Methods of Shredding Compared.
Strip-cut vs cross-cut vs micro-cut. DIN 66399 security levels P-1 through P-7. Which destruction method fits which compliance requirement, with practical guidance for Boston offices.
Not all paper shredding is created equal. The destruction method matters for both security and compliance. This guide compares the three main shredding methods used in Massachusetts business and residential settings, plus the international DIN 66399 security level standard that quantifies destruction quality.
The Three Shredding Methods
Strip-cut shredding. Cuts paper into long parallel strips, typically 1/4 inch to 3/8 inch wide. Fastest and cheapest method but the output can be reassembled with patience and time. Strip-cut output sits at DIN 66399 P-1 or P-2 security level.
Cross-cut shredding. Cuts paper in two directions producing small particles roughly 1/4 inch by 1 to 2 inches. Output cannot be practically reassembled. Cross-cut sits at DIN 66399 P-3 to P-4 security depending on cut size.
Micro-cut shredding. Highest security tier. Particles smaller than 1/16 inch. Output cannot be reassembled even with industrial-grade reconstruction equipment. Micro-cut sits at DIN 66399 P-5, P-6 or P-7.
For most metro Boston business records, cross-cut at P-4 is the right standard. Strip-cut creates compliance gaps for HIPAA, FACTA, GLBA and 201 CMR 17.00. Micro-cut is overkill for non-classified records.
Tewksbury MA facility” loading=”lazy” style=”max-width:100%;height:auto;border-radius:10px;box-shadow:0 4px 20px rgba(46,125,50,0.15);”>DIN 66399 Security Levels Explained
The German DIN 66399 standard is the international benchmark for paper destruction security.
- P-1: Strip-cut, general document destruction. Reassemblable.
- P-2: Strip-cut, internal documents. Reassemblable with effort.
- P-3: Cross-cut, sensitive documents. Acceptable for many business compliance frameworks.
- P-4: Cross-cut, confidential documents. HIPAA-acceptable in most circumstances.
- P-5: Micro-cut, secret documents.
- P-6: Micro-cut, top-secret documents.
- P-7: Highest security, highly classified materials.
Our industrial cross-cut shredders produce P-4 output by default, which meets the disposal requirements under HIPAA, FACTA, GLBA, MA 201 CMR 17.00 and SEC Rule 17a-4. Higher security tiers available on request for specialized destruction needs.
NIST 800-88 vs DIN 66399
NIST 800-88 is the US National Institute of Standards and Technology guideline for media sanitization. DIN 66399 is the German standard that quantifies destruction security. Both standards apply.
NIST 800-88 categorizes destruction as Clear, Purge or Destroy. For paper, Destroy means rendering the information unreadable through cross-cut shredding, burning, pulping or pulverizing. Our process meets the Destroy category.
DIN 66399 quantifies the destruction security in terms of particle size and reassembly difficulty. Our cross-cut output meets P-4.
For HIPAA OCR purposes, both standards satisfy the “essentially unreadable, indecipherable and otherwise cannot be reconstructed” criterion in OCR guidance. For FTC FACTA, both satisfy “reasonable measures during disposal.”
Office Shredders vs Industrial Shredders
Office shredders (the desktop or floor-standing units sold by office supply retailers) typically produce strip-cut or low-grade cross-cut output. Even when the manufacturer claims cross-cut, real-world output often does not meet DIN 66399 P-4 standards.
Industrial shredders at our Tewksbury facility process paper at industrial scale with consistent P-4 output. The cutting heads are larger, the particle size is verified by quality control and the documentation supports compliance audits.
For metro Boston offices producing more than 1 banker’s box of sensitive paper per week, industrial shredding via professional service is more cost-effective and more compliant than maintaining office shredders. See office shredder buyer guide.
Pulping and Burning as Alternatives
Cross-cut shredding is the default destruction method but two alternatives exist.
Pulping. Paper is mixed with water and chemicals to break it down to fiber slurry. Output cannot be reassembled. Used at some industrial paper processing facilities. Less common for general business shredding due to specialized equipment requirements.
Burning (incineration). Paper is burned at controlled temperatures. Output is ash with no reconstructable information. Massachusetts state air quality and fire rules restrict open burning. Industrial incineration with proper permits is available but rare for general business shredding.
