What is ISO 27001 and why does it matter for document storage?

ISO 27001 is the international standard for information security management. A certified provider has been independently audited for information security policies, risk management, staff training, incident response and business continuity. It requires annual surveillance audits to maintain.

Why is gas fire suppression essential for document storage?

Water-based fire suppression (sprinklers) destroys paper documents just as effectively as fire. Gas-based systems (FM-200, Novec 1230) extinguish fires by displacing oxygen, without using water. This is the only suppression method that protects paper documents from both fire and the fire-fighting process.

What Security Standards Should a Document Storage Facility Have?

Not all document storage facilities are built to the same standard. The difference between a professional, purpose-built facility and a converted warehouse can be significant — particularly when it comes to the security of your records. Here are the standards and features you should expect.

ISO 27001 — Information Security Management

ISO 27001 is the international standard for managing information security. A storage provider with ISO 27001 certification has been independently audited and verified to have:

A formal information security management system (ISMS)
Documented policies and procedures for handling confidential information
Risk assessment processes that identify and mitigate threats
Regular internal audits and management reviews
Staff training and awareness programmes
Incident response and business continuity plans

ISO 27001 is not a one-off assessment — it requires annual surveillance audits and a full recertification every three years. If a provider claims ISO 27001 certification, ask to see the certificate and check that it is current.

ISO 9001 — Quality Management

ISO 9001 certification confirms that the provider operates a quality management system covering all aspects of service delivery. This means consistent processes for collecting, storing, retrieving and destroying documents — reducing the risk of errors, lost items or service failures.

BS 10008 — Evidential Weight of Electronic Information

If you need scanned documents to carry legal weight (for example, as evidence in legal proceedings), BS 10008 certification is important. This standard covers the processes needed to ensure that digitised records are authentic, reliable and have not been tampered with.

Physical Security Standards

Beyond certifications, the physical facility should meet specific security requirements:

Perimeter Security

Security fencing around the entire site
Controlled gate access — barriers, bollards or security gates
External CCTV covering all approaches and entry points
Security lighting covering the perimeter and car park

Building Security

Controlled access — key card, PIN or biometric entry
All access logged and timestamped
Internal CCTV in all storage areas, corridors and processing zones
Intruder alarm connected to a certified Alarm Receiving Centre (ARC)
Security-rated doors and shutters

Fire Security

Gas fire suppression (FM-200, Novec 1230 or equivalent) — essential for protecting paper documents
Highly sensitive smoke and heat detection
Fire-rated construction — walls, floors and ceilings rated to at least 60 minutes
Compartmentalisation — fire stops between storage zones
Regular fire safety inspections and testing

Environmental Security

Climate control — stable temperature and humidity
Raised flooring to protect against water ingress
Environmental monitoring with alerts
Pest management programme

Staff Security Standards

DBS checks — all staff who handle documents should be DBS (Disclosure and Barring Service) checked
Confidentiality agreements — all staff should sign legally binding non-disclosure agreements
Security awareness training — regular training on information security, data protection and incident reporting
Supervised access — visitors and contractors should never have unsupervised access to storage areas

Transport Security

Locked, enclosed vehicles (not open vans)
GPS tracking on all collection and delivery vehicles
Chain of custody documentation for every collection and delivery
DBS-checked drivers

How EvaStore Meets These Standards

Our purpose-built facility in Shropshire holds both ISO 9001 and ISO 27001 certification. We use gas fire suppression in our Secure Vault, maintain 24/7 monitored CCTV, and track every box with barcode technology powered by O’Neil software. All our staff are DBS checked and sign confidentiality agreements.

Get a Free Quote

Every business is different, so the best way to understand your costs is to get in touch with our team. We provide clear, no-obligation quotes — usually within the same day.

Call us on 01691 650355 or use the form below.