What accreditations should a document scanning provider have?

Look for ISO 27001 for information security and ISO 9001 for quality management, ICO registration, DBS-checked staff and a signed Data Processing Agreement. Under UK GDPR and the Data Protection Act 2018 you remain the data controller, so you are responsible for choosing a compliant processor and should always ask to see current certificates.

What scanning resolution and OCR accuracy should I expect?

300 dpi is the practical baseline for business documents and reliable OCR, with 600 dpi used for fine detail or archival masters. On clean, well-prepared typed documents OCR can reach 98–99% character accuracy, but handwriting and poor-quality originals score much lower. Be wary of any provider claiming 100% accuracy on all document types.

Which file format is best for scanned business records?

Searchable PDF suits most day-to-day business use, while PDF/A is the ISO-standardised choice where long-term preservation matters. TIFF is still used in some legal and archival workflows. A good provider recommends a format based on how you will use the files rather than defaulting to one output.

Should I run a pilot before committing to a full scanning project?

Yes. A paid pilot or sample batch lets you judge real image quality, OCR performance and indexing accuracy on your own documents before committing the whole archive. It surfaces problems while they are still cheap to fix and is the single most useful test of a provider's quality.

How should a scanning provider handle my original documents afterwards?

The provider should offer either secure return of the originals or certificated destruction, with a barcoded chain of custody throughout. If you are digitising to go paperless, choose a provider that can also supply secure shredding with a certificate of destruction and, where needed, off-site storage for records you must retain.

What Should You Look for in a Professional Document Scanning Provider?

A professional document scanning provider should give you three things you can verify before you commit: a secure, auditable chain of custody for your paper; measurable image and OCR quality backed by written standards; and indexed, structured output that your team can actually search. Anything less and you risk handing confidential records to a supplier who scans them badly, loses track of the originals, and returns a folder of unsearchable images. This guide covers exactly what to check — from accreditations and data handling to file formats, quality control, and pricing transparency — so you can tell a genuine records-management partner apart from a box-and-scan operation.

Security, Accreditation and Compliance Come First

Your documents almost certainly contain personal data — HR records, client files, financial paperwork — which means the moment you hand them over, UK GDPR and the Data Protection Act 2018 apply. The provider becomes a data processor and you remain the data controller, so you are legally responsible for who you choose. Under a processor arrangement you must have a written contract (a Data Processing Agreement) in place before any file leaves your building.

Ask for evidence, not reassurances. A serious provider will hold and be able to show:

ISO 27001 — the information security management standard that governs how your data is stored, accessed and protected throughout the project.
ISO 9001 — quality management, which underpins consistent scan quality and repeatable processes.
A signed Data Processing Agreement setting out lawful basis, retention, sub-processors and breach notification.
DBS-checked staff and a secure, access-controlled facility rather than an open warehouse floor.
ICO registration as a data controller/processor — you can verify this free on the ICO’s public register.

The stakes are real: the ICO can issue fines of up to £17.5m or 4% of global turnover for serious data protection failures, and a scanning bureau that mishandles a batch of medical or legal files can trigger exactly that kind of exposure. If a provider can’t produce accreditation certificates on request, treat it as a red flag.

A Documented, Auditable Chain of Custody

Between your office and the scanner, your files pass through collection, transport, preparation, scanning and either return or secure destruction. At every one of those handovers there should be a record of who held the documents and when. A professional provider tracks work at box and often file level using barcodes, so if you ever need to prove where a specific record was on a specific date — during an audit, a legal hold, or a subject access request — the trail exists.

Questions worth asking before you sign:

Are documents transported in the provider’s own security-vetted vehicles, or handed to a third-party courier?
Is every box and batch barcoded and logged on intake?
Can you get a scan-on-demand or urgent retrieval while the project is in progress?
What happens to the originals afterwards — secure return, or certificated destruction with a shredding certificate?

If you plan to destroy paper after digitising, the provider should offer secure shredding with a certificate of destruction, and be able to feed the whole job — collection, scanning and disposal — through a single audited workflow. Splitting it across suppliers is where accountability tends to fall apart.

Image Quality, OCR and File Formats

A cheap scan that produces crooked, unreadable pages is worse than no scan at all, because you’ll have destroyed the paper original to keep it. Professional providers work to defined standards. Ask what resolution they scan at — 300 dpi is the practical baseline for business documents and reliable OCR, with 600 dpi used for fine detail or archival masters. They should also handle mixed batches: different paper sizes, staples, treasury tags, double-sided pages and fragile originals without losing content.

OCR that makes files findable

Optical Character Recognition turns a picture of text into searchable text. Without it you get an image-only PDF that no one can search by keyword. A good provider will quote realistic accuracy — well-prepared, clean typed documents can reach 98–99% character accuracy, while handwriting and poor-quality faxes drop far lower — and will be honest about which of your documents suit OCR. Beware anyone promising “100% accuracy” on everything; it doesn’t exist.

The right output format

For most business records you want searchable PDF for day-to-day use, and PDF/A where long-term, standards-based preservation matters — PDF/A is the ISO-standardised format designed to stay readable for decades. TIFF still appears in some legal and archival workflows. The provider should recommend a format based on how you’ll use the files, not just default to whatever their software spits out.

Indexing, Delivery and Quality Control

Scanning is only half the job. If a million pages arrive as a dump of files named “scan0001.pdf”, your team still can’t find anything. Indexing — capturing the metadata that lets you locate a file by client name, reference number, date or department — is what turns a scanning project into a usable digital archive. Agree the indexing fields up front, and check how files will be delivered: a structured folder hierarchy, encrypted drive, secure download, or ingestion straight into your document management system or SharePoint.

On quality control, a professional bureau doesn’t just scan and hope. Look for:

A documented QC process — image checks, page-count reconciliation against the originals, and re-scanning of any rejects.
A named project manager and a single point of contact, not a call-centre ticket queue.
A written Service Level Agreement covering turnaround times, accuracy targets and what happens if they’re missed.
A willingness to run a paid pilot or sample batch so you can judge real output before committing the full archive.

A pilot is the single most useful test you can run. It shows you the actual image quality, OCR performance and indexing accuracy on your documents — not a polished demo — and it surfaces problems while they’re cheap to fix.

Transparent Pricing and No Hidden Costs

Scanning quotes vary because the work varies — preparation (removing staples and bindings), scanning, OCR, indexing depth, collection and destruction are often priced separately. That’s fine, as long as it’s transparent. Ask for an itemised quote and make sure you understand what’s included per page or per box and what costs extra. The cheapest headline rate frequently hides charges for document prep or indexing that appear later. A provider who explains their pricing clearly, and who can flex between backfile and day-forward scanning as your needs change, is one you can build a long-term relationship with.

Finally, think beyond the immediate job. The best providers also offer secure off-site storage for paper you must keep, and can combine physical archiving with digital access — so you’re choosing a records-management partner, not a one-off scanning transaction. For more guidance on getting digitisation right, browse our resources library.