8 Key Points Every Law Firm Should Have in an Off-site Records Storage Contract

Off-site records storage contracts look simple on the surface: boxes go in, boxes come out, and the firm pays a monthly bill based on stored cubic feet and the services utilized. Pretty easy. In practice, however, these agreements can become long-term cost traps and effectively handcuff the firm when it comes time to implement a modern

Information Governance (IG) policy.

When a contract is poorly defined, the firm loses its ability to manage its own data footprint. Based on over one hundred negotiated off-site contracts and information governance engagements, a strong off-site records storage contract must address these eight critical areas to ensure the firm maintains control over both its budget and its compliance obligations.

1. A Clear and Comprehensive Scope of Services

The contract should define exactly what the vendor is responsible for with operational specificity. This list must include intake, barcoding, indexing, carton storage, file-level indexing if applicable, retrievals, deliveries, refiles, permanent withdrawals, destruction, scan-on-demand, reporting, and transition assistance.

This level of detail matters because vague “records storage” language is a significant vulnerability. Without a granular scope, the firm is left exposed to unexpected add-on fees for basic tasks, inconsistent service expectations between different offices, and weak overall accountability. A strong agreement ensures that the vendor’s obligations are not left to interpretation but are clearly defined as part of the core service offering.

2. Transparent Pricing and Long-term Fee Protection

The pricing exhibit in an off-site agreement should be exhaustive, leaving no room for "hidden" costs. At a minimum, it should include monthly carton storage rates, file retrievals, carton retrievals, rush retrievals, refiles, new carton intake, permanent withdrawals, destruction, and delivery charges. It must also address fuel or energy surcharges, administrative fees, imaging charges, metadata/indexing fees, minimum monthly charges, and after-hours charges.

In many off-site storage agreements, uncontrolled ancillary charges—those fees for moving, scanning, or even just "accessing" a box—can easily outweigh the savings gained from a low base storage rate. To prevent "bracket creep" in costs, the firm should negotiate fixed rates for the duration of the term, capped annual escalators, clear rules for when surcharges can be applied, and a strict prohibition on any new fee categories being introduced without prior written approval from the firm.

3. Measurable Service Levels with Financial Credits

A modern contract must include measurable service levels (SLAs), rather than relying on aspirational or "best efforts" language. The firm needs to know exactly how fast the vendor will respond in a crisis. At a minimum, the contract should define specific turnaround times for standard retrievals, rush retrievals, emergency retrievals, scan-on-demand requests, new carton processing, refiles, and destruction processing.

Furthermore, these performance standards should apply to reporting and problem resolution as well. For records storage to be effective, the agreement should include a mechanism for service credits or other financial remedies. When the vendor misses a deadline, fails to scan a document on time, or does not meet agreed-upon reporting obligations, there must be a tangible consequence to ensure the vendor remains incentivized to perform.

4. Robust Chain of Custody and Inventory Controls

It is vital to remember that a records storage vendor is not just storing paper; it is acting as the custodian for sensitive client information, privileged legal material, original evidence, and essential business records. Therefore, the contract should strictly require barcode tracking for every movement of a carton or file.

The agreement must mandate carton-level and file-level chain-of-custody logs, proof of pickup and delivery with signatures, and authorized requester controls to ensure only sanctioned personnel can access specific boxes. Additionally, the contract should require the vendor to support periodic inventory audits and provide audit trails for all activity. If an inventory discrepancy is found and the error is vendor-caused, the vendor must be contractually obligated to correct that discrepancy at its own cost.

5. Security, Confidentiality, and Data Protection Standards

Because the vendor is handling "the crown jewels" of the firm's information, the agreement must contain robust confidentiality and security obligations. This goes beyond a simple NDA. The contract should require the vendor to maintain appropriate levels of insurance and provide annual security audits to the firm to prove their facilities remain compliant with modern standards. Crucially, the vendor must be required to follow these confidentiality and security obligations down to any subcontractors they may use for transportation or destruction.

6. Permanent Withdrawal Rights and Exit Protections

Perhaps the most critical provision for the long-term health of the firm’s records program is the right to permanently withdraw boxes without being penalized. Many storage contracts are designed to be "sticky," becoming expensive traps because vendors charge substantial permanent removal, handling, palletizing, or administrative fees when a firm tries to reduce its inventory or move to a different provider.

These are often referred to as “hostage fees,” and they can reach hundreds of thousands of dollars for a large firm. The contract should therefore include reasonable, pre-negotiated permanent-withdrawal pricing, detailed exit assistance requirements, and a mandate for the vendor to cooperate with any successor vendors. Most importantly, there should be clear language specifying when and how these permanent fees are paid to avoid a massive, unbudgeted invoice at the end of the relationship.

7. Reporting, Business Reviews, and Ongoing Oversight

You cannot manage what you do not see. The vendor should be required to provide detailed, recurring reports that go beyond just the monthly invoice. These reports should track storage inventory levels, monthly additions, retrieval frequency, refiles, permanent withdrawals, destruction activity, and aging inventory. They should also highlight boxes that are currently eligible for review based on the firm's retention policy.

Mattern’s negotiated-contract approach includes structured quarterly business reviews and contract monitoring to ensure the firm is getting exactly what it paid for. For off-site storage, this level of reporting is the only way for a firm to actually manage its inventory and drive destruction, rather than simply paying a growing bill every month for paper that may no longer have value.

8. Term, Termination, Transition, and Audit Rights

Finally, the agreement must be structured to avoid locking the firm into unfavorable economics for an indefinite period. It should include a clearly defined term, reasonable renewal provisions (avoiding "evergreen" clauses that renew automatically at higher rates), and the right to terminate for both cause and convenience.

The contract must also provide the firm with audit rights to verify that the billing is accurate and that the services are being performed as promised. Transition rights are especially important here; the firm must have the ability to retrieve its entire inventory, transfer it to a successor, destroy eligible materials, or digitize the records without facing operational disruption or excessive, punitive fees.

Closing Thought

An off-site records storage contract should not simply be treated as a lease for warehouse space. Instead, it should be a strategic tool that supports the firm’s broader information governance goals: reducing unnecessary physical paper, protecting client information, enabling the defensible disposition of records, and supporting legal holds.

Mattern’s IG guidance is clear: electronic records should be treated as the official record whenever possible. Paper should be seen as a "courtesy copy" to be destroyed as soon as it no longer serves a legal or business purpose. A well-negotiated off-site storage contract should make that transition to a digital-first environment easier—not harder—to execute.