Can the agreement be e-signed?

Yes. Electronic signatures are generally enforceable under the ESIGN Act (15 U.S.C. ch. 96) and state UETA laws when parties consent and records are retained. Note exceptions for documents that require notarization or other formalities.

Do I need a Business Associate Agreement?

If the shredded materials include protected health information, require a HIPAA Business Associate Agreement. The BAA defines permitted uses, safeguards, breach notification, and BAA signature responsibilities.

What proof should the vendor provide?

Require a dated Certificate of Destruction for each job, signed by the vendor, with job numbers, quantity or volume, method, and chain-of-custody details.

How long should I keep the agreement?

Retain the executed contract and destruction certificates for the period required by your industry rules—commonly at least three years; HIPAA requires six years for related records.

Is on-site shredding required?

Not always. Choice between on-site and off-site depends on risk tolerance, regulatory needs, and contract terms. Specify method in the agreement and require documented chain-of-custody for off-site destruction.

How can I cancel or change service?

Include termination notice periods, acceptable reasons for termination, and obligations for outstanding pickups and certificates. Clarify refund or final-billing procedures.

Electronic Signature
Templates
Miscellaneous
Shredding Service Agreement

Shredding Service Agreement

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

SHREDDING SERVICE AGREEMENT

This Shredding Service Agreement (Agreement) is made and entered into as of the Effective Date below by and between Client Name: , having principal address: , and Service Provider Name: , having principal address: .

RECITALS

WHEREAS, Client maintains certain confidential and/or sensitive documents and materials requiring secure destruction; and

WHEREAS, Service Provider is engaged in the business of providing document destruction and related chain-of-custody services and represents that it has the facilities, personnel, and procedures necessary to perform secure shredding in accordance with industry standards; and

NOW, THEREFORE, in consideration of the mutual covenants contained herein, the parties agree as follows:

SCOPE OF WORK

Description of Services

Service Provider will provide secure destruction services as described above, including chain-of-custody tracking, secure transport when applicable, and certificate of destruction upon completion. Client may request one-time or recurring services as set forth in the Service Schedule below.

SERVICE SCHEDULE

Service Frequency (select all that apply):

One-time pickup on

Weekly Bi-weekly Monthly

Special Instructions / Collection Points

PAYMENT TERMS

Total Contract Amount (if applicable): $

Payment Schedule

Invoicing and Due Date: Service Provider will submit invoices to Client and payment is due within days of invoice date. Late payments shall accrue interest at the lesser of per month or the maximum permitted by law.

TERM AND TERMINATION

Term Commencement Date: . Term Expiration Date: .

Either party may terminate this Agreement for convenience upon days' prior written notice to the other party. Termination for cause may be effected immediately upon material breach that remains uncured for days after written notice.

CONFIDENTIALITY

Service Provider acknowledges that during performance of services it may receive or have access to confidential information. Service Provider agrees to maintain the confidentiality of such information, to use it only for purposes of performing this Agreement, and to prevent unauthorized disclosure. This obligation shall survive termination for a period of years from the date of disclosure.

DATA SECURITY AND DESTRUCTION STANDARDS

Service Provider shall comply with all applicable federal and state privacy laws and industry standards for secure destruction. Shredding shall render paper documents unreadable and electronic media shall be destroyed or rendered unrecoverable in accordance with accepted secure disposal practices. Service Provider will provide a certificate of destruction upon request for each completed service event.

INDEMNIFICATION AND LIMITATION OF LIABILITY

Each party shall indemnify, defend and hold harmless the other from third-party claims arising from its negligent acts or omissions in performance of this Agreement. Except for willful misconduct or gross negligence, neither party shall be liable for incidental, consequential or punitive damages; aggregate liability shall be limited to direct damages not to exceed the greater of the total fees paid under this Agreement in the preceding twelve months or $10,000.

GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the State of , without regard to conflict of law principles.

ENTIRE AGREEMENT

This Agreement, together with any attachments or schedules expressly incorporated herein, constitutes the entire agreement between the parties and supersedes all prior negotiations, proposals, representations, and agreements, whether written or oral, relating to the subject matter hereof. Any amendment must be in writing and signed by authorized representatives of both parties.

NOTICES

All notices required or permitted under this Agreement shall be in writing and delivered to the contact person at the address listed below. Client Contact Name: , Phone: , Email: .

Provider Contact Name: , Phone: , Email: .

MISCELLANEOUS

Independent Contractor: Service Provider is an independent contractor and is solely responsible for payment of its employees, taxes and insurance. Subcontracting is permitted only with Client's prior written consent.

Severability: If any provision of this Agreement is held invalid or unenforceable, the remainder shall remain in full force and effect.

Client Printed Name:

By:

Date:

Service Provider Printed Name:

By:

Date:

What a Shredding Service Agreement Covers

A Shredding Service Agreement is a written contract between an organization and a document destruction provider that defines which materials will be destroyed, how destruction will occur, the timing and locations for pickup, proof of destruction, and liability allocation. The agreement typically records chain-of-custody procedures, security controls during transport and storage, accepted destruction methods (on-site crosscut shredding or off-site incineration), insurance and indemnity terms, and certification of destruction to support regulatory compliance such as HIPAA, state privacy laws, and industry-specific requirements.

Why a Clear Agreement Matters

A detailed Shredding Service Agreement reduces legal and compliance risk, documents chain of custody, and establishes measurable deliverables such as pickup frequency and certificate issuance. It protects both parties through insurance and liability terms while providing evidence of defensible destruction in audits or breach investigations.

Organizations That Commonly Use This Agreement

Many organizations with regulated or sensitive records use shredding contracts to manage secure disposal and prove compliance.

Healthcare providers and clinics handling PHI and medical records, where HIPAA privacy rules and BAAs are relevant.
Financial services and accounting firms that dispose of consumer financial information, tax documents, and statements.
Real estate firms, property managers, and legal practices that regularly discard contracts, tenant files, or title documents.

Step-by-Step: Creating and Executing the Agreement

Follow a standard sequence to reduce errors and ensure proof of compliant destruction.

01

Define Scope: List media, locations, and excluded items.
02

Confirm Methods: Specify on-site or off-site destruction method.
03

Set Timing: Agree pickup schedule and response windows.
04

Execute and Retain: Sign, exchange copies, and keep certificates.

Frequently Asked Questions

Answers to common questions about execution, compliance, and evidence of destruction.

Need help? Contact support

Can the agreement be e-signed?
Yes. Electronic signatures are generally enforceable under the ESIGN Act (15 U.S.C. ch. 96) and state UETA laws when parties consent and records are retained. Note exceptions for documents that require notarization or other formalities.
Do I need a Business Associate Agreement?
If the shredded materials include protected health information, require a HIPAA Business Associate Agreement. The BAA defines permitted uses, safeguards, breach notification, and BAA signature responsibilities.
What proof should the vendor provide?
Require a dated Certificate of Destruction for each job, signed by the vendor, with job numbers, quantity or volume, method, and chain-of-custody details.
How long should I keep the agreement?
Retain the executed contract and destruction certificates for the period required by your industry rules—commonly at least three years; HIPAA requires six years for related records.
Is on-site shredding required?
Not always. Choice between on-site and off-site depends on risk tolerance, regulatory needs, and contract terms. Specify method in the agreement and require documented chain-of-custody for off-site destruction.
How can I cancel or change service?
Include termination notice periods, acceptable reasons for termination, and obligations for outstanding pickups and certificates. Clarify refund or final-billing procedures.

Security and Compliance Elements to Include

Encryption: Encrypt records in transit.

BAA: HIPAA Business Associate Agreement when needed.

Chain-of-Custody: Documented custody for each transfer.

Audit Trail: Time-stamped job logs and certificates.

Insurance: Vendor liability and cargo insurance.

Access Controls: Restricted facility access and vetting.

Risks and Consequences of Poor Documentation

HIPAA Fines: Civil penalties and corrective action.

Data-Breach Liability: Consumer claims and remediation costs.

Contract Liability: Breach damages and indemnity claims.

Regulatory Sanctions: State enforcement or license risks.

Audit Failure: Inability to prove defensible destruction.

Reputational Harm: Loss of customer trust and business.

Common Preparation Errors to Avoid

Using vague scope language that fails to list media types, locations, or excluded items — this causes disputes about chargeable services and liability.
Failing to require a dated Certificate of Destruction and job-specific identifiers, which undermines audit readiness and breach defense.
Not confirming vendor insurance limits, background checks, and subcontractor use — leaving financial exposure for theft or negligent handling.
Omitting dispute resolution or termination procedures, resulting in unclear remedies and prolonged contract disputes.

Core Contract Clauses for a Professional Agreement

Include clear, enforceable clauses that allocate responsibilities and create measurable standards for service performance and compliance.

Scope of Services

Precisely list document types, media, and locations covered. Tie pricing and minimum volumes to specific service descriptions to prevent billing disputes and scope creep.

Chain of Custody

Describe receipt, transport, storage, and handoff procedures with job identifiers and signatures. Record custody steps in logs retained for audit and incident investigations.

Destruction Methods

Specify acceptable methods (crosscut shredding, incineration, degaussing for drives), destruction standards, and proof of irrecoverability for digital media.

Compliance and Certificates

Require certificates of destruction, retention of audio/video for on-site jobs when used, and assurances that vendor meets applicable laws and standards.

Liability & Insurance

Detail liability caps, indemnities, and minimum insurance coverages for property, cyber, and transportation risks to protect the client.

Pricing & Payment

State rates, minimum service charges, quoted fees for ad hoc services, and payment terms including dispute and adjustment processes.

Practical Workflow Settings to Specify

Define how the agreement will operate day-to-day, including authentication, notifications, and recordkeeping responsibilities.

Field	Configuration
Authentication	Signers identified by name and title; e-sign consent documented
Scheduling	Regular pickup cadence and exception handling
Notifications	Email or portal alerts for job completion and certificates
Recordkeeping	Vendor keeps logs and copies of destruction certificates

Digital and File Requirements for Execution

Specify acceptable document formats and integrations for electronic execution and certificate delivery.

File formats: PDF and DOCX are standard.
Integrations: Support for cloud storage and CRMs.
Authentication: Email, SMS code, or 2FA for signers.

Typical Timelines and Response Expectations

Set expectations for pickups, certificate delivery, and response times to create measurable service levels.

Effective Date:

Agreement starts on the signed MM/DD/YYYY date.

Scheduled Pickups:

Weekly, monthly, or on-demand windows defined in the schedule.

Certificate Delivery:

Certificates issued within 7 business days after job completion.

Ad Hoc Response:

Emergency pickup or overflow within 24–72 hours.

Audit Response Window:

Vendor provides logs and certificates within 10 business days for audits.

Comparing eSignature Options for Executing the Agreement

Many organizations use eSignature providers to execute shredding agreements electronically; compare common pricing and compliance features to choose a vendor aligned with your needs.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now