Security & compliance

Your records are protected at every step

You're trusting us with confidential information, so we track every box, control every door and log every login. You never have to wonder where your records are or who has seen them.

Physical security

Secure from collection to the shelf

Controlled premises

Our storage is alarmed and monitored by CCTV, and only authorised staff can get in.

Vetted staff

Everyone who handles your records is background-checked, trained and bound by confidentiality.

Our own vehicles

Our own drivers collect and deliver in our own vans. Your boxes are never handed to a courier.

Chain of custody

Every movement is recorded

Each box is scanned every time it changes hands. The full history is in your portal, so you can always show where a record has been.

  • Barcode scan at every handover
  • Signature on delivery and collection
  • A time-stamped history for every box, which you can view at any time
Digital security

A portal built and run by IT security specialists

Zopi built the WeArchive portal and runs it on its own UK infrastructure, with the same care it gives its managed IT clients.

Encrypted everywhere

Every connection uses HTTPS. Scanned files are kept outside the public web server and only served once we've checked who's asking.

Your own users and roles

Each colleague has their own login. Only your admins can approve destruction.

Full audit trail

Every sign-in, view, download and request is logged with the user, time and place.

UK hosting & backups

Your data stays in the UK and is backed up every day.

Secure destruction

Destroyed properly, with proof

When records reach the end of their life, WeCollect destroys them securely. Approved boxes are shredded, the paper is recycled, and you receive a certificate of destruction listing every box.

  • Nothing is destroyed without approval from one of your admins
  • Shredded securely and recycled responsibly
  • A certificate for every job, kept in your portal
  • One-off office clear-outs are also available

GDPR & your obligations

We act as your data processor under a written data processing agreement. We only handle your records on your instructions, and we help you show you've met your obligations.

  • Data processing agreementIncluded
  • Data locationUnited Kingdom
  • Access loggingEvery action
  • Retention managementBuilt in

Questions about security?

We're happy to fill in your due-diligence questionnaire or show you around.