Shredders & Secure Document Disposal: Security Levels Explained

The cheapest data breach to prevent is the one that walks out of your building in a rubbish bag. Most organisations invest heavily in firewalls and access control, then dispose of printed contracts, payroll runs and customer records in an ordinary bin. Paper is still the most casually handled data format in the average GCC or African office, and it is the format regulators and auditors look at first. A shredder is a small purchase with a large compliance footprint, but only if the machine actually matches the sensitivity of what you are destroying. This guide explains how shredder security levels work, what the specifications really mean in daily use, and how to size a machine for a desk, a department or a document centre.

1. What DIN 66399 security levels actually mean

DIN 66399 is the international standard that classifies how thoroughly a machine destroys media. For paper it defines seven levels, written as P-1 through P-7. The number describes the maximum particle size the shredder produces: the higher the number, the smaller the particles and the harder the document is to reconstruct. The standard also covers other media types, so you will see O for optical discs, T for magnetic tape and E for electronic media such as drives and memory cards.

• P-1 and P-2 — Coarse strip cuts. Suitable only for general internal paperwork with no personal or commercial sensitivity.
• P-3 — A common general-office level. Appropriate for internal documents where disclosure would be inconvenient rather than damaging.
• P-4 — The usual baseline for personal data. This is the level most organisations should treat as their default for anything containing names, contact details, payroll or customer records.
• P-5 — Confidential business material: contracts, tender documents, board papers, HR files and financial records.
• P-6 and P-7 — High-security and classified material, typically specified by government, defence and intelligence users. Particles are reduced to near-dust and throughput drops accordingly.

The practical rule is simple. Decide the highest sensitivity of paper that will ever reach the machine, then buy for that level rather than for the average. A shredder is used by whoever is standing in front of it, and staff will not sort documents by classification before feeding them in.

2. Cut types: strip, cross and micro

Security level and cut type are related but not identical. Cut type describes the mechanism; the level describes the measured result.

• Strip cut — Blades slice the sheet into long vertical ribbons. Fast and low maintenance, but the ribbons retain readable text and the waste is bulky, so bins fill quickly. Generally P-1 to P-2.
• Cross cut — Two opposing cutter shafts reduce the sheet to short rectangular particles. The mainstream choice for offices, covering roughly P-3 to P-4 depending on the machine, with a good balance of speed, security and waste volume.
• Micro cut — A finer cross-cut geometry producing very small particles, typically P-5 and above. Slower and usually lower in sheet capacity, but the correct choice for genuinely confidential material.

Micro-cut waste also compacts far more tightly than strip-cut waste, which means fewer bin emptying trips even though the bin volume on paper looks similar. That is a real operational saving in a busy finance or HR department.

3. Sheet capacity, duty cycle and why machines fail early

Sheet capacity is the number of sheets a machine can take in a single pass. It is the most quoted figure and the most misread. Manufacturers measure it under ideal conditions with standard paper weight, so treat the headline number as a ceiling rather than a working target. Consistently feeding to the maximum is the fastest way to jam a machine and wear the cutters.

• Duty cycle — How long the motor can run before it needs to cool. Light-duty machines run in short bursts; heavy-duty and industrial units are rated for continuous operation.
• Continuous duty — Essential wherever shredding is a scheduled task rather than an occasional one, such as a monthly archive clear-out or an end-of-quarter purge.
• Feed width — Determines whether folded documents, A3 sheets or stapled sets pass cleanly. Narrow throats force staff to pre-sort.
• Staples, clips and cards — Many office machines handle staples and paper clips; credit cards and optical discs need explicit support. Check before assuming.
• Auto-feed — Hopper-fed machines shred a stack unattended, which changes shredding from a task someone stands over to one they walk away from.

Almost every prematurely dead shredder in an office died the same way: a machine specified for occasional personal use was placed in a shared corridor and treated as departmental infrastructure. Match the class to the real traffic, not the org chart.

