
When a provider returns no records, the request is not ready to close. The response may reflect a completed custodian search, or it may point to a patient mismatch, wrong location, narrow scope, separate records system, or another custodian.
A no records found certificate documents the custodian’s stated result for the request or search scope described in the response. It does not establish that no record ever existed. Before relying on it, the firm should confirm which systems and records the custodian searched, who completed the search, and whether the response covers the intended treatment source.

The document records a custodian’s statement that a defined search did not locate responsive records. Its meaning depends on the patient, entity, dates, record categories, and systems included in that search.
| Response Type | Typical Form | What the Firm Must Confirm |
| Informal no records response | Portal message, email, fax, letter, or phone update | Who responded, whether a search occurred, and what scope was reviewed |
| Certificate of no records | Signed custodian certification describing a negative search | Required language, signer authority, search scope, and applicable procedure |
| Affidavit or declaration of no records | Sworn or statutorily authorized statement from a custodian or qualified witness | Oath or declaration requirements, factual statements, delivery method, and governing rule |
An affidavit is ordinarily sworn, while a declaration follows the statute or rule that authorizes it. The document’s title alone does not establish whether it satisfies a subpoena or evidentiary requirement.
Before relying on a formal response, confirm that it identifies the patient, responding entity, requested scope, search result, signer, authority, and execution date. For a subpoena, also confirm that it refers to the correct request and follows the governing procedure.
Authorization-based requests and HIPAA access requests do not universally require a formal certificate. Requirements depend on the jurisdiction, request path, and intended use.
No. A no records found certificate means the responding custodian did not locate records within the defined search.
Read the wording carefully. “Not found,” “do not exist,” “no longer retained,” and “not within our custody or control” describe different situations. Treatment may have occurred under another entity, outside the requested dates, or in a system the department did not search. Billing, pathology, and imaging may also have separate custodians.
Zero records call for search verification. If the provider produces part of the request and issues a negative statement for the remainder, preserve that statement and review the packet through the incomplete medical records workflow.
The status tells the firm what the provider returned. It does not show which systems the custodian searched, where the request went, or why the result was negative.
Most negative responses trace back to one of six operational problems. The reason matters because each one requires a different next step.
| Possible Cause | What It May Mean | What the Firm Should Verify |
| Patient mismatch | The submitted identifiers may not have matched the correct account | Legal and former names, birth date, prior address, phone number, and account number |
| Wrong entity or location | The request may have reached an organization that never held the chart | Legal entity, service location, department, provider, and custodian |
| Scope missed the treatment | The request may have excluded the encounter, category, or department | Dates, imaging, billing, pathology, therapy, anesthesia, and professional records |
| Separate or legacy system | The current EHR may not contain older or separately maintained information | Legacy, paper, archive, imaging, billing, and acquired-practice systems |
| Records are no longer retained | The provider reports disposal under an applicable policy | Written explanation, search scope, disposition date, and remaining categories |
| Another custodian maintains the records | A successor, health system, archive vendor, or department may hold them | Ownership changes, former name, successor, archive vendor, and transferred dates |
A brief “no records” status does not show which situation occurred. Distinguish a completed custodian search from an intake rejection, routing failure, identifier mismatch, or retention response.
HIPAA does not establish one general clinical record retention period. State law generally controls retention. If a provider says records are no longer retained, request a written explanation and confirm whether billing, imaging, or archived material remains.
Escalate to counsel if the provider reports destruction after a subpoena, preservation request, or other potentially relevant notice. Do not treat it as routine retention-based closure.
For individual access requests, 45 CFR 164.524(d)(3) requires a covered entity that knows where the information is maintained to tell the individual where to direct the request. Do not extend that requirement to every attorney authorization or subpoena.

