Safe Deposit Box Operations: Legal Requirements and Best Practices

Safe deposit boxes generate modest revenue, occupy valuable space, and produce a disproportionate share of a bank's litigation. The reason is a single persistent misunderstanding: customers believe the bank is safeguarding their property, and the legal relationship is nothing of the kind.

The Legal Relationship

A safe deposit box is a lease of space, not a deposit and not a custody arrangement. The customer rents a compartment; the bank provides a secure facility and controlled access. In most jurisdictions the relationship is characterized as landlord and tenant, or as a bailment for hire — and the distinction matters, because a bailee owes a duty of care with respect to property it knows it holds.

The bank does not know what is in the box. It does not inventory contents, cannot verify what was placed inside, and is generally not liable for contents unless the customer proves the loss resulted from the bank's failure to exercise ordinary care.

Two consequences that must be communicated clearly:

Contents are not FDIC insured. Deposit insurance covers deposits. A box is not a deposit. This is the single most common customer misconception, and staff who fail to correct it create both a service failure and a potential misrepresentation.

The customer needs their own insurance. Homeowner or renter policies frequently provide limited coverage for property in a box, often with sub-limits by category. Customers storing anything valuable should confirm coverage with their insurer, and should be told so at rental.

The Lease Agreement

The agreement should address:

• Identification of the renter or renters and their rights, jointly and individually
• Access procedures and identification requirements
• Rent, payment terms, and consequences of non-payment
• The bank's right to drill and the procedure, including notice
• Limitation of liability, including any dollar limitation permitted in the jurisdiction
• The statement that contents are not insured by the bank or the FDIC
• Prohibited contents — commonly cash in some institutions' agreements, firearms, hazardous or perishable material, and anything unlawful
• Termination rights on both sides
• Successor and death provisions consistent with state law

Multiple renters create a question worth resolving explicitly: does each renter have independent access, and what happens on the death of one? Where the agreement is silent, state law fills the gap, and the answer may surprise both the bank and the surviving renter.

Access Controls

Dual control at the vault. The customer's key and the bank's guard key are both required. The bank must never hold the customer's key, and a bank that retains a copy has fundamentally altered the relationship and its liability.

Identification at every access, without exception for familiarity. The person who has visited monthly for eleven years is still identified.

An access log recording date, time, box number, the individual accessing, and the employee who admitted them, signed by both. This log is the bank's evidence in any dispute, and an incomplete log is why banks lose these cases.

Privacy for the customer in a booth or room, with the bank neither observing nor recording contents.

No unaccompanied access to the vault area, and no leaving a customer alone with other boxes.

Drilling

Boxes must sometimes be opened without the customer's key — abandonment, unpaid rent, a lost key, a court order, or a legal process.

The procedure is governed by state law and typically requires:

• Notice to the renter at the last known address, in the prescribed form and with the prescribed waiting period
• Drilling performed under dual control, frequently with a third-party witness such as a locksmith or notary
• A detailed contemporaneous inventory of contents, signed by all present
• Secure storage of contents pending resolution
• Reporting and remittance to the state where the contents are ultimately abandoned

The inventory is the critical step. It is the only record of what was in a box the customer never opened, and any deficiency in it becomes the customer's argument that something is missing.

Death of a Renter

State law governs, and the rules vary substantially. Common patterns include:

• Access limited to the personal representative of the estate, upon presentation of letters of appointment
• A supervised opening permitted for the limited purpose of locating a will, an insurance policy, or burial instructions, with a required inventory and no removal of other contents
• Notice requirements to the state taxing authority in some jurisdictions before contents are released
• A surviving joint renter's rights determined by the agreement and by state law, which may or may not permit continued access

NOTE TO EDITOR: Death-of-renter procedures and any state tax notification requirements are state-specific and vary widely. Confirm the requirements for the states served before publishing, or link to a maintained resource.

Staff should never release contents to a family member on the strength of a death certificate and a plausible relationship. It is the most sympathetic request in banking and one of the more common sources of liability.

Adverse Claims and Legal Process

Divorce, disputes, and competing claims. Where two parties claim rights to a box, the bank's position is neutrality. It should not adjudicate, and it should generally restrict access pending resolution or a court order — while recognizing that restricting a renter's access without authority creates its own exposure. This is a counsel question, not a branch decision.

Search warrants and subpoenas. Follow the institution's legal process procedure. A warrant is executed; a subpoena is responded to. The distinction matters, and so does documenting what was provided.

Levies and garnishments. Box contents may be reachable in some jurisdictions and by some processes, which requires the same careful handling as any legal process.

