDDING REQUEST

Recitals

WHEREAS, Client Name: requires secure collection and destruction of confidential documents and records; and

WHEREAS, Service Provider: is engaged in the secure shredding and disposal of paper and media and represents that it is qualified to perform such services in accordance with industry standards; and

NOW, THEREFORE, the parties agree to the terms and conditions set forth below governing the collection, transportation, destruction, and certification of documents designated for shredding.

Client and Site Information

Client Contact Client Address / Pickup Location Contact Phone Contact Email

Scope of Work

Description of documents and services to be performed (provide detail regarding record types, date ranges, special handling instructions, and required certification):

Collection and Chain of Custody

Requested Service Date: Preferred Time Window:

On-site collection to be performed by Service Provider representative:

Chain of Custody Record (to be completed by Service Provider)

Shredding Options and Materials

Estimated Volume: Material Types:

Shredding Method: On-site (mobile unit) Off-site (secure transport to facility) Media Destruction (hard drives, tapes)

Payment Terms

Total Fee for Services:

Payment Schedule Late Payment

Accepted Payment Methods:

Term and Termination

Agreement Start Date: Agreement End Date:

Either party may terminate this request for cause if the other party materially breaches any obligation and fails to cure the breach within days after receipt of written notice. Termination without cause requires days' prior written notice.

Confidentiality

Service Provider shall treat all documents and information obtained from Client as Confidential Information. Service Provider will not disclose, publish, transfer, or otherwise make available any Confidential Information to any third party except as required to perform the services under this request or as required by law. Service Provider shall implement and maintain reasonable physical, administrative and technical safeguards to protect Confidential Information against unauthorized access, disclosure, alteration or destruction.

Client represents and warrants that it has authority to direct the destruction of the documents listed and that destruction of such documents will not violate any law or third-party right. Client will identify any documents required to be retained and such documents will be segregated and excluded from destruction.

Certificate of Destruction and Liability

Service Provider will issue a Certificate of Destruction upon completion confirming date, method of destruction, and estimated volume. Issue Certificate of Destruction: Yes No

Provider liability for loss or unauthorized disclosure of documents shall be limited to direct damages proven and caused by the Provider's gross negligence or willful misconduct, and in no event shall Provider be liable for consequential, special, or punitive damages. Any claim must be asserted in writing within days after discovery of the event giving rise to the claim.

Records Retention and Exceptions

Documents identified by Client for retention must be clearly marked and segregated prior to pickup. Service Provider is not responsible for destroying documents that are not properly identified or that are inadvertently removed by Client prior to destruction. Indicate if any documents are subject to legal hold: Yes No

Governing Law

This Agreement shall be governed by and construed in accordance with the laws of the state of without regard to its choice-of-law principles. Venue for any dispute arising under this Agreement shall be the state or federal courts located within that state.

Entire Agreement

This Document Shredding Request, including any exhibits, schedules, and written purchase orders expressly incorporated herein, constitutes the entire agreement between Client and Service Provider with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, proposals, and communications, whether written or oral. No amendment or modification shall be binding unless executed in writing by authorized representatives of both parties.

Certifications and Authorizations

By signing below, Client certifies that it is authorized to request destruction of the items listed and that such destruction is not prohibited by applicable law. Client authorizes Service Provider to collect, transport and destroy materials as specified in this request and acknowledges receipt of Service Provider's confidentiality and security policies as applicable.

Client:

By:

Date:

Service Provider:

By:

Date:

What a Document Shredding Request Is and when it’s used

A Document Shredding Request is a formal written authorization to securely dispose of physical records or media that an organization or individual no longer needs. The request documents which records to destroy, the relevant date range, whether the materials include confidential or regulated information, and the method of destruction. It creates an audit trail for compliance, documents chain-of-custody, and helps vendors schedule secure pickup or drop-off. Use this form when authorizing third-party shredding, initiating in-house destruction, or documenting compliance-driven disposal.

