Response When a Safe Opening Damages the Contents

Purpose

The Safe Opening Authorization and Procedure SOP gets a customer's written consent to the container losing its rating, but nobody consents in advance to what happens to the papers, jewelry, or currency sitting an inch from a drill point. This procedure covers the moment damage to contents is seen or suspected, because the instinct that follows, blot the wet envelope, brush the dust off, hand everything back in one bag so nothing gets separated, is exactly what destroys the ability to later tell what happened and multiplies the exposure if the damage source is still active.

Without it a shop either over-promises restitution to calm an upset customer and cannot honor it once the finding comes back unrelated to today's work, or dismisses real damage reflexively because that is the cheaper finding, which is precisely the bias a photograph taken before anyone touches anything is meant to control against.

Scope

Covers the response from the moment damage to contents is seen during or immediately after a safe opening performed under the sibling procedure. Does not cover opening technique, drill-point referencing, or the destructive-work consent itself, owned by the Safe Opening Authorization and Procedure SOP, which runs first. Does not cover damage to the container, an expected and consented-to outcome of the drilling method already covered there. Does not cover a customer's dispute about what was originally inside absent any technician-caused damage, which routes to their own insurer rather than this procedure.

Roles and responsibilities

Procedure

Step 1: The instant damage is seen, stop touching anything further, no cleaning, drying, or moving to inspect. This follows directly from the sibling SOP's interior photograph step, where the customer removes contents and the technician does not handle them; from the moment damage becomes visible, this procedure takes over. Any further contact, blotting a wet document, brushing ash off paper, moving a warped item to check it, destroys the ability to determine extent and cause later, and can spread contamination onto still-undamaged contents sitting next to it. Acceptance: the technician can state nothing beyond the required interior photograph was moved, wiped, or handled before this step. Wrong looks like the well-meaning instinct to blot or brush, which is the exact failure this step exists to prevent. Stop rule: the moment anyone, technician or customer, reaches for a damaged item to clean or check it, hands come off; photograph before anything further is touched.

Step 2: Identify the damage source against three categories before saying anything to the customer. Category A, heat or thermal from the opening method, drilling generates localized heat that can scorch adjacent paper or degrade certain media, and a prolonged bind or stuck relocker can generate meaningful heat from force alone. Category B, direct mechanical contact, a bit, scope, or tool physically touching or piercing contents through a hole meant to land only in the lock package, or a relocker plate striking whatever sits directly behind the door. Category C, a pre-existing condition unrelated to today's visit, insulation that had already failed years ago, contents already degraded by age or a prior water intrusion the customer is only discovering today. Acceptance: the technician names a category and points to the specific evidence, hole position relative to the item, a scorch pattern that does or does not align with the drill point, moisture with no plausible source from today's work. Wrong looks like defaulting to Category C because it is the least costly finding for the shop; a technician motivated to find "not us" is exactly the bias this step controls against. Stop rule: if the evidence does not confidently support one category, do not tell the customer either way on site; photograph everything and route to the lead the same day, the same fault-neutral discipline the sibling SOP uses for the container itself.

Step 3: Preserve chain of custody on anything damaged, separated from undamaged contents. Bag or box anything wet, charred, or contaminated on its own, photograph it in place before bagging, and label with time and a plain description. Acceptance: a labeled, photographed, separately-contained record for every item showing damage, cross-referenced to the interior photograph from the sibling SOP's opening step. Wrong looks like returning everything in one bag so nothing gets lost, which is exactly how a scorched document contaminates or crushes an undamaged item riding next to it. Stop rule: if no separate containment is available on the truck yet, the item stays in place, untouched, until containment arrives; never use a bare hand or a shared bag as a stopgap. Where the container predates roughly 1980 and the dust may be the fill material the sibling SOP flags as possibly asbestos-containing, that caution applies equally to contaminated contents: sealed containment only, no brushing or unfiltered vacuuming, and whoever bags this specific item wears a properly fitted N95 or better respirator and gloves for the bagging itself, not just for the drilling that generated the dust, since handling a dust-coated item re-suspends the same fill material into the air a second time.

