NAID AAA Certified Veteran Owned Est. 2011

Document Shredding & Records Management Glossary

A comprehensive reference of terms used in document destruction, records management, and information security.

Understanding the terminology used in document destruction and records management helps you make informed decisions about your organization's information security program. Click any term below to expand its definition.

A B C D E F G H I M N O P R S V

A

AAA Certification
The highest level of certification awarded by i-SIGMA (formerly NAID) to document destruction companies. AAA Certification requires scheduled and unannounced audits of operational security, employee hiring practices, insurance coverage, and destruction processes. Valley Green Shredding holds NAID AAA Certification for both on-site and plant-based document destruction.

B

Bonded Employee
An employee covered by a surety bond, which provides financial protection to clients in the event the employee commits theft or fraud. Reputable shredding companies require all employees who handle client materials to be bonded. At Valley Green Shredding, every team member is bonded, insured, and has passed a thorough background check.
Born-Digital
A record that was created electronically and has never existed in physical form. Examples include emails, spreadsheets, database entries, and digital photographs. Born-digital records require different destruction methods than paper documents — typically physical destruction of the storage media (hard drives, SSDs) rather than paper shredding. See our Born-Digital FAQs for more information.

C

Certificate of Destruction (COD)
A formal document issued by a shredding company after materials have been destroyed. A COD typically includes the date and time of destruction, the method used, the quantity destroyed, and a certification that the destruction was performed in compliance with applicable regulations. Valley Green Shredding provides an electronic Certificate of Destruction with every job for your compliance records.
Chain of Custody
The documented trail that tracks the handling of sensitive materials from the moment they leave the client's possession until they are destroyed. A secure chain of custody includes locked containers, sealed transport, GPS-tracked vehicles, and signed documentation at each transfer point. Maintaining chain of custody is a core requirement of NAID AAA Certification.
Cross-Cut Shredding
A shredding method that cuts paper in two directions — both lengthwise and widthwise — producing small confetti-like particles. Cross-cut shredding provides significantly higher security than strip-cut shredding because the resulting particles are much smaller and virtually impossible to reassemble. Valley Green Shredding uses industrial cross-cut shredders that exceed DIN 66399 security standards.

D

Data Breach
An incident in which sensitive, protected, or confidential data is accessed, disclosed, or stolen by an unauthorized party. Data breaches can result from cyberattacks, but they also occur through improper disposal of physical documents and electronic media. Massachusetts law (201 CMR 17.00) requires organizations to implement security measures to protect personal information, including proper destruction of records containing PII.
Digitization
The process of converting physical documents into digital format, typically by scanning paper records into PDF, TIFF, or other electronic file formats. Professional digitization includes quality verification, OCR (optical character recognition) for text searchability, and proper indexing. Valley Green Shredding offers comprehensive document scanning services for businesses and organizations.
Downstream Data Coverage
Insurance coverage that protects clients from liability if their data is compromised after it has been transferred to a destruction vendor but before it has been destroyed. This coverage is a requirement of NAID AAA Certification and provides an additional layer of protection beyond standard commercial liability insurance.

E

E-Discovery
The process of identifying, collecting, and producing electronically stored information (ESI) in response to a legal request or litigation. E-discovery can involve emails, documents, databases, voicemails, social media content, and other digital records. Proper records management and retention schedules help organizations respond to e-discovery requests efficiently. See our Legal Discovery scanning services.
Electronic Media
Any device or medium used to store data electronically, including hard disk drives (HDDs), solid-state drives (SSDs), USB flash drives, magnetic tapes, CDs, DVDs, and memory cards. Electronic media containing sensitive data must be securely destroyed at end-of-life to prevent data recovery. Valley Green Shredding provides certified electronic media destruction.

F

FACTA (Fair and Accurate Credit Transactions Act)
A 2003 federal law that includes the Disposal Rule, requiring any person or business that possesses consumer information derived from a consumer report to properly dispose of that information. The FACTA Disposal Rule applies to any organization that uses credit reports, background checks, or similar consumer data — and it specifically requires that paper records be shredded, burned, or pulverized so they cannot be read or reconstructed.
FERPA (Family Educational Rights and Privacy Act)
A federal law that protects the privacy of student education records. FERPA applies to all educational institutions that receive federal funding and governs how student records are maintained, disclosed, and destroyed. When education records are no longer needed, they must be securely destroyed to prevent unauthorized access to student information.

G

GLBA (Gramm-Leach-Bliley Act)
A federal law that requires financial institutions to explain their information-sharing practices and protect sensitive consumer financial data. The GLBA Safeguards Rule requires financial institutions to develop, implement, and maintain an information security program that includes the secure disposal of customer information. Banks, credit unions, insurance companies, and securities firms must ensure that physical and electronic records are properly destroyed.

H

Hard Drive Destruction
The physical destruction of hard disk drives (HDDs) and solid-state drives (SSDs) to ensure data cannot be recovered. Methods include industrial shredding (cutting the drive into small fragments), crushing, and degaussing (for magnetic drives only). Simply deleting files or reformatting a drive does not destroy the data. Valley Green Shredding provides NAID AAA Certified hard drive destruction with a Certificate of Destruction for each device.
HIPAA (Health Insurance Portability and Accountability Act)
A federal law that establishes standards for protecting sensitive patient health information. HIPAA requires covered entities (healthcare providers, health plans, healthcare clearinghouses) and their business associates to implement safeguards for protected health information (PHI), including secure disposal. Paper records containing PHI must be shredded or otherwise destroyed so they are unreadable, and electronic media must be cleared, purged, or physically destroyed per NIST guidelines.

