Safe Deposit Box Annual Inventory Audit
Use this annual safe deposit box inventory audit to reconcile rented, vacant, delinquent, and orphaned boxes against vault records, then document security and recordkeeping gaps before they become losses or disputes.
Trusted by frontline teams 15 years of frontline software AI customization in seconds
Built for: Banking · Credit Unions · Financial Services
Overview
This safe deposit box annual inventory audit template is built to reconcile the vault’s physical box status against the master inventory and rental records. It walks through the audit period, vault location, source reports, count methodology, and prior exceptions, then moves into the actual reconciliation of rented, vacant, delinquent, unassigned, and duplicate boxes. The template also captures rental record accuracy, delinquency controls, vault security, access control, and final sign-off so the audit trail is complete.
Use this template when you need a structured annual control over safe deposit box inventory, especially after branch changes, system conversions, staffing turnover, or any event that could affect box assignments or access records. It is designed to surface record mismatches, delinquency handling gaps, and security deficiencies before they become customer disputes or examiner findings.
Do not use this as a generic branch checklist or a customer service log. It is not meant to inspect the contents of customer boxes, and it should not be used to replace incident reporting for theft, forced entry, or suspected tampering. If your vault has a separate key-control procedure, surveillance review process, or dual-control policy, this audit should reference those records rather than duplicating them. The value of the template is in proving that the inventory, status changes, and access controls all line up at the time of review.
Standards & compliance context
- This template supports internal control and recordkeeping expectations commonly reviewed under financial institution examination practices, even though safe deposit box controls are usually governed by policy and contract rather than one single code.
- The vault security and access-control section aligns with general security principles found in banking control frameworks, including restricted access, key control, and documented oversight.
- If your institution uses formal risk or quality systems, the corrective-action and management-review steps can be mapped to ISO 9001-style non-conformance handling and closure tracking.
- Where delinquent boxes or abandoned property are involved, follow your state law, contract terms, and internal legal guidance before changing status or reissuing a box.
- If surveillance, alarm, or vault hardware is part of the control set, coordinate with your security program and any applicable AHJ or insurer requirements.
General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.
What's inside this template
Audit Scope and Inventory Snapshot
This section sets the audit boundary and gathers the source records needed to make the reconciliation defensible.
-
Audit period and vault location documented
Record the annual audit date range, branch or vault identifier, and the inventory report version used for the inspection.
-
Master box inventory report obtained
Verify the current master inventory listing is available and matches the audit period.
-
Rental records and delinquency report obtained
Confirm access to active rental agreements, delinquent account listing, and any box status change logs.
-
Inventory count methodology confirmed
Select the reconciliation method used for the audit.
-
Prior audit exceptions reviewed
Verify prior year deficiencies, open corrective actions, and unresolved variances were reviewed before the count.
Physical Box Count and Status Reconciliation
This is the core inventory check where physical box status is matched to the master list and mismatches are identified.
-
Rented boxes match rental records
Enter the number of rented boxes physically verified as matching the rental record and assigned box status.
-
Vacant boxes match vacant inventory listing
Enter the number of vacant boxes physically verified as vacant and correctly listed as available.
-
Delinquent boxes identified and segregated
Enter the number of delinquent boxes confirmed on the delinquency report and marked according to policy.
-
Unassigned or orphaned boxes identified
Enter the number of boxes found physically present but not listed in the current inventory or rental records.
-
Duplicate box assignments identified
Enter the number of duplicate box numbers, duplicate assignments, or conflicting status records found during reconciliation.
Rental Record Accuracy and Delinquency Controls
This section verifies that the paperwork and status changes behind each box are current, signed, and properly controlled.
-
Active rental agreements current and signed
Confirm active box rental agreements are current, signed, and linked to the correct box number.
-
Delinquent account notices documented
Verify delinquency notices, escalation steps, and required hold actions are documented in the account file.
-
Vacant box release and reissue controls followed
Confirm vacant boxes were released, rekeyed if applicable, and reissued only after required approvals.
-
Status changes logged promptly
Verify box status changes between rented, vacant, delinquent, and closed were logged with date, approver, and reason.
-
Record exceptions documented
List any mismatches, missing records, or unresolved variances found during reconciliation.
Vault Security and Access Control
This section documents whether the vault itself, its access restrictions, and supporting logs show adequate security control.
-
Vault door and locking mechanism secure
Confirm the vault door, locking hardware, and access controls were secure during the audit walk-through.
-
Authorized access only observed
Verify only authorized personnel had access to the vault area during the audit.
-
Key control or combination control documented
Confirm key custody, combination control, or dual-control procedures are documented and current.
-
Surveillance and access logs reviewed
Verify vault access logs and surveillance coverage were reviewed for the audit period.
-
Security deficiencies observed
Document any security deficiencies, access-control non-conformances, or unusual conditions observed in the vault area.
Closeout, Corrective Actions, and Sign-Off
This section turns findings into accountable follow-up so variances are assigned, reviewed, and formally closed.
-
All variances assigned corrective action
Confirm each inventory variance, delinquency issue, or record discrepancy has an assigned corrective action owner and due date.
-
Management review completed
Verify the audit results were reviewed by branch management or the designated control owner.
-
Inspector comments
Provide a concise summary of findings, unresolved deficiencies, and any follow-up required.
-
Inspector signature
Inspector attestation that the annual inventory audit was completed accurately.
How to use this template
- Enter the audit period, vault location, and source reports, then confirm the inventory count method and review any prior exceptions before starting the walk-through.
- Compare the master box inventory to the physical vault count and mark each box as rented, vacant, delinquent, unassigned, or duplicate based on the current records.
- Check each active rental agreement, delinquency notice, and status change entry to confirm the record is current, signed, and logged without delay.
- Review vault door condition, locking mechanism, authorized access evidence, key or combination control, and surveillance or access logs for any security deficiency.
- Assign each variance to a corrective action, document management review, and capture inspector comments and signature at closeout.
Best practices
- Use the same box-status definitions every year so rented, vacant, delinquent, and orphaned boxes are classified consistently.
- Reconcile the physical count against the master inventory before reviewing exceptions, so you do not normalize a bad record set.
- Flag delinquent boxes separately from vacant boxes, because they require different controls and follow-up actions.
- Photograph or otherwise document any mismatched label, missing tag, or access-control deficiency at the time it is found.
- Verify that status changes were logged promptly in the rental system, not just noted on paper or in email.
- Have a second reviewer confirm any duplicate assignment, orphaned box, or unresolved variance before closeout.
- Keep prior audit exceptions visible during the current audit so repeat findings are easy to identify and escalate.
What this template typically catches
Issues teams running this template most often surface in practice:
Common use cases
Frequently asked questions
What does this safe deposit box annual inventory audit cover?
This template covers the annual reconciliation of rented, vacant, delinquent, unassigned, and duplicate safe deposit box records against the vault inventory. It also includes vault security checks, access control review, and closeout actions for any variances. Use it to confirm that the physical box status matches the rental system and that exceptions are documented.
How often should this audit be completed?
The template is structured for an annual inventory audit, which is the most common cadence for formal reconciliation. Many institutions also use it after a vault rekey, system migration, branch conversion, or any event that could affect box status or access records. If your internal policy requires more frequent spot checks, this template can be reused as a periodic control.
Who should run the audit?
It should be performed by a designated employee who is independent enough to verify records objectively, often from operations, compliance, internal audit, or branch management. A second reviewer or manager sign-off is useful for exceptions, especially where delinquent accounts, orphaned boxes, or access control issues are found. The person performing the audit should understand vault procedures and recordkeeping controls.
Does this template map to any regulatory or compliance expectations?
Yes, it supports general financial institution recordkeeping and internal control expectations, along with security practices commonly reviewed in audits. While safe deposit boxes are not governed by one single universal standard, the template helps document access control, segregation of duties, exception handling, and inventory accuracy. It can also support examiner requests for evidence of vault controls and management oversight.
What are the most common mistakes this audit helps catch?
Common issues include boxes listed as rented when the rental agreement is missing or expired, vacant boxes still showing as active, and delinquent boxes not clearly segregated. It also catches duplicate assignments, orphaned boxes with no matching customer record, and incomplete access logs. These are the kinds of variances that can create customer disputes or control failures if they are not documented and corrected.
Can I customize the template for my branch or vault setup?
Yes, the template is meant to be adapted to your vault layout, numbering scheme, and core system fields. You can add fields for branch ID, box size, dual-control requirements, key custody, or local escalation contacts. If your institution has multiple vaults, duplicate the audit for each location and keep the same reconciliation logic.
How does this compare with an ad hoc box count?
An ad hoc count may confirm that boxes exist, but it often misses record exceptions, delinquency handling, and access-control evidence. This template gives you a repeatable workflow for matching physical inventory to rental records, documenting discrepancies, and assigning corrective actions. That makes it easier to prove control effectiveness over time rather than relying on memory or informal notes.
What systems or records should be attached or referenced?
At minimum, reference the master box inventory report, rental records, delinquency report, and any prior audit exception log. If available, include surveillance references, access logs, key control records, and management review notes. The goal is to leave a clear audit trail that shows what was checked, what differed, and what was done next.
Related templates
Go deeper on the topic
-
Predictive scheduling laws — also called fair workweek laws or secure scheduling — require employers in covered industries to publish employee schedules...
-
Overtime calculation is the process of applying federal, state, local, and contractual rules to hours worked to determine the correct pay — including...
-
A near-miss is an event that could have caused injury or damage but didn't — a slip that didn't fall, a load that shifted but didn't drop, a machine that...
-
Lockout/tagout (LOTO) is the procedure for controlling hazardous energy — electrical, hydraulic, pneumatic, mechanical, thermal, chemical — before...
-
See how bank branch managers use MangoApps scheduling to fill shifts, communicate policy updates, and eliminate last-minute coverage chaos.
-
See how connected 1:1 tracking, employee audit history, and LMS completion records turn scattered processes into verifiable workforce documentation.
-
See how customers use MangoApps Projects Module to collaborate, track progress, and share knowledge across teams.
-
MangoApps in Okta Integration Network automates user provisioning, SSO, and access management for stronger security and less admin work.
Ready to use this template?
Get started with MangoApps and use Safe Deposit Box Annual Inventory Audit with your team — pricing built for small business.