4. Bin size and the hidden running cost

Bin capacity is quoted in litres and determines how often someone must stop work to empty it. A small under-desk bin in a shared area will be emptied constantly, and that labour cost quietly exceeds the price difference between machine classes. Larger machines use pull-out bins on castors or lift-off cabinet bins with disposable liners, which are faster and cleaner to empty. If your site produces high paper volumes, prioritise bin volume and ease of emptying alongside security level.

5. Personal, departmental or industrial

Choosing the right class is mostly a question of who uses the machine and how often.

• Personal — Sited at a single desk or in a small office. Low sheet capacity, short duty cycle, compact bin. Browse personal shredders for executive offices and small branches.
• Light duty — A small team or reception area with modest daily volume, in the light-duty shredders range.
• Medium duty — A floor or department with regular shared use, typically the sweet spot for finance, HR and legal teams. See medium-duty shredders.
• Heavy duty — Continuous-run machines for high-traffic corridors, large branches and document rooms, covered by heavy-duty shredders.
• Industrial — Central destruction facilities, records centres and secure disposal operations, where conveyor or hopper feeding and very high throughput are required.

6. Placement, policy and maintenance

Hardware alone does not create a secure disposal process. Place shredders where people already walk, because a machine at the far end of a floor gets bypassed. Provide lockable secure-waste consoles if destruction is batched rather than immediate, so sensitive paper is never left loose. Publish a short retention and destruction policy that tells staff what must be shredded and at what level, and make the default action shredding rather than binning. On the maintenance side, oil the cutters at the interval the manufacturer specifies, empty bins before they overflow into the cutting head, and keep the reverse function in mind for clearing jams instead of forcing paper through.

Quick reference: choosing a shredder

• Specify for the most sensitive document that will ever reach the machine, not the average one.
• P-4 is a sensible default for anything containing personal data; P-5 and above for confidential business records.
• Cross cut suits general offices; micro cut is the choice for genuinely confidential material.
• Treat quoted sheet capacity as a ceiling and run below it to avoid jams and cutter wear.
• Duty cycle matters more than sheet capacity for shared machines in busy corridors.
• Larger bins on castors reduce emptying labour, which is the real recurring cost.
• Confirm support for staples, clips, cards and discs before assuming the machine accepts them.

Frequently asked questions

Which DIN security level should a general office use?

P-4 is a reasonable default for most commercial offices because it covers documents containing personal data such as names, contact details and payroll information. If the machine will also handle contracts, board papers or detailed financial records, specify P-5 or higher. Buying to the highest sensitivity avoids relying on staff to sort paper correctly before shredding.

Is a micro-cut shredder always better than cross cut?

Not always. Micro-cut machines produce far smaller particles and higher security, but they typically accept fewer sheets per pass and run more slowly. For a busy general office shredding routine paperwork, a good cross-cut machine may deliver better throughput at an adequate security level. Micro cut is the right answer when the content genuinely warrants it.

How do I stop shredders jamming and failing early?

Feed well below the maximum quoted sheet count, empty the bin before waste backs up into the cutting head, and oil the cutters at the manufacturer's recommended interval. Most early failures come from placing an under-specified machine in a high-traffic shared area, so check the duty cycle rating against realistic daily use before purchasing.

Can shredders destroy cards, discs and other media?

Some can, but it must be checked rather than assumed. DIN 66399 classifies optical, magnetic and electronic media separately from paper, and a machine rated for paper is not automatically rated for anything else. Feeding unsupported media into a paper shredder damages the cutters and voids warranty cover, so confirm the supported media types on the specification sheet.

Specify the right shredder with Procure

Procure supplies secure document disposal equipment to offices, banks, government departments and records centres across the GCC and Africa, from single-desk units to continuous-duty industrial machines. Whether you are standardising a security level across a branch network or replacing an overworked corridor machine, we can match the specification to your retention policy and real daily volumes. Explore the full range of shredders or talk to our team about a site-wide disposal standard, including industrial shredders for centralised destruction facilities.