Practical Operations

• Reconcile the box inventory to the rental records periodically. Institutions routinely discover boxes recorded as rented that are empty, and boxes in use with no current agreement.
• Maintain current renter addresses, because every notice procedure depends on them.
• Track unpaid rent and act on it within the statutory timeline rather than carrying delinquent boxes for years.
• Escheat abandoned contents on the state's schedule. Unclaimed property audits reach safe deposit contents, and institutions holding drilled contents indefinitely have an exposure.
• Train on what not to say. "Your valuables are safe with us" and "it's insured" are both wrong, and both get said.

Structured coverage is available through our safe deposit box training courses and the Certificate in Deposit Compliance.

Should a Bank Still Offer Boxes?

A fair question, and worth answering deliberately rather than by inertia.

The case against. Revenue per box is low and has not kept pace with the value of the branch floor space and vault capacity the service consumes. Demand is declining as documents digitize. The litigation exposure is real and asymmetric — a single disputed loss can exceed years of rental income from an entire vault. And the operational burden is meaningful: access logging, notice procedures, drilling, inventories, and escheatment all require discipline that a small operation struggles to sustain.

The case for. Boxes anchor long-tenured relationships, and the customers who rent them skew toward exactly the deposit base a community institution wants. The service is genuinely useful for physical documents, and a customer who keeps their will at your branch is unlikely to move their accounts. For institutions that already have the vault, the marginal cost is low.

If you keep them, the honest requirement is to run the operation properly: current agreements on every box, complete access logs, accurate renter addresses, disciplined handling of delinquency and drilling, and staff trained never to describe contents as safe or insured. Most of the liability in this product comes not from the risk itself but from a program operated casually.

If you exit, do it on a planned timeline with substantial notice, assistance for customers relocating contents, and a documented process for boxes whose renters cannot be located — because those boxes become a drilling, inventory, and escheatment project regardless of the business decision.

What Customers Should Not Store

Staff are frequently asked what belongs in a box, and a useful answer prevents later problems for both parties.

Good candidates: original documents that are difficult or slow to replace and are not needed urgently — property deeds, vehicle titles, birth and marriage certificates, military discharge papers, patents, and negatives or physical media of irreplaceable photographs. Small valuables the customer has insured and does not need access to. An inventory of household contents for insurance purposes, along with photographs.

Poor candidates, and the reason:

Anything needed in an emergency. A box is accessible only during banking hours, and only by the renter. Passports, medical directives, and powers of attorney are needed precisely when the vault is closed.

The only copy of a will. This is the classic error. On death, access is restricted exactly when the will is required, and in some states opening the box to retrieve it involves a supervised procedure with notice requirements. The original should be with the attorney or filed per state practice, with a copy at home indicating where the original is held.

Cash. Many agreements prohibit it, and where they do not, it earns nothing, is not insured, and creates a difficult conversation if the box is later drilled. There is also no independent evidence it was ever there.

Uninsured valuables of significant worth. Not because the box is unsafe, but because the customer's assumption of coverage is usually wrong.

Anything perishable, hazardous, or unlawful.

The framing worth offering a customer: a safe deposit box protects against fire, flood, and theft at home. It does not protect against needing something on a Sunday, and it does not insure anything. Customers who understand both halves choose contents sensibly and complain less.

Frequently Asked Questions

Are safe deposit box contents FDIC insured?

No. Deposit insurance covers deposits, and a safe deposit box is a lease of space rather than a deposit. Contents are not insured by the FDIC or, generally, by the bank. Customers storing valuables should confirm coverage with their own insurer, since homeowner and renter policies often provide only limited coverage with category sub-limits.

Is the bank liable if something is missing from a box?

Generally only where the customer proves the loss resulted from the bank's failure to exercise ordinary care, and subject to any limitation of liability the lease and state law permit. Because the bank does not inventory contents, disputes turn heavily on the access log — which is why an incomplete log is how banks lose these cases.

Can a bank open a box without the customer's key?

Yes, in defined circumstances — abandonment, unpaid rent, a lost key, or legal process — following the state's procedure. That typically requires notice to the renter at the last known address, a waiting period, drilling under dual control with a witness, and a detailed contemporaneous inventory signed by all present.

What happens to a safe deposit box when the renter dies?

State law governs and varies substantially. Access is commonly limited to the personal representative of the estate on presentation of letters of appointment, sometimes with a supervised opening permitted solely to locate a will, insurance policy, or burial instructions. Some states require notice to the taxing authority before contents are released. Contents should never be released to a family member on a death certificate alone.

Who may access a box with multiple renters?

It depends on the lease agreement and on state law. The agreement should state explicitly whether each renter has independent access and what happens on the death of one. Where it is silent, state law fills the gap — and the result may not match what either the bank or the surviving renter expects.

What should staff never say about safe deposit boxes?

That the contents are safe, protected, or insured. The bank leases space and controls access; it does not safeguard property it has never seen, and neither the bank nor the FDIC insures the contents. Both phrases get said routinely and both create exposure.