Records & POPIA
Physical Records Storage Audit
Condition, security and indexing of physical records held in registries and offsite storage.
Paper records remain official records with statutory protection obligations
Physical records held in registries and offsite storage remain subject to the National Archives and Records Service obligations and to POPIA's security-safeguards condition, and poor storage exposes the entity to loss of evidence, unlawful access and an inability to respond to audit or access requests. Digitisation has not removed the paper risk. AuditPro Core records the condition, security and indexing of physical holdings so that vulnerable, unindexed or improperly secured records are identified and remediated.
The Numbers
AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.
Storage sites assessed
64
Below standard
19
30% of sites
Uncatalogued volume
12 400 boxes
Fire-suppression gaps
11
Sites by assessment rating
Highest-risk registries
| Registry | Rating | Uncatalogued boxes | Main issue |
|---|---|---|---|
| Provincial HR registry | Critical | 4100 | No fire suppression |
| Municipal deeds store | Major | 3200 | Water damage |
| Health offsite store | Major | 2800 | Unsecured access |
Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.
Security of physical custody
Personal and sensitive records on paper require physical access control, fire protection and environmental safeguards. A locked registry is a POPIA security safeguard just as much as system access control is.
Indexing and retrievability
A record that cannot be located when an auditor or a data subject requests it is, in practice, lost. Accurate indexing is what converts a store of paper into a usable, accountable archive.
Condition and preservation
Damp, pests and physical deterioration destroy records that the entity is legally obliged to retain. Monitoring storage condition protects against silent loss of evidence over time.
Offsite and third-party storage
Records held by an external storage provider are still the entity's responsibility, and the contract must impose equivalent security and retrieval obligations on the operator.
How AuditPro Core Bridges the Gap
- Condition assessment: storage security, environment and physical condition are recorded for each registry and location.
- Indexing coverage: the dashboard surfaces holdings that are unindexed or not reliably retrievable.
- Exception workflow: at-risk or insecure records are flagged for remediation or relocation.
- Traceability to source: physical holdings link to their index entries to support audit and access requests.
Key Takeaways
- Paper records remain official records under archives legislation and POPIA.
- Indexing failures make records effectively lost when they are requested.
- Monitor storage condition to prevent silent loss of retained evidence.
- Offsite storage does not transfer the entity's responsibility for the records.
See This on Your Own Data
AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.