What should I check before signing a document storage contract?

Check how documents are tracked and retrieved, the realistic retrieval times and costs, the provider's security and compliance accreditations such as BS EN 15713 and ISO 27001, every charge beyond the headline storage rate, and the end-of-contract terms including notice period and removal fees. Get all of this confirmed in writing before you commit.

What hidden costs appear in document storage contracts?

The most common extra charges are retrieval and delivery fees, re-filing fees, intake and indexing costs, minimum-volume charges, annual price uplifts linked to RPI, and removal or destruction fees at the end of the term. The headline monthly rate rarely reflects the true cost, so ask for an itemised list of every charge.

What compliance standards should a document storage provider meet in the UK?

Look for BS EN 15713 for secure handling and destruction, ISO 27001 for information security, and ISO 9001 for quality management. Under the UK GDPR and Data Protection Act 2018 the provider acts as your data processor and must offer sufficient guarantees of security, including an auditable chain of custody for every record.

What happens to my documents when the storage contract ends?

That depends on the contract, which is why you should confirm it before signing. Check the notice period, the per-box removal cost, whether they will hand over your index and barcodes to a new provider, whether the contract auto-renews, and that they will return or securely destroy records on your instruction with certificates of destruction.

Should a document storage contract include destruction dates?

Yes. A good provider can apply retention-based destruction dates so files are securely shredded when their legal retention period ends, rather than charging you to store them indefinitely. The contract should also support legal holds that freeze destruction on specific records during litigation or investigation.

What Questions Should You Ask Before Signing a Document Storage Contract?

Before you sign a document storage contract, ask the provider exactly how retrieval works and what it costs, how your records are tracked, what security and compliance accreditations they hold, what happens at the end of the term, and which charges sit outside the headline rate. A storage agreement can run for years and quietly govern how quickly you can access your own files during an audit, a legal hold, or a GDPR subject access request. The questions you ask up front decide whether the contract protects you or traps you. Below are the questions that actually matter, and why each one is worth pinning down in writing before you commit.

How Will My Documents Be Tracked and Retrieved?

The single biggest difference between a good provider and a cheap one is how they find a file. Ask whether tracking is at box level or file level. Box-level tracking tells you which carton a document is in; file-level tracking pinpoints the individual folder, which matters when a solicitor or auditor needs one specific record from a box of 200.

Pin down the retrieval options and the realistic timescales for each:

Standard retrieval — typically next working day; confirm the cut-off time for same-day requests.
Scan-on-demand — the file is retrieved, scanned and emailed to you, often within hours, without anything physically leaving the facility.
Emergency or critical retrieval — same-day delivery; ask for the guaranteed response window and the surcharge.
Self-service portal — can you place, track and audit requests online, or is everything by phone and email?

If a provider can’t tell you their average retrieval time, treat that as a warning. Slow or vague retrieval is one of the most common ways businesses get caught out, as we cover across our resources library.

What Security and Compliance Standards Does the Facility Meet?

You remain the data controller for your records even after they leave your office, so under the UK GDPR and the Data Protection Act 2018 the provider is your data processor and must offer “sufficient guarantees” of appropriate security. Ask to see evidence rather than taking marketing claims at face value.

BS EN 15713 — the British and European standard for secure handling and destruction of confidential material.
ISO 27001 — information security management, covering access, processes and breach handling.
ISO 9001 — quality management, a sign that retrieval and intake follow documented, repeatable processes.
Fire protection — ask about detection, suppression and the building’s fire rating; some facilities use VESDA early-warning systems.
Access control and CCTV — who can enter the storage areas, how access is logged, and how long footage is retained.
Staff vetting — are warehouse and transport staff DBS-checked and trained in confidentiality?

Ask specifically whether they can provide an unbroken chain of custody — a documented record of every time a box or file is moved, accessed or returned. If your provider can’t prove who handled a record and when, you can’t prove it to the ICO either. Read more in our guide to secure document storage.

What Will It Actually Cost — Including the Charges Below the Headline Rate?

The monthly storage fee is rarely the whole story. The questions that protect your budget are about everything else. Ask the provider to list, in writing, the charges that apply on top of storage:

Retrieval and delivery — per box, per file, and per emergency request.
Re-filing — the cost to return a retrieved item to storage, often charged separately.
Intake and indexing — boxing, barcoding and cataloguing your records when they first arrive.
Minimum terms and minimum volumes — is there a floor you pay regardless of how much you store?
Annual uplift — many contracts increase fees each year by RPI or a fixed percentage; ask for the cap.
Permanent removal and destruction — the charge to take boxes out for good when you leave or shred them.

It’s the exit and retrieval charges, not the storage rate, that catch businesses out. A low monthly rate paired with steep removal fees is a classic way to make leaving expensive — which leads directly to the next question.

What Happens at the End of the Contract?

Exit terms decide how much control you keep. Before signing, get clear answers on the following:

Notice period — 30, 60 or 90 days? Longer notice means you’re locked in longer.
Removal costs — the per-box charge to take everything back or move it to another provider.
Transfer cooperation — will they release your full index and barcodes so a new provider can take over cleanly?
Auto-renewal — does the contract roll over automatically, and what’s the window to opt out?
Data on termination — confirm that, as your processor, they will return or securely destroy records on your instruction and provide certificates of destruction.

A reputable provider makes leaving as straightforward as joining. If the exit terms feel deliberately awkward or expensive, that tells you how they expect to keep your business.

Does the Contract Match Your Retention and Access Needs?

Your contract should reflect how long you actually need to keep records and how often you’ll touch them. UK retention periods vary widely — statutory financial records must be kept for six years under HMRC rules, while some health, pension and construction records run for decades. Ask whether the provider can:

Apply destruction dates to boxes so files are securely shredded when their retention period ends, rather than paying to store them forever.
Support a legal hold that freezes destruction on specific records during litigation or investigation.
Combine physical storage with digital access, so frequently needed files can be scanned while archive material stays in low-cost storage.

If you’re weighing storage against digitisation, our overview of document scanning options helps you decide which records are worth converting. A good provider will help you build a retention schedule rather than simply storing everything indefinitely and billing you for the privilege.

The Bottom Line

A document storage contract is a long-term relationship with your own records. The providers worth signing with will answer every question above clearly and put the detail in writing — tracking method, retrieval times, accreditations, the full charge list, and clean exit terms. Vague answers, missing accreditations or punishing removal fees are reasons to keep looking. Ask the hard questions before you sign, not after the first urgent retrieval goes wrong.