Record Retention Commitment
To uphold the integrity of our assessment processes, satisfy international accreditation criteria (including ISO/IEC 17021-1), and support legal compliance, Business Systems Certification (BSC) enforces a structured record control and retention protocol.
All documentation and technical records associated with application, audit planning, on-site assessment, technical review, certification decisions, surveillance, and recertification are securely preserved for a standard retention duration of seven (7) years.
Record Types Covered
This retention schedule applies to both physical and electronic formats across the complete certification lifecycle:
- Audit Files & Technical Reports: Stage 1, Stage 2, surveillance, special, and recertification audit reports.
- Assessment Evidence: Non-conformity reports (NCRs), client-submitted corrective action plans (CAPs), and verification logs.
- Governance Records: Impartiality assessments, certification committee review notes, and decision logs.
- Commercial & Contractual Data: Application questionnaires, service agreements, and scope verification documents.
- Communications: Formal dispute, appeals, complaints, and scope revision records.
Client Assurance & Legal Compliance
- Confidentiality Maintained: Records awaiting destruction remain safeguarded under BSC’s strict non-disclosure obligations throughout the entire 7-year timeframe.
- Statutory Overrides: Where prevailing local legislation, regulatory authorities, or contractual agreements mandate longer retention for specific sectors, the statutory timeline will take precedence.
- Disposal Verification: Destruction procedures are logged in BSC’s internal document register to prevent accidental data leakage or unauthorized file recovery.