I

i-SIGMA (International Secure Information Governance & Management Association)
The international trade association for secure information destruction and records management companies, formerly known as NAID (National Association for Information Destruction). i-SIGMA administers the AAA Certification Program, which is the most widely recognized certification for secure destruction companies worldwide. Valley Green Shredding is a proud i-SIGMA member and NAID AAA Certified company.
Identity Theft
The fraudulent use of another person's personal identifying information (such as name, Social Security number, or financial account numbers) without their consent, typically for financial gain. Improper disposal of documents containing personal information is one of the leading causes of identity theft. Secure document shredding is one of the most effective preventive measures individuals and businesses can take.

M

Media Sanitization
The process of rendering data on electronic media unrecoverable through approved methods. NIST Special Publication 800-88 defines three levels of media sanitization: Clear (overwriting data), Purge (degaussing or cryptographic erasure), and Destroy (physical destruction). The appropriate method depends on the sensitivity of the data and whether the media will be reused or disposed of.
Mobile Shredding
A document destruction service where a specialized shredding truck travels to the client's location and shreds documents on-site. Mobile shredding allows clients to witness the destruction process, ensuring that sensitive materials never leave their premises. Valley Green Shredding operates mobile shredding trucks throughout Western Massachusetts and surrounding areas.

N

NAID (National Association for Information Destruction)
The former name of i-SIGMA. NAID established the AAA Certification Program, which remains the gold standard for evaluating secure destruction companies. The term "NAID AAA Certified" is still widely used in the industry. See NAID AAA Certification for details on what the certification requires and why it matters.
NIST 800-88 (Guidelines for Media Sanitization)
A publication from the National Institute of Standards and Technology that provides guidelines for sanitizing electronic media. NIST 800-88 outlines approved methods for clearing, purging, and destroying different types of storage media based on the confidentiality level of the data. These guidelines are widely referenced in federal, state, and industry regulations as the standard for secure data destruction.

O

OCR (Optical Character Recognition)
A technology that converts scanned images of text into machine-readable, searchable text. When documents are scanned with OCR, users can search for specific words or phrases within the resulting digital files rather than manually browsing page by page. Valley Green Shredding applies OCR processing to all scanned documents to maximize the usability of digitized records.
On-Site Shredding
Document destruction performed at the client's location using a mobile shredding truck. On-site shredding eliminates the need to transport sensitive documents to an off-site facility, reducing chain-of-custody risk. Clients can observe the destruction process in real time. Also referred to as mobile shredding. See our Mobile On-Site Shredding service page.

P

PII (Personally Identifiable Information)
Any information that can be used to identify a specific individual, including name, Social Security number, date of birth, address, phone number, email address, financial account numbers, and biometric data. Federal and state laws (including Massachusetts 201 CMR 17.00) require organizations to protect PII throughout its lifecycle, including at the point of disposal. Secure shredding is the standard method for destroying paper records containing PII.
PHI (Protected Health Information)
A subset of personally identifiable information that relates to an individual's past, present, or future health condition, healthcare treatment, or payment for healthcare. PHI is specifically protected under HIPAA and includes information in any form — paper, electronic, or oral. Healthcare organizations must use HIPAA-compliant destruction methods when disposing of records containing PHI.
Purge Shredding
A one-time shredding service designed for large volumes of documents that have accumulated over time, such as during an office move, renovation, records retention cleanup, or business closure. Purge shredding is different from ongoing scheduled service in that it addresses a backlog of materials in a single visit. Valley Green Shredding offers one-time bulk purge shredding with volume-based pricing.

R

Records Retention
The practice of maintaining records for a specified period of time as required by law, regulation, or organizational policy. Retention periods vary based on the type of record, the industry, and the jurisdiction. Massachusetts has specific retention requirements for business, municipal, medical, and educational records. See our MA Records Retention guide for Massachusetts-specific schedules.
Recurring Service
A scheduled shredding service where secure containers are placed at a client's office and serviced on a regular basis — typically weekly, biweekly, or monthly. Recurring service ensures that sensitive documents are disposed of promptly rather than accumulating in unsecured areas. Containers are provided free of charge as part of the service. See our Scheduled Recurring Service page.

S

Secure Container
A locked, tamper-resistant bin or console provided by a shredding company for the collection of sensitive documents between service visits. Secure containers feature a slotted opening that allows documents to be deposited but not retrieved. Common sizes include desk-side bins, executive consoles, and 64- or 96-gallon rolling bins. Valley Green Shredding provides secure containers free of charge with recurring service.
Strip-Cut Shredding
A shredding method that cuts paper into long, narrow strips in one direction only. While strip-cut shredding is better than no shredding at all, it provides lower security than cross-cut shredding because the strips are large enough that text may still be partially readable. Strip-cut shredding is generally not considered adequate for sensitive or regulated records. Professional shredding services like Valley Green Shredding use cross-cut shredders for superior security.

V

VOSB (Veteran-Owned Small Business)
A designation for businesses that are at least 51% owned, controlled, and operated by one or more U.S. military veterans. VOSB status can qualify businesses for preferential consideration in government contracting. Valley Green Shredding is a proud veteran-owned company, founded and operated by Eric Wartel, a Certified Secure Destruction Specialist (CSDS) and the first to hold that certification in Massachusetts.

Questions About Our Services?

Our team is ready to help you understand your options for secure document destruction and records management.