Scanning sensitive documents safely: a practical checklist

The risk in scanning a sensitive document isn't the scan — it's the copies. Every tool, chat and folder the scan passes through is a place it might quietly persist. The checklist below keeps the copy count knowable.

Before scanning

• Choose an on-device tool so the scanning step adds zero server copies. (Why this matters.)
• Use your own device — not the office PC with unknown backup software, not a friend's phone.
• Mind the background: other papers on the desk end up in photos more often than you'd think.

While scanning

• Scan only the pages the recipient needs — restraint is a security control.
• Name the file informatively for you but not sensationally (“Records-2026.pdf” travels better than “HIV-test-results.pdf” if a filename leaks into a notification or email subject).
• Verify legibility once at full zoom so you never have to re-scan and re-handle.

After scanning: the copy audit

1. Where's the master? Decide: encrypted folder, password-managed cloud, or a specific device folder.
2. Who got a copy? Send through the recipient's official channel; avoid casual chats for the most sensitive classes.
3. What temporary copies exist? Downloads folder, chat attachments, email sent-items — clean the strays when the errand ends. (Deleting scans properly.)

Frequently asked questions

Should sensitive PDFs be password-protected?

Password-protecting helps against casual exposure when a channel demands it. Sturdier options are encrypted storage and trustworthy channels; a PDF password is a supplement, not the strategy.

Is email safe for sensitive scans?

Ordinary email is neither end-to-end encrypted nor easy to fully delete. Prefer official upload portals or E2E-encrypted channels; if email is required, ask about their secure-mail option.