Witness Rules for Two-Key Desk Safes
Practical dual-control patterns when both keys sit in the same small office and directors travel often.
Dual-control sounds simple until both key holders share a twenty-person suite and one flies to Osaka every other week.
The travel gap
We map primary custodian, alternate witness, and emergency witness on a single laminated card posted inside the safe door. The emergency role goes to a trusted admin who never holds keys but can observe envelope handling.
Signature timing
Witnesses sign when the safe opens, not when it closes. Closing signatures duplicate the open line if the envelope seal changed. Night access uses the vault log only — no ledger entries after 18:00 unless pre-authorized on the daily sheet.
Common failure
Directors delegate witness duty to junior staff without briefing. The junior signs but cannot describe what they saw. We run a ten-minute mock open during setup so the witness can narrate the sequence aloud.
Related reading
Our vault log guide explains column layout. For offices whose witness chain broke after layoffs, consider a vault log audit.