PD ISO TR 17068-2012 PDF

Full title and description

STB PD ISO TR 17068-2012 — Information and documentation — Trusted third party repository for digital records. This Technical Report defines the authorized custody services, processes, system and management criteria for Trusted Third Party Repositories (TTPRs) that hold clients' digital records to ensure provable integrity, authenticity and reliable evidential value during retention periods.

Abstract

ISO/TR 17068:2012 describes services and processes to be provided by a Trusted Third Party Repository (TTPR) for clients' digital records during the retention period so as to ensure trust, provable integrity and authenticity. It details criteria of "trustworthiness" and particular requirements for TTPR services, hardware and software systems, and management. The Technical Report notes the limitation that authorized custody of stored records is between only the third party and the client.

General information

• Status: Withdrawn (technical report).
• Publication date: November 2012 (2012-11).
• Publisher: International Organization for Standardization (ISO).
• ICS / categories: 01.140.20 (Information sciences / documentation and archives).
• Edition / version: Edition 1 (Technical Report, 2012).
• Number of pages: 31.

Scope

ISO/TR 17068:2012 provides guidance and defines requirements for the operation of Trusted Third Party Repositories (TTPRs) that offer authorized custody services for digital records. The scope covers service descriptions, custody relationships, trustworthiness criteria, requirements for systems (hardware/software), security controls, management processes and evidential considerations for long‑term retention. The report explicitly limits its custody model to the relationship between the third party and the client (i.e., it does not impose multi‑party custody models).

Key topics and requirements

• Definition of Trusted Third Party Repository (TTPR) roles and authorized custody services for digital records.
• Requirements to ensure provable integrity and authenticity of retained digital records.
• Trustworthiness criteria for service provision, including governance, policies and organisational responsibilities.
• Technical requirements and recommendations for storage systems, software, security and access controls.
• Management processes for intake, retention, retrieval and evidential support of records over retention periods.
• Limitations and legal/evidential considerations regarding custody (custody contract between client and TTPR).

Typical use and users

Primary users include records managers, archival services, legal and compliance teams, third‑party repository operators, cloud and archival service providers, financial and public sector organisations that require long‑term retention with legal evidential value, and vendors designing systems for trusted custody of digital records. The report is used to inform service design, procurement, governance and compliance activities for custody and retention of digital records.

Related standards

ISO/TR 17068:2012 was later revised and promoted to an International Standard as ISO 17068:2017 (which replaces the 2012 Technical Report). Related publications in the digital records / archiving domain include ISO 13008 (digital records conversion and migration), ISO 14641‑1 (electronic archiving system specifications), ISO 23081 (metadata for records management) and ISO 19005 (PDF/A long‑term preservation guidance), all of which address complementary aspects of long‑term preservation, metadata, format migration and archival system design.

Keywords

trusted third party repository, TTPR, digital records, records custody, integrity, authenticity, evidential value, records management, electronic archiving, long‑term retention

FAQ

Q: What is this standard?

A: ISO/TR 17068:2012 is a Technical Report titled "Information and documentation — Trusted third party repository for digital records" that defines authorized custody services and trustworthiness criteria for Trusted Third Party Repositories holding digital records.

Q: What does it cover?

A: It covers the services, processes, system and management requirements a TTPR should provide to ensure provable integrity, authenticity and reliable evidential value of clients' digital records during retention, and describes limitations of the custody model (custody between third party and client).

Q: Who typically uses it?

A: Records managers, archivists, legal/compliance teams, public sector records offices, financial institutions, third‑party repository operators and vendors implementing custody/archival systems use the report to design, assess or procure trusted custody services for digital records.

Q: Is it current or superseded?

A: ISO/TR 17068:2012 has been withdrawn and superseded by ISO 17068:2017, which was published as an International Standard in October 2017 and remains the current published standard on this subject (confirmed in subsequent ISO reviews).

Q: Is it part of a series?

A: It is not a numbered multi‑part series itself, but it belongs to a family of information and documentation standards dealing with records, preservation, metadata and archiving (for example ISO 13008, ISO 14641‑1, ISO 23081 and ISO 19005) that together support digital records management and long‑term preservation practices.

Q: What are the key keywords?

A: Trusted third party repository; TTPR; digital records; custody; integrity; authenticity; evidential value; records management; electronic archiving; long‑term retention.