When evaluating a professional document shredding service, one of the most important — and most frequently overlooked — questions is: what security level does the shredding actually achieve? Not all shredding is equivalent. The difference between strip-cut, cross-cut, and micro-cut shredding is the difference between a document that can be reconstructed in an afternoon and one that is permanently, irrecoverably destroyed. For New York businesses with compliance obligations, understanding shredding security levels is not an academic exercise — it’s a legal and operational necessity.
This guide explains how each shredding method works, what security level each provides, and how to match the right method to your business’s sensitivity requirements and regulatory obligations.
How Shredding Security Levels Are Classified
The international standard for shredding security levels is DIN 66399, a German engineering standard that has become the global benchmark for document and data destruction security. DIN 66399 defines seven security levels (P-1 through P-7) for paper destruction, from the lowest (large strip cuts) to the highest (extremely fine particles). Similar security levels are defined for other media types (optical, electronic, film, etc.).
For most business purposes, the relevant levels fall within P-3 through P-5, which cover cross-cut and micro-cut shredding. Here’s a quick overview:
- P-1/P-2: Large strips — suitable only for non-sensitive general office paper (not appropriate for confidential documents)
- P-3: Standard cross-cut — suitable for general confidential documents
- P-4: Fine cross-cut — suitable for confidential and internal documents with personal data
- P-5: Micro-cut — suitable for highly sensitive and classified documents; typically the standard for healthcare and financial compliance
- P-6/P-7: Ultra micro-cut — used for top-secret government and military applications
When evaluating shredding services, always ask which DIN 66399 security level their equipment meets. Visit our compliance page to understand what security levels are required for HIPAA, FACTA, and New York data protection regulations.
Strip-Cut Shredding: The Lowest Security Level
Strip-cut shredding is the oldest and simplest form of document destruction. A strip-cut shredder slices paper into long, narrow vertical strips — typically about 1/4 to 3/8 inch wide, running the full length of the document.
The problem with strip-cut shredding: The resulting strips are still recognizable as pieces of a page. A motivated person with time and patience can reassemble strip-cut documents. In fact, when the U.S. Embassy in Tehran was seized in 1979, Iranian students famously reassembled strip-cut documents by hand over several years. Modern software can make this process even faster.
Strip-cut shredding corresponds to DIN 66399 security level P-1 or P-2 and is not appropriate for any document containing personally identifiable information, financial data, medical records, or proprietary business information. For compliance purposes under HIPAA, FACTA, or the New York SHIELD Act, strip-cut shredding does not meet the standard of “rendering information unreadable or indecipherable.”
- ✅ Appropriate for: General office paper with no confidential content
- ❌ Not appropriate for: Any document containing personal, financial, medical, or sensitive business data
Cross-Cut Shredding: The Business Standard
Cross-cut shredding significantly improves on strip-cut by cutting paper in two directions simultaneously — vertically and horizontally — producing small rectangular or diamond-shaped particles. A standard cross-cut shredder might produce particles approximately 1/4 inch by 1-3/4 inches, compared to the long strips of a strip-cut machine.
This makes reconstruction dramatically more difficult. The sheer number of pieces and loss of positional information makes reassembly a practical impossibility for any motivated attacker working without specialized equipment. Cross-cut shredding falls within DIN 66399 security levels P-3 to P-4 depending on particle size.
For most business documents — contracts, personnel files, financial records, standard client correspondence — cross-cut shredding meets compliance requirements under HIPAA’s minimum standards, FACTA, and the New York SHIELD Act’s “reasonable safeguards” requirement. It is the baseline standard New York Shredding applies to general document destruction.
- ✅ Appropriate for: Most confidential business documents, personnel records, financial statements, client files
- ✅ Compliant with: HIPAA general standard, FACTA, New York SHIELD Act
- ❌ Not the highest security level: For extremely sensitive materials, micro-cut may be preferred
Learn more about which service is right for your documents on our services page.
Micro-Cut Shredding: The Gold Standard for Sensitive Data
Micro-cut shredding takes cross-cut to the next level, slicing paper into extremely small particles — sometimes smaller than a grain of rice. A P-5 micro-cut shredder produces particles approximately 1/32 inch by 1/2 inch. Some micro-cut machines produce even finer particles, approaching P-6 and P-7 levels.
At this particle size, reconstruction is essentially impossible even with advanced technology. The sheer volume of fragments and the loss of any recognizable pattern make reassembly a practical impossibility. Micro-cut shredding is the standard for:
- Medical records and HIPAA-protected health information (PHI)
- Financial account records and customer data governed by GLBA
- Attorney-client privileged documents in legal practices
- Trade secrets, proprietary formulas, and classified business information
- Government and defense contractor records
- Any document where maximum security is non-negotiable
For healthcare providers, financial institutions, and legal firms operating in New York, micro-cut shredding is the most defensible standard when facing regulatory scrutiny. If your documents contain Social Security numbers, account numbers, protected health information, or other high-value data, micro-cut provides the strongest evidence of thorough destruction. Visit our compliance resources or contact us to discuss which security level is appropriate for your materials.
Which Shredding Level Does Your Business Need?
The right shredding security level for your organization depends on the sensitivity of your documents and your regulatory obligations. Here’s a quick reference guide:
- General office paper, marketing materials, internal communications: Cross-cut (P-3) is sufficient
- Employee records, contracts, vendor files with PII: Cross-cut (P-4) minimum; micro-cut preferred
- Medical records, PHI, HIPAA-governed documents: Micro-cut (P-5) recommended
- Financial account data, GLBA-governed records: Micro-cut (P-5) recommended
- Legal files, attorney-client privileged records: Micro-cut (P-5) recommended
New York Shredding uses industrial equipment capable of meeting the security levels required by your industry and regulatory obligations. When you schedule service, our team can discuss the appropriate destruction standard for your specific document types. Learn how our process works, or request a free quote tailored to your security requirements.
Why New York Businesses Choose New York Shredding
For over a decade, New York Shredding Document Destruction, Inc. has helped businesses across New York City, Long Island, Westchester, and the Hudson Valley protect their sensitive information through certified, HIPAA-compliant shredding services. Our industrial-grade shredding equipment, locked on-site consoles, and Certificate of Destruction give your business the proof it needs for any compliance audit.
Whether you need scheduled shredding, a one-time purge, or hard drive destruction, we serve all five boroughs and surrounding areas with fast, reliable service. Request a free quote today and get your office on a shredding schedule that keeps you protected year-round.
Ready to get started? Contact New York Shredding for a free quote, or explore our full range of shredding services.