Cross-cut shredding remains the default for cost, scalability and environmental compatibility. Output enters the recycling stream rather than producing ash or wet pulp slurry that requires additional processing.
Methods of Shredding FAQ
Which method does your service use?
Why does cut size matter?
Is P-4 enough for HIPAA?
What about credit card and ID destruction?
How do you verify particle size meets standards?
Choosing the Right Method for Your Records
Match destruction method to record sensitivity.
For non-sensitive paper (junk mail, expired generic correspondence), strip-cut shredding works fine. The volume math still favors professional service over office shredders for any meaningful quantity.
For business records under HIPAA, FACTA, GLBA or 201 CMR 17.00, cross-cut at P-4 minimum. P-3 may not satisfy all enforcement scrutiny. P-4 clears the bar by a wide margin.
For court-ordered sealed records, micro-cut at P-5 or P-6 provides maximum security. Witnessed destruction adds documentation strength.
For classified government materials, P-7 destruction with cleared personnel handling. Specialized service.
Most metro Boston business and residential needs sit in the P-4 cross-cut zone. Our default service.
Practical Equipment Considerations
Industrial shredders versus office shredders differ on more than just security level.
Throughput: industrial equipment processes 100+ pounds per hour continuously. Office equipment 10 to 30 minutes of run time before cool-down at lower throughput.
Material handling: industrial equipment handles staples, paper clips, rubber bands, file folders, three-ring binders, hanging file dividers. Office equipment chokes on most of these without preparation.
Quality control: industrial output verified to meet specified DIN security level. Office equipment output rarely measured against standards.
Documentation: industrial destruction produces Certificates supporting compliance audits. Office shredding produces no Certificate.
Methods FAQ Continued
Common follow-up questions on shredding methods.
Are home strip-cut shredders worthless? Not entirely. They work for occasional non-sensitive document destruction at home. Just not appropriate for any document subject to compliance requirements.
Why is the DIN standard German? DIN is the German Institute for Standardization. The DIN 66399 standard for media destruction has been adopted internationally because it provides clear quantitative tiers. Many US security standards reference DIN levels.
What about pulping for residential use? Some communities offer paper pulping for very large municipal volumes. Not practical for residential or small business needs. Cross-cut shredding remains the practical default.
Cross-Cut Standards Across Different Vendors
Not all cross-cut shredding produces the same particle size. Variation between vendors creates compliance variation.
Reputable industrial cross-cut produces particles roughly 1/4 inch by 1 to 2 inches. Output measures at DIN P-4.
Some cross-cut output sized larger creates DIN P-3 results. Acceptable for many applications but may not satisfy heightened scrutiny under HIPAA OCR or Massachusetts AG investigations.
When evaluating shredding vendors, ask for documentation of cut size and DIN level. Reputable vendors specify clearly. Vendors who cannot specify or who provide vague answers usually have lower-grade equipment.
Specialty Destruction Beyond Paper
Document destruction methods extend beyond paper to specialized materials.
X-ray films require specialized equipment for silver recovery alongside destruction. See X-ray destruction service.
Hard drives require physical destruction methods like shredding, crushing or piercing the platters. Standard paper shredders cannot handle hard drives. See hard drive destruction.
Magnetic media (backup tapes, cassettes) require specialized destruction to render the magnetic data unrecoverable.
Optical media (CDs, DVDs, Blu-rays) require shredding or piercing to break the data layer.
USB drives, SD cards and similar small media destruction at the chip level requires specialized equipment.
Our service handles all these media categories alongside paper destruction with the same chain of custody and Certificate documentation pattern.
For Massachusetts businesses choosing destruction methods, the practical default is cross-cut industrial shredding to DIN P-4 standards. This satisfies HIPAA, FACTA, GLBA, MA 201 CMR 17.00 and SEC Rule 17a-4 requirements simultaneously. Higher security tiers available for specialized needs. Lower tiers acceptable only for non-compliance-sensitive paper. Contact us to discuss the right method for your specific records.
For metro Boston offices currently using strip-cut equipment, the security and compliance gap is real. Switching to professional cross-cut destruction is straightforward and worth the upgrade for any business with sensitive records.
Get Your Free Quote in 24 Hours.
Same documentation across all 14 metro Boston cities. Certificate of Destruction every job.
