What Does a Legal Hold Mean for a Security Company?
What a legal hold means for a security guard company: what to preserve, spoliation risk, and a practical hold workflow. Get the operator's guide.
A legal hold is an obligation to stop deleting records the moment litigation is reasonably anticipated — not when a lawsuit is filed. For a security guard company, that means freezing incident reports, photos, video, GPS logs, schedules, and related communications before any auto-deletion or routine cleanup destroys them. Letting evidence disappear after a hold should exist is called spoliation, and courts punish it.
I run a guard company with 400+ employees across four markets — Houston, Corpus Christi, Las Vegas, and Florida. In this business, the question is never if a claim will touch one of your sites. It's when, and whether your records will still exist by the time the demand letter arrives. This guide is how I think about legal holds as an operator, not a lawyer.
What is a legal hold in plain English?
A legal hold (also called a litigation hold) is a freeze order you place on your own records. When your company reasonably anticipates a lawsuit, claim, or government investigation, you must suspend any routine deletion — automatic purges, retention-schedule cleanups, employees clearing phones — for records that could be relevant.
Two things trip up guard company owners:
- The trigger is anticipation, not filing. A slip-and-fall on a client site, an injury involving your officer, a termination that ends badly, or a preservation letter from an attorney can all start the clock. The duty commonly attaches months or years before a complaint is ever filed.
- The duty covers electronic records. The federal courts made this explicit in the Zubulake v. UBS Warburg line of decisions, and Rule 37(e) of the Federal Rules of Civil Procedure now spells out sanctions for lost electronically stored information. GPS pings, checkpoint scans, and app-captured photos are all "records."
When do guard companies actually get legal holds?
In practice, three scenarios generate most litigation holds in contract security:
- Premises liability. Someone is assaulted, injured, or robbed at a property you guard, and the property owner gets sued for negligent security. Your patrol records become Exhibit A — for or against you. Personal injury statutes of limitation commonly run two to four years depending on the state, so the incident that matters may be one nobody remembers.
- Injury claims. Your own officer is hurt on post — a workers' comp dispute, an OSHA inquiry, or a third-party claim. Schedules, post orders, and training records get demanded.
- Employment disputes. Wage-and-hour claims, wrongful termination, discrimination. Clock-in data and shift schedules are the battleground; timekeeping records are exactly what plaintiffs' attorneys subpoena first.
If any of these lands on your desk, assume a hold obligation exists and act the same day.
What records must a security company preserve under a hold?
Cast the net wider than the incident itself. A defensible hold typically covers:
| Category | Examples | Why it gets demanded |
|---|---|---|
| Reports | DARs, incident reports, drafts and edit history | Core narrative of what officers saw and did |
| Media | Photos, video, audio — the originals, with metadata | Timestamps and GPS data prove when/where |
| GPS & patrol data | Clock-in locations, checkpoint scans, tour routes | Proves (or disproves) the officer was there |
| Scheduling | Shift schedules, post assignments, call-offs, coverage gaps | Establishes staffing levels and who was on post |
| Communications | Emails, texts, dispatch notes, client messages about the incident | Shows notice, response, and follow-up |
| Personnel | The involved officers' training, licensing, and disciplinary files | Negligent hiring/supervision theories |
Preserve everything for the relevant site and time window — commonly the incident date plus a surrounding period — not just the single report.
Why is auto-deletion the biggest spoliation risk?
Spoliation is the destruction or loss of evidence you had a duty to preserve. Under Rule 37(e), consequences range from paying the other side's costs to an adverse-inference instruction — the judge telling the jury it may assume the missing records were bad for you. In a negligent-security case, "the guard company deleted the patrol logs" is close to a lost case.
The dangerous part: nobody has to decide to destroy anything. Deletion happens by default —
- Software that purges GPS data after 90 days or media after 12 months.
- Officers' personal phones holding the only copy of incident photos.
- A guard quits (industry turnover is commonly cited at 100%+ annually) and their device, texts, and photos walk out the door.
- Paper DARs in a site binder that gets tossed at contract end.
A hold means finding every one of those default deletion paths and shutting them off — provably.
What does a practical legal hold workflow look like?
- Recognize the trigger. Train supervisors: serious injury, preservation letter, attorney contact, or agency inquiry → notify management the same day.
- Issue a written hold notice. Identify the matter, the sites, the date range, and the record types. Send it to everyone who touches those records — and get acknowledgments.
- Suspend auto-deletion for the covered scope in every system: guard management platform, email, dispatch, video storage.
- Collect the fragile stuff first. Photos on personal phones, texts, paper logs — copy them to controlled storage before people or devices disappear.
- Document everything. When the hold issued, who acknowledged, what was suspended. The record of the hold is your defense if something still slips.
- Release the hold in writing when your attorney confirms the matter is closed, then resume your normal retention schedule.
How do platform-level holds beat manual ones?
A manual hold is a stack of emails and crossed fingers. It depends on every supervisor remembering, every officer complying, and every system's purge settings being found and changed. One missed checkbox is spoliation.
A platform-level hold flips the default. When your reports, photos and video, GPS clock-ins, checkpoint scans, and schedules already live in one system — captured from the field, timestamped, and centrally stored — preserving them is a scope decision, not a scavenger hunt. Because SNTNL runs Ranger Guard's daily operations, more than a year of records — 150+ GB of live operational data — sits in one place, exportable on demand; when counsel asks for a site's history, pulling it is a query, not an archaeology project. That's the difference between proving what your guards did and explaining why you can't. And because SNTNL includes free data export always, your records stay yours even if you leave.
If you'd rather have holds be a settings change than a fire drill, take a look at how we run it — book a demo and I'll show you how Ranger Guard's records are kept litigation-ready by default.
This is general information, not legal advice — verify current requirements with your attorney.
Keep reading
What Are the Texas Security Company License Requirements?
Texas security company license requirements explained by an operator: DPS Private Security Bureau, license cla…
What Are the Record Keeping Requirements for Security Guard Companies?
Security guard record keeping requirements explained: the five record categories, retention practices, and who…
What Are the Florida Security Agency License Requirements?
Florida security agency license requirements under Chapter 493: FDACS licensing, Class B agency and Class D of…