What happens if a disaster damages classified records and recovery requires sending them to an outside vendor?

A fire, flood, or other disaster does not change the classification of damaged records. Information that was classified before the event remains classified during salvage, transport, and restoration. The security obligations travel with the records, even when recovery work must happen outside the agency’s own facilities.

Classification Survives the Damage

Classified national security information stays protected at its assigned level until it is formally declassified through an authorized process. Water damage, mold, or charring may make a document fragile or hard to read, but it does not lower or remove the classification. Treating damaged classified material as if it were ordinary records would be a security violation, not a shortcut.

Recovery Must Stay Inside Authorized Channels

When records are too damaged for in-house treatment, agencies generally look to recovery or conservation services. For classified material, that work cannot go to just any provider. The vendor and its personnel typically must hold the appropriate facility and personnel security clearances, operate an approved secure environment, and handle the records under a contract that imposes safeguarding requirements consistent with the executive order governing classified information and its implementing rules.

Key principles that usually apply:

• Cleared people and places only. Storage, transport, and processing occur in authorized, access-controlled settings.
• Chain of custody. Every transfer is documented so the agency can account for the records at all times.
• Need to know. Vendor staff access only what their cleared role requires.
• Secure return or destruction. Recovered records are returned under control, and any unrecoverable material is destroyed using approved methods.

Roles and Oversight

Agency security and records officials coordinate the response, often alongside the original classification authority for the information involved. The Information Security Oversight Office sets and oversees the policies that govern how classified information is safeguarded across the executive branch, and agency disaster and vital-records plans should anticipate this scenario in advance rather than improvising during a crisis.

Practical Takeaway

The safest posture is to plan ahead: identify cleared recovery options, build safeguarding terms into contracts before they are needed, and rehearse the chain-of-custody steps. Damaged classified records can often be saved, but only through channels that preserve their protection from the moment they leave the vault to the moment they return.

Learn more on the declassification topic hub.