Step 4: Tell the customer the physical observation, never a verdict, and route the finding to the lead. State what you see, not what it means for fault: "the top pages closest to the drill entry carry a fine gray dust consistent with the fill behind the lock," not "that's on us" or "that's not on us." Acceptance: customer given the specific physical observation and a stated follow-up window, same business day. Wrong looks like an anxious technician promising restitution on the spot to calm someone down, a promise the shop may not be able to honor once the lead's finding comes back Category C. Stop rule: any spoken commitment beyond the observation and the follow-up window is corrected by the technician on site immediately, not left standing until the lead can walk it back later.

Step 5: Notify the shop's liability coverage the same business day whenever Category A or B is plausible, regardless of the lead's own private read of fault, matching the same logic used when a serviced lock is found defeated. Acceptance: notification made and logged the same day. Wrong looks like waiting for the lead's final determination before telling the insurer, by which point evidence-handling windows have narrowed. Stop rule: Category A or B plausible and unnotified past the same-day window is itself logged as an exception for the owner to review.

Step 6: Close contents disposition separately from container disposition, on two signed lines. The customer either takes damaged contents now or signs a hold receipt for an adjuster's inspection; the container's restore, scrap, or red-tag decision under the sibling SOP proceeds independently, on its own line. Acceptance: two distinct signatures, one for contents disposition, one for container disposition. Wrong looks like a single signature covering both, which reads later as a contents-damage waiver bundled into a container-restoration consent. Stop rule: a customer unwilling to sign either line separately is never pushed into a combined signature to speed up the visit; leave both undecided and follow up rather than force one.

The record this produces

The pre-contact photograph, the category call with its supporting evidence, the containment log with item-by-item photographs and labels, the customer disclosure log with its follow-up window, the insurer notification if made, and the two separate disposition signatures. Readers later: the lead confirming the finding, the customer's own insurer or adjuster if the hold-for-inspection line was taken, and the shop's own liability carrier.

Worked pass: a business ledger and a dust-affected stack

A business owner has lost the combination to a fire-rated document safe holding tax ledgers needed for a deadline. The opening runs the sibling SOP cleanly: consent signed, drill point referenced from two landmarks, door opens, interior photographed before contents move.

Once open, the top three ledger pages in the stack carry a light gray dust and there is a faint hot-metal smell in the air. Eager to get the anxious owner his ledgers, the technician starts handing back the whole folder as one stack, top pages and clean pages together, before separating them. He catches this mid-handoff, per step 3's requirement, and stops: he pulls the top three dust-affected pages back out, photographs them separately, and bags only those before returning the rest of the folder.

Step 2: the scope hole's position sits directly above where the top pages rested, and the dust appears only on those three, none deeper in the stack, consistent with fallout during the opening rather than a pre-existing condition. No scorch marks anywhere despite the smell, which traces to hot swarf rather than any burned paper. This reads as Category B, direct contact from the method, confirmed against the physical layout rather than assumed.

Step 4: the owner is told the specific finding, dust on the top three pages only, tied to the scope entry point, with a same-day follow-up promised. Step 5: Category B plausible and technician-caused, so the shop's insurer is notified that afternoon. Step 6: the owner signs to release the clean majority of the folder immediately, since he needs it for his deadline, and separately signs a hold receipt for the three dust-affected pages so his own insurer can inspect them before any cleaning is attempted. The container itself, fire rating now void as consented, goes to storage rather than repair on its own signed line, unrelated to the contents question entirely.

References

• Safe Opening Authorization and Procedure SOP (owns opening technique, drilling PPE, the asbestos-fill caution referenced in step 3, and the destructive-work consent)
• ALOA Security Professionals Association guidance on documenting contents at an opening
• See related: general property-damage claim handling through the customer's own homeowner or business insurer, which this procedure routes to rather than resolves