Onsite vs Offsite Scanning for Sensitive Records: How to Choose
The real differences between onsite scanning and shipping records to a warehouse for digitization, in terms of cost, compliance, and operational risk.
Most scanning vendors offer one model: ship the records to their warehouse, get back scans in a few weeks. Onsite scanning, where the vendor brings the workflow into your office, is a more recent option, and for sensitive records it has become the default for any practice that is paying attention.
This post compares the two honestly.
What onsite scanning means in practice
An onsite scanning project: a vendor operator arrives at your office with production scanners, sets up in a designated room, and scans records in place. Physical records never leave the building. The operator works through the archive at their normal throughput. Files are encrypted and processed, then delivered into your software or storage at the end.
Setup typically takes a few hours. A mid-sized archive (15-50 boxes) runs from a few days to a couple of weeks of onsite time.
What offsite scanning means in practice
An offsite scanning project: the vendor schedules a pickup. A truck arrives, loads the boxes (typically with a chain-of-custody manifest), and transports them to a warehouse. The records are scanned, indexed, and processed at the warehouse. The originals are then either shredded or returned, and the digital files are delivered.
Pickup-to-delivery is typically 4-8 weeks depending on volume and the warehouse's queue.
Cost
Offsite is cheaper. Warehouse operations achieve higher throughput per operator-hour because they are optimized for it: the scanning bay never moves, the operators are dedicated, prep can be centralized.
Onsite carries a premium because the operator's time includes travel, setup, and the lower throughput of a temporary workstation. The premium is typically 15-30% over equivalent offsite work.
For commodity scanning of low-sensitivity records, offsite is usually the right financial answer.
Custody
Offsite breaks the chain of custody. The records leave your control, ride in a truck, get processed by people you have not met, sit in a warehouse with other clients' records, and come back days or weeks later.
The warehouse will have access controls, cameras, and chain-of-custody documentation. They will probably comply with HIPAA. But the records have been out of your physical custody for the duration.
Onsite keeps records under your roof the entire time. Files do not cross a property line. The chain of custody is your file room, your locked door, your existing security posture.
For records covered by HIPAA, ABA Rule 1.6 confidentiality, GLBA, or California CMIA, the custody difference matters. It is harder to defend a chain-of-custody gap if something goes wrong; it is easier to defend "the records never left our office."
Access during the project
Offsite scanning takes the archive offline for weeks. If your staff needs a record during that period, the only option is to ask the warehouse to fish it out and ship a copy back. In practice, most warehouses can do this but it takes days.
Onsite scanning keeps the archive immediately accessible. Your operator can pull any record from the scanned-already pile in minutes, or set aside any record the staff needs to keep in active use.
For an active practice with daily record requests, onsite is operationally much smoother.
Risk profile
The cost of an offsite project going wrong is high. Records lost in transit, boxes mislabeled at the warehouse, fire or flood at the warehouse, breach at the warehouse: each is rare but each is also outside your direct control.
The cost of an onsite project going wrong is lower. The failure modes are the same as any vendor working in your office. Your existing physical security still applies.
This is the reason regulated practices (dental, medical, legal, accounting) have moved toward onsite as the default. The premium is small relative to the risk reduction.
When offsite actually makes sense
Offsite is the right choice when:
- Records are low-sensitivity (older inactive matter files past retention, marketing files, non-regulated business records).
- The archive is huge (hundreds of thousands of pages where the cost differential is large).
- There is no available space onsite for a scanning workstation.
- The practice is already closed and the operator has no good way to reach the records onsite.
For active regulated practices with sensitive records, those cases are rare.
What ArchiveBridge does about this
ArchiveBridge is onsite-only by design. Every project runs in the client's office. Files never leave. The premium versus warehouse scanning is the cost of operational and compliance peace of mind, and for the practices we work with, that trade is the right one almost every time.
Request a quote and we will work through the specifics for your archive.
More from the blog
California Medical Record Retention: HIPAA + CMIA Requirements for 2026
How long medical practices in California are required to keep patient records, what HIPAA and CMIA each demand, and what changes when records move from paper to scanned.
ComplianceHow Long Do California Dentists Need to Keep Patient Charts?
The actual record retention rules dental practices in California operate under, including the special cases that come up at practice sale, retirement, and Medicare/Medi-Cal participation.
ComplianceClosed Legal File Retention Under ABA Rule 1.6: A California Checklist
What ABA Rule 1.6 and California Rule of Professional Conduct 1.16(e) actually require for retention and disposition of client files, with practical guidance for chart cleanup and digitization.