Why a clear shredding request matters for compliance and risk control

A complete request reduces regulatory and privacy risk by creating a verifiable record of what was destroyed, when, and by whom. It helps meet retention and disposition obligations, supports breach prevention, and provides evidence required by auditors and regulators.

Who typically completes a shredding request

This form is used by staff who manage records, compliance, facilities, or vendor relationships.

Records Manager responsible for cataloging boxes and confirming authorized disposal permissions.
Compliance Officer ensuring retention rules and privacy law obligations are met before destruction.
Facilities or Office Manager arranging pickup logistics and vendor access to premises.

Completion normally involves coordination between records owners, the privacy/compliance team, and the shredding vendor to confirm secure handling and verification.

Step-by-step: submitting a shredding request

Follow these steps to prepare and submit a compliant request and arrange secure destruction.

01

Identify Records: Catalogue boxes and label content before completing the request.
02

Confirm Retention: Verify retention obligations with records or legal counsel before disposal.
03

Authorize Request: Obtain an authorized signature from the records owner or delegated approver.
04

Schedule Pickup: Coordinate vendor pickup and request a Certificate of Destruction.

Typical processing flow after you submit the request

Understanding the vendor and internal steps helps set expectations and track completion.

Submission: Form received and logged by records or facilities team.
Verification: Records owner and compliance confirm disposition authority.
Collection: Vendor collects items and documents chain-of-custody.
Destruction: Materials shredded and Certificate of Destruction issued.

How to set up a secure e-submission workflow

Configure the online form and approvals to capture required data and preserve an audit record.

Field	Configuration
Requestor Identity	Require full name, org, and work email; use exact-match verification.
Approval Routing	Route to records custodian and compliance in sequence for sign-off.
Attachments	Allow upload of inventory lists or retention approvals in PDF format.
Notifications	Send automated emails on submission, approval, and completion.

Digital submission and signature considerations

Use an e-sign and document workflow platform that preserves an audit trail and supports authentication.

File formats: PDF or DOCX accepted for inventory attachments.
Authentication: Email link plus optional SMS or two-factor authentication.
Integrations: Connectors to cloud storage and ticketing systems.

Core elements to include on every shredding request

A professional request captures who is authorizing disposal, what is being destroyed, associated dates, and how destruction will be confirmed.

Requestor Details

Name, department, and contact information so the vendor and internal teams can verify authorization and reach a responsible party for questions or exceptions.

Records Inventory

Concise inventory describing box counts, record types, date ranges, and any unique identifiers used by your records system for accurate matching.

Regulated Data Flag

Clear indication if materials contain PHI, PII, tax records, or other regulated data so appropriate handling, BAAs, or special chain-of-custody controls are applied.

Authorization Signature

Authorized signatory, printed name, title, and date to document legal authority to destroy; include delegated approval if applicable.

Disposition Method

Specify on-site shredding, off-site destruction, or secure bin pickup and note whether cross-cut or pulverization is required for media.

Verification

Request a Certificate of Destruction and include instructions for the vendor to provide chain-of-custody documentation and retention of AV records if RON or recorded transfer is used.

Security and compliance checks to document on the form

HIPAA BAA: Indicate whether a BAA is required.

PII/PHI Flag: Mark datasets containing personal health information.

Chain-of-Custody: Request vendor custody logs.

Certificate: Require Certificate of Destruction.

Encryption: Ensure encrypted file transmission for attachments.

Access Control: Limit edit rights to authorized staff.

Key legal and operational risks if the request is incorrect

HIPAA Violation: Potential civil penalties and breach obligations.

Data Breach: Increased risk of identity theft and remediation costs.

Retention Breach: Loss of records subject to legal hold or audit.

Chain-of-Custody Loss: Weakened evidentiary protection in disputes.

Regulatory Fines: Fines under state privacy or record-keeping laws.

Contract Liability: Vendor or third-party liability for incorrect disposal.

Common mistakes that delay secure destruction

Providing vague descriptions (e.g., 'old files') rather than specific types and date ranges makes it hard to confirm which records may be under retention.
Failing to check retention schedules or legal holds before submitting can result in premature destruction and significant compliance exposure.
Omitting the regulated-data flag (PHI/PII) prevents the vendor from applying required safeguards or executing a BAA where needed.
Not obtaining an authorized signature or delegated approval often leads vendors to reject pickup or require additional verification steps.

Practical examples: common shredding request scenarios

These scenarios show how a completed request looks in typical organizational contexts.

Offboarded Employee Files

A human resources team compiles three bankers boxes of former-employee paperwork for 2017–2019

request marks boxes and flags payroll records for retention
the vendor collected on schedule and provided a Certificate of Destruction retained in HR records for audit purposes.

End-of-Year Cleanup

A small business schedules quarterly pickups for administrative records older than seven years

the records manager lists box counts and types on the request
the vendor performed on-site shredding and delivered an electronic destruction certificate stored alongside the original request.

Who signs and approves the request

Records Manager

The records manager typically prepares the inventory, confirms retention compliance, and signs to authorize destruction; they maintain the destruction certificate and internal disposal logs for audits.

Compliance Officer

A compliance or privacy officer reviews regulated data flags, approves BAAs where required, and confirms that legal holds are cleared before the records are released to the vendor.

Practical tips for accurate, efficient shredding requests

Small improvements in how you prepare the request reduce delays and strengthen compliance evidence.

Be specific about contents

Use precise descriptions, box numbers, and date ranges so records owners and vendors can verify items quickly without risking erroneous destruction.

Confirm legal holds

Always check for active litigation, audit, or regulatory holds before scheduling destruction and document the clearance in the request.

Require written verification

Ask the vendor for a signed Certificate of Destruction and chain-of-custody record and store those documents with the original request for future audits.

Use authenticated e-signatures

Capture approval with an electronic signature linked to an audit trail so the authorization can be reproduced and verified reliably.

Timing and scheduling expectations for shredding requests

Plan ahead and allow adequate lead time for approvals, vendor scheduling, and verification steps.

Standard Lead Time:

Allow at least 7 business days for approval and vendor scheduling.

Expedited Service:

Some vendors offer next-business-day pickup for an extra fee.

HIPAA Breach Window:

If destruction underscores a breach event, follow breach notification obligations without unreasonable delay.

Audit Retention:

Retain the request and certificate for the same period as the destroyed records' retention schedule.

Verification Period:

Expect delivery of a Certificate of Destruction within 3–10 business days after pickup.

Comparing e-sign and workflow platforms for submitting shredding requests

Platform choice affects authentication, audit trails, and integration with records systems; cost and plan limits also differ across vendors.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Yes	Yes	Yes	Yes
Bulk Send	Yes (Business Premium+)	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Frequently asked questions about Document Shredding Requests

Answers to common questions about authority, PHI handling, signatures, and proof of destruction.

Need help? Contact support

Can I request shredding of PHI?
Yes, but only after confirming retention obligations. For PHI, ensure a signed Business Associate Agreement (BAA) with the vendor and document the additional safeguards required by your privacy program.
Is notarization required to authorize destruction?
Not usually. Most organizations accept an authenticated signature from an authorized official. Notarization is rarely necessary unless your internal policy or a contract requires extra formalization.
Who can sign the request?
An authorized records custodian, compliance officer, or delegated approver can sign; the signature must reflect someone with authority to release records for disposal.
How do I confirm destruction occurred?
Require a Certificate of Destruction and chain-of-custody report from the vendor and retain it with your original request for audit evidence.
Can I submit the request electronically?
Yes. Electronic submission and e-signatures are acceptable when they capture intent, consent, attribution, and retention. Use platforms that preserve an audit trail.
What if records are under legal hold?
Do not proceed with destruction. Mark the request as suspended, notify legal counsel, and maintain the records until the hold is officially released.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now