HomeKnowledge base › On-site vs off-site shredding
Practice

On-site versus off-site shredding: what should SMEs pick?

There are two main models for outsourced document destruction. With on-site shredding a destruction truck comes to your location, parks in the car park, and destroys your archive on the spot. With off-site shredding your boxes or containers are collected, transported to a central plant, and destroyed there. Both meet the GDPR on their own, but they differ on risk profile, cost and chain of evidence. This article compares them frankly, so you can choose what fits.

Audience: office managers, procurement, DPOs and business owners considering contracting a destruction partner.

On-site shredding: what does it mean?

A truck or van with a built-in industrial shredder drives to your premises. The operator opens the loading flap, drops your archive or data media into the hopper, and destroys them on the spot. You can watch through a side window or a camera monitor in the cab. After the run the truck takes the shreds for recycling and provides a certificate.

Advantages:

Disadvantages:

Off-site shredding: what does it mean?

Your archive is collected in containers or bags, transported to a central processing site and destroyed there. Some providers work with sealed containers to safeguard chain integrity. The destruction certificate is sent later.

Advantages:

Disadvantages:

For data covered by professional secrecy (healthcare, legal, notarial) on-site destruction is practically the only option. The file simply must not leave the premises.

Risk comparison

The biggest difference sits in the question: can something go wrong between "archive cabinet" and "shredder"?

Scenario 1: a container falls off the truck

Off-site: files end up on the road. Data breach. On-site: this cannot happen because there is no transport.

Scenario 2: a staff member of the destruction party takes something

Off-site: theoretically possible in the step between collection and processing. On-site: virtually impossible because you watch and there is no intermediate step.

Scenario 3: unprotected storage at the processing site

Off-site: if a container sits outside overnight for processing, there is a break-in risk. On-site: does not happen.

On-site destruction eliminates chain risk. Off-site mitigates it via sealing, logging and surveillance, but cannot remove it entirely.

Cost comparison

The cost structure per kilo of paper or per kilo of data media differs.

For an average SME with an annual clean-up of 300 to 800 kilos, on-site destruction is often cost-neutral or cheaper than off-site, especially if you weigh the chain risk into the calculation.

Chain of evidence

The GDPR requires "appropriate technical and organisational measures" (art. 32). A solid chain of evidence is one such measure. On-site destruction has a minimal chain: archive to shredder within a few metres. Off-site involves several steps, each of which must be documented:

  1. Collection of the archive (who, when, which container)
  2. Sealing (which seal number)
  3. Transport (which route, who escorts)
  4. Arrival at processing site (time, signature)
  5. Breaking the seal (on camera)
  6. Destruction (method, time)
  7. Certificate and release of the shreds

See also our article on the Certificate of Destruction.

Time for the first destruction round?

We come to your location with a mobile shredder. No document leaves your premises intact. DIN 66399 P-5, certificate per job.

Request a quote

Which choice fits which situation?

Choose on-site shredding if:

Choose off-site shredding if:

Hybrid model

Some large organisations combine the two. Regular non-sensitive archive goes off-site, sensitive files go on-site. That way you optimise cost without compromising on risk. Record this split in your processing register and in the processor agreement (see processor agreement checklist).

The environmental argument

Mobile shredders handle diesel more efficiently than you might think: a single route of 50 kilometres for 500 kilos of paper has a lower CO2 footprint than two trips for collection and return plus destruction at a central location. Ask your provider for CO2 reporting if you run ESG.


Unsure about the right choice? Call us or request a quote via desnipperaar.nl. We advise openly, even when the choice for off-site sits outside our own hand.