Pension scheme wind-up: a trustee's checklist for protecting the governance record

Wind-up checklists exist for benefits, buy-out, and regulatory notification. What does not typically appear on any of them is the governance record itself (the accumulated evidence that trustees discharged their duties properly). This checklist exists because that omission is, quietly, one of the most consequential risks in the entire wind-up process.

Why the governance record matters after wind-up

When a pension scheme winds up, the trust ceases to exist as an active entity. There are no more meetings, no more contributions, no more trustee appointments. The project, by every operational measure, is finished.

The obligations are not.

Pension claims can surface years after wind-up. Equalisation queries. Disputed benefit calculations. Data subject access requests. Complaints about decisions made in the scheme's final months. When they arrive (and the question is when, not whether), the quality of the evidence available determines the outcome. A governance record that is intact, searchable, and retrievable produces a swift, defensible response. A governance record that has been lost, fragmented, or buried in a system no one can access produces a slow, expensive, and uncertain one.

The Pensions Regulator requires records to be kept for a minimum of six years. In practice, the limitation period for many claims extends well beyond that. The legal minimum is a floor, not a standard. Prudent trustees plan for ten years or more, and structure the record so that it can actually be used when the moment arrives, not merely shown to technically exist.

The difficulty is not the legal requirement. It is the practical reality of maintaining access when no one is left to maintain it. Within two years of wind-up, the scheme secretary has typically moved on, the chair's email has been deactivated, and the shared drive has been reorganised or quietly deleted. The window for consolidation is before wind-up, not after. After, there is no one to do it.

The governance record checklist

Phase 1: Audit the existing record (12 to 18 months before target wind-up)

Before anything can be preserved, it needs to be found. The governance record of a typical pension scheme is not in one place. It is distributed across the memories, inboxes, and filing habits of a dozen people who may not be aware they are custodians of anything.

• Map every location where governance material currently lives: shared drives, email accounts, board portals, adviser file-sharing systems, the scheme secretary's laptop, the chair's personal archive, physical files in the sponsor's office
• Catalogue the key document types: trust deed and rules (every amendment), SIP and investment policy documents, actuarial valuations, covenant reviews, minutes and papers for all trustee and sub-committee meetings, adviser reports, correspondence with TPR, member communications
• Identify which individuals hold material that is not in a central system. Pay particular attention to scheme secretaries, chairs, and advisers (the people who correspond most and file least consistently)
• Assess version control: are the "final" versions of key documents clearly identified? The trust deed is the most dangerous candidate for ambiguity (the question of which version was operative at which point in time can be the fulcrum of a dispute)
• Evaluate the completeness of meeting records: are minutes signed? Are papers attached? Is the discussion linked to the decision it produced? A minute that records a conclusion without the papers that informed it is evidence of a decision, not evidence that the decision was sound

Phase 2: Consolidate and structure (6 to 12 months before wind-up)

A governance record scattered across five systems is functionally equivalent to no record at all, once the people who knew which system held which document are no longer available.

• Choose a permanent archive solution. The options range from a purpose-built governance archive (such as Knowa Archive) to a managed document store to a structured export to long-term cloud storage. The trade-offs are in searchability, accessibility, and cost, and the choice matters more than most schemes realise at this stage
• Consolidate all governance documents into the chosen environment. Prioritise the material most likely to be needed in a dispute: trust deed and amendments, signed minutes, investment decisions and their rationale, risk register history, compliance records, and any correspondence with regulators
• Ensure meeting records are complete: agenda, papers, minutes, and action outcomes linked together for every meeting. A minute without its papers is an assertion. A minute with its papers is evidence
• Archive email correspondence that forms part of the governance record. Adviser correspondence is the most commonly overlooked category, and often the most revealing in a dispute, because it shows the questions the board asked and the answers it received
• Capture the institutional memory that lives in people's heads. Key decision rationales, informal agreements, context that was never formally documented. Consider a structured handover note from the chair, scheme secretary, and key advisers, written while the memory is fresh, not reconstructed years later under the pressure of a claim

Phase 3: Secure access and continuity (3 to 6 months before wind-up)

The archive needs to be accessible by the right people, long after the current contacts have moved on. "The right people" is itself a question that deserves more thought than it usually receives.

• Define who will have access to the archive after wind-up. This must not depend on a single individual. Named contacts should include at least two people, with a documented succession mechanism for when they, too, move on
• Confirm the retention period. Consider the scheme's specific risk profile: outstanding disputes, data quality concerns, benefit categories with longer limitation periods, GMP equalisation exposure. Six years is the TPR minimum. Ten or more is prudent for most schemes
• Verify that the archive solution is independent of the sponsoring employer's IT infrastructure. This is the question most often answered with a comforting assumption rather than a tested fact. If the sponsor is acquired, restructured, or ceases to exist, will the archive still be accessible?
• Test search and retrieval. Not in the abstract: in practice. Can a specific decision, document, or communication be found quickly by someone who was not involved in the original filing and does not know the naming conventions? If the answer depends on familiarity with the system, the system has failed the test
• Confirm data security standards: ISO 27001 certification or equivalent, encryption at rest and in transit, access controls, and audit logging. The governance record contains sensitive scheme data and personal information. It must be protected to the same standard as the scheme itself, arguably a higher one, since there will be no one monitoring it day-to-day

Phase 4: Complete and close (at wind-up)

• Add the wind-up resolution, final accounts, and all buy-out or transfer documentation to the archive
• Include the final trustee meeting minutes and any post-wind-up correspondence
• Record the formal notification to TPR and HMRC (required within three months of wind-up completing)
• Prepare a "guide to the archive" (a brief document explaining the structure, naming conventions, and key document locations, written for someone encountering the archive for the first time with no prior knowledge of the scheme). This is, in effect, a user manual for the scheme's institutional memory
• Confirm access credentials with all named contacts and test that they can log in and retrieve material. Do this before the wind-up is formally complete, while there is still someone to fix a problem
• If using a service with a defined retention period, confirm the end date and any options for extension. Put the renewal date in someone's calendar (not the scheme's calendar, which will no longer exist)

The mistakes trustees make

Delegating the governance record to the administrator. Scheme administrators handle member data and benefit calculations. The governance record (trustee decisions, investment rationale, risk management evidence) is a different archive entirely. The administrator's systems were not designed for it, their retention policies do not contemplate it, and their obligations after wind-up do not include it. Responsibility for the governance record rests with the trustees, and if they do not take it, no one else will.

Relying on the sponsoring employer. The sponsor's IT department manages the sponsor's data, not the scheme's. Corporate retention policies, system migrations, and acquisitions can all result in governance material being deleted or rendered inaccessible (not through ill intent, but through the ordinary operation of corporate IT governance that does not know or care that a pension scheme's records are in the filing system).

Treating wind-up as the end of the story. Wind-up concludes the scheme's active operations. It does not conclude the trustees' exposure to claims. The governance record is the evidence that duties were discharged, and it needs to be available for as long as that exposure persists. The gap between "the scheme has wound up" and "we no longer need the evidence" is measured in years, sometimes decades.

Underestimating how quickly access degrades. This is the most common and least dramatic of the mistakes. Nothing is deleted. Nothing is destroyed. It simply becomes progressively harder to find, until the practical effort required to retrieve a specific document exceeds the patience of anyone attempting it.

Choosing storage over searchability. A zip folder containing 10,000 files is technically a record. In practice, when a lawyer needs the rationale for a specific investment decision made in Q3 2024, a zip folder is not meaningfully different from an empty room.

What a good post-wind-up archive looks like

Independent. It does not depend on any employer, individual, or third-party system that may not exist in five years. It sits in dedicated, certified infrastructure with guaranteed access for the chosen retention period.

Complete. Every document, decision, and communication that forms part of the governance record is present (not just the final versions, but the context: the papers that informed the decision, the discussion that shaped it, and the actions that followed).

Searchable. Someone encountering the archive for the first time (a lawyer investigating a claim, a former trustee responding to a query) can find what they need in minutes, not days. This means search that reads across the full record and returns sourced answers, not a file browser that requires knowledge of the naming conventions.

Secure. ISO 27001 certified or equivalent. Encrypted. Access-controlled. Audit-logged. The governance record contains sensitive scheme data and personal information; the security standard should not diminish because the scheme is