Whether the firm receives a no records found certificate or an informal response, use the same sequence. Verification means confirming that the provider accepted and routed the request correctly, searched the intended patient and scope, and documented enough information to support the next action.
Determine whether a custodian actually searched. A portal status, fax, or phone update may say “no records” when intake rejected, misrouted, or closed the request for an authorization problem. Ask what occurred and who handled it.
Confirm the patient’s legal and former names, date of birth, address during treatment, phone number, and known account number. Compare them with bills, portal messages, and client-held records.
If the file does not resolve a mismatch, ask the client targeted questions about provider locations, approximate treatment dates, referrals, and follow-up care.
Match the destination against bills, explanations of benefits, discharge instructions, referrals, and portal records. Confirm the legal entity and service location.
If the practice closed or changed ownership, identify the successor or archive vendor and determine which treatment dates transferred.
Anchor the range to the incident, admission, procedure, follow-up, or billing activity. If dates are approximate, ask whether the custodian searched nearby periods.
Name the department and rendering provider because radiology, pathology, therapy, anesthesia, and professional billing may follow different request paths.
Confirm whether the search included the current EHR, legacy systems, paper charts, archives, imaging, billing, and acquired-practice records.
“Please check again” provides neither a new search instruction nor a stronger basis for closure.
Use bills, claims, prescriptions, referrals, appointment reminders, and client-held documents to test the response.
This evidence does not prove the first custodian holds the chart, but it can support correction, redirection, or escalation.
Every follow-up should change the search inputs, destination, scope, or custodian. If nothing changes, the firm is repeating activity rather than resolving the request.
Strong verification begins before submission. A disciplined medical record intake process gives the custodian enough information to search the correct patient, entity, location, dates, and record categories on the first attempt.
A firm does not need a no records found certificate for every negative response. The required form depends on the request path, intended use, jurisdiction, and governing procedure.
An authorization-based request may need only a written response. A subpoena or evidentiary submission may require a certificate, affidavit, declaration, testimony, or another formal return.
When the firm used a subpoena, confirm that it satisfied the applicable HIPAA subpoena requirements and state procedural rules before deciding whether the provider’s response is complete.
Federal Rule of Evidence 803(7) addresses evidence offered to prove that a matter was absent from regularly kept records, when records of that kind were regularly maintained and the circumstances do not indicate a lack of trustworthiness. It does not establish a national no records certificate form.
California illustrates why state-specific review matters. Under California Evidence Code section 1561(b), the custodian or another qualified witness must state in the affidavit when the business has none or only part of the subpoenaed records. That is a California procedure, not a national template.
Counsel should confirm the required form before the case team accepts a negative response for litigation or evidentiary use. This article is not legal advice.
| Document | What Happened | Function |
| No records found certificate | The custodian reports that the defined search located no responsive records | Documents a negative search response |
| Certificate of authenticity | The custodian produced records | Supports authentication of the produced records under the applicable rule |
A certificate of authenticity supports produced records, while the negative certificate documents a search that returned no responsive records. Federal Rule of Evidence 902(11) addresses certified domestic business records.
With CaseBinder, firms can request a certificate of authenticity as part of the same order when the custodian produces records.
Do not choose the next action from the “no records” status. Choose it from the reason the search produced that result.
| What the Review Shows | Next Action |
| The request was rejected, misrouted, or based on inaccurate identifiers or scope | Correct and resubmit it |
| Another entity, location, department, or successor custodian likely holds the records | Redirect the request |
| The custodian searched only part of the relevant systems or evidence conflicts with the response | Escalate with a specific search question or supporting evidence |
| The provider reports that records are no longer retained | Request a written response describing the search scope and retention result |
| The request path requires a formal negative return | Request the required certificate, affidavit, declaration, or subpoena response |
| The provider confirms the correct patient, entity, location, scope, and relevant systems | Obtain the appropriate written response and complete the firm’s closure review |
Do not send the same request to the same fax number and call that escalation. Each follow-up should test a defined possibility.
Before closure, document the identifiers, entity, location, dates, record categories, systems confirmed, follow-up, contradictory evidence, and final response. Another case manager should be able to see which systems the custodian searched and why the firm closed the request.
A closure note can preserve the scope without overstating the result:
The identified custodian reported no responsive records within the stated search scope for the submitted patient identifiers, facility, treatment dates, and record categories after the documented verification and escalation steps.

A provider can answer without resolving the request. When the response still requires custodian research, search clarification, and repeated outreach, the exception work has returned to the case manager.
CaseBinder keeps that work with our retrieval experts. We handle the targeted provider follow-up and escalation needed to move the request toward correction, redirection, a written negative response, or documented closure review.
The firm can follow the request history, provider outreach, and next action through a platform backed by a SOC 2 Type II attestation. The firm gets an actionable status instead of a note that says only “no records.”
We do not create or guarantee a negative certificate, affidavit, or declaration. The custodian supplies the response, while the governing procedure controls the required form. Counsel determines whether the response satisfies the applicable subpoena, discovery, or evidentiary requirements.
When the custodian produces records, a certificate of authenticity is available on request as part of the same order. Negative responses should not return to case managers as open-ended provider research.
Schedule a CaseBinder retrieval workflow review to examine where ownership breaks down, which responses need targeted escalation, and what documentation your team requires before closure.
Confirm that the provider completed a search, then verify the patient, entity, location, dates, scope, custodian, and systems searched. Correct, redirect, escalate, or close based on what the verification shows.
Not necessarily. An affidavit is ordinarily sworn. A certificate may be signed without an oath, and a declaration follows the statute or rule that authorizes it. The correct form depends on the jurisdiction, request path, subpoena language, and intended use.
No. It documents the custodian’s represented search within the stated scope. Treatment may have occurred under another entity, outside the requested dates, in another system, or before the provider disposed of records under an applicable policy.
Ask for a written response identifying the patient, scope, and records no longer retained. Confirm whether billing, imaging, or archived material remains. Escalate to counsel if destruction followed a subpoena, preservation request, or other relevant notice.
It depends on the subpoena, jurisdiction, discovery rules, court orders, and intended evidentiary use. An informal email may not satisfy a process that requires a custodian affidavit, certificate, declaration, testimony, or formal return. Counsel should confirm the required response before closure.