10 Questions to Ask a Shredding Company Before Signing a Contract
Hiring a shredding provider is more than a line item—it’s a critical security and compliance decision. Protect your organization from preventable data exposure with our comprehensive 10-question checklist. From verifying NAID AAA Certification to auditing the chain of custody, this guide walks you through the essential due diligence required before you sign your next service contract.
Choosing a shredding company is a security decision that affects compliance, reputation, and day-to-day operations. This guide gives businesses and organizations a clear checklist of questions to ask and what to look for in a shredding company before signing an agreement with a provider. It covers certification, chain of custody, employee handling, proof of destruction, hard drive and media standards, recycling, and pricing. Use it to compare vendors, document due diligence, and protect your organization from preventable compliance and data exposure problems.
1. Are you NAID AAA-Certified?
Start with certification because it reflects audited operations. NAID AAA Certification is designed to verify secure data destruction services through scheduled and surprise audits by trained, accredited security professionals. It is positioned as a way to support customer due diligence obligations.
Confirm that the certification is active right now, and that it covers the exact services you are hiring the vendor to perform, such as paper shredding, hard drive destruction, or both.
2. How do we verify your certification today?
Do not accept a logo on a website as proof. If you are evaluating what to look for in a shredding company, start with a verification path you can complete immediately, including the organization that lists the certification, the exact company name the certification is issued under, and the expiration date or current status. If the certification applies only to certain locations or service lines, confirm that the listing covers the specific site and services you are contracting for.
If the person on the call cannot walk you through verification in plain language, treat the certification claim as unproven.
3. What is your chain of custody from collection through destruction?
Chain of custody is the documented record of every handoff, location, and authorized person who handles your material from pickup to final destruction.
Ask the vendor to walk you through the process step by step.
- How material is collected at your site
- How it is secured in transit
- Whether it is stored before destruction, and where
- Who has access at each stage
- How containers are tracked and reconciled
- How your material stays separated and accounted for
For regulated information, disposal requires safeguards that prevent unauthorized access during the disposal process. A chain of custody process is how vendors operationalize that requirement.
4. Do you shred on-site, off-site, or both?
Get a direct recommendation tied to your risk level and operational reality. On-site shredding supports direct observation and immediate destruction. Off-site shredding supports high-volume workflows when transport controls and facility controls are strict and documented.
Ask these follow-up questions to the shredding company:
- If material leaves our site, what controls stay in place until destruction?
- Can we witness destruction? What does witnessing look like in practice?
- Do we receive documentation that matches the service type and location?
5. What employee screening and training standards do you enforce?
Information security runs through people, so ask for specifics and request a written summary of the vendor’s policies. Confirm what background screening they require, how often employees are trained and what the training covers, and what on-site controls they enforce, such as ID badges, uniforms, and visitor management. Ask about rules for phones and cameras in secure areas, and clarify how they handle subcontractors, including whether subcontractors are used at all and what standards apply to them.
6. What exactly happens to our paper after destruction?
You are paying for irreversible destruction and controlled handling, not just a shred event. Ask what equipment is used and what the shredded output looks like. Find out what happens next, including baling, storage, transport, and recycling. If sustainability matters to your organization, ask where the paper goes and how the provider documents recycling and downstream handling.
7. Do you follow NIST guidance in destroying hard drives and other media?
Digital media requires media-specific controls. Paper policies do not protect data stored on drives.
The National Institute of Standards and Technology (NIST) released the Guidelines for Media Sanitization, which defines it as a process that renders access to target data infeasible for a given level of effort. It provides guidance for selecting sanitization techniques and controls based on information sensitivity.
8. What documentation do we receive after every service?
One of the clearest indicators of what to look for in a shredding company is the documentation they provide after each service. Ask what the certificate of destruction includes, and make sure it is detailed enough to stand up in an audit.
A complete certificate includes the service date, service time, service location, material type, quantity or container count, destruction method, and an identifier that ties the certificate to the specific job. Documentation is a core part of proving you applied appropriate safeguards through disposal.
9. What insurance do you carry?
Professional vendors plan for the hard day. Request for certificates of insurance that match the scope of work, including coverage appropriate for mobile operations and facility operations. Then ask for the incident response process in writing. This is one of the most important questions to ask a shredding company. Confirm the reporting timelines and escalation contacts. Ask what operational steps they take when there is a missed pickup, a damaged container, a security concern, or a documentation discrepancy.
A real answer includes clear accountability and a process that closes the loop with corrective actions. If the response is vague, your risk becomes their ambiguity.
10. How do you price your service?
Pricing should be transparent enough that your finance team never gets surprised. Ask for a written explanation that includes a pricing model, including per pickup, per container, per pound, or per project. Clarify if there are minimum charges, environmental fees, and recurring service requirements.
The Standard for Choosing the Right Shredding Partner
Hiring a shredding provider is a compliance and security decision. The right vendor answers these questions directly, proves claims through verification and documentation, and runs a process your team can explain to an auditor without improvising.
At Viking Shred, we support organizations across Northern California with secure and professional shredding services backed by NAID AAA Certification standards, a documented chain of custody, and certificates of destruction. If you want a partner that treats shredding like a security program, Viking Shred delivers a process you can point to with confidence.
Contact us today to schedule a service and let our team walk you through every step of the process, pricing, and documentation.