Confidential destruction
Compliance software for confidential destruction.
Two duties on one load: what the waste is, and who was allowed to touch it.
14 days free access · no card needed
Confidential destruction carries an obligation nothing else in waste does. The material is waste, so duty of care applies in full — and it is also personal data until it is destroyed, which means the customer has their own obligations that they discharge partly through you.
That changes what the record has to show. Not only that the waste moved from one holder to another, but that custody was unbroken, that the people handling it were vetted, and that destruction actually happened and can be evidenced to a third party.
Customers reflect that in how they buy. Contracts come with vetting requirements, audit rights and certificate expectations, and the ones with the most to lose audit hardest.
The records
What confidential destruction operators are answerable for
- Chain of custody from collection to destruction
- Destruction certificates issued to the customer
- Waste transfer notes for the resulting material
- Staff vetting and screening evidence
- Vehicle checks, defects and inspection history
- Incidents and near misses, through to close-out
The problem
What makes this hard for confidential destruction operators
Two obligations on one movement
The load is waste and it is also personal data. Duty of care governs one and data protection governs the other, and the customer is relying on you for both at once.
Custody has to be continuous
The value of the service is that nobody unauthorised touched the material. That is a claim about every step, and it is only as good as the record of each handover.
Vetted staff, and proving it
Contracts routinely require screening to a particular standard. Holding that evidence per person, current, and producible on request is a continuous obligation rather than a recruitment one.
A certificate somebody will rely on
The destruction certificate is the artefact the customer keeps for their own compliance. It has to be accurate, traceable to the collection and findable years later.
Audited by customers, not regulators
The hardest scrutiny usually comes from a client's information security team rather than an environmental one, and they ask different questions in a different format.
The answer
How WasteOptix helps
Custody has to be continuous
Collections and movements are recorded as discrete events with who handled them and when, so custody is a chain of records rather than an assurance.
Rounds & schedulingA certificate somebody will rely on
Transfer records are produced digitally with the movement, so what was collected and what became of it stay attached to each other.
Digital transfer notesAudited by customers, not regulators
Records can be reported across customers and periods, which is what an information security audit asks for rather than individual notes.
Environment Agency reportingVetted staff, and proving it
Driver and vehicle records hold entitlement and check dates per person and vehicle, so what was verified and when is evidenced.
Vehicles & driversTwo obligations on one movement
Any breach of custody or process is captured as an incident through to close-out, which is the record a customer will ask for first.
Incident management
Who it is for
The people doing this job
Operations managers
Running collections where the handover record is the product.
Compliance and information security leads
Answering customer audits about custody and vetting.
waste duty of careDrivers and collection staff
Taking custody at a customer's premises and evidencing it.
waste transfer noteDestruction facility staff
Completing the process the certificate attests to.
Customers' data protection officers
Relying on your records for their own accountability.
waste producer
Questions
What confidential destruction operators ask
- Does WasteOptix issue destruction certificates?
- It holds the collection and movement records that a certificate is built on and keeps them attached to the customer and the job. Whether it produces the certificate document itself in the form your customers expect is worth checking against your current template before you rely on it.
- Does it track staff vetting?
- Driver and staff records hold check and entitlement dates. Vetting to a particular standard is a process you run; what this does is record that it was done and when it needs doing again.
- Does it handle the data protection side?
- No. It is not a data protection or information security management system. It records the custody and waste side, which is the part a customer's auditor usually asks you to evidence.
- Can customers be given access to their own records?
- Access is role-based and can be scoped to a customer's own jobs. How you choose to expose that is your decision.
- Does it do invoicing?
- No. There is no accounting, invoicing or payroll in it.
Keep reading
An unbroken chain, recorded as it happens
14 days free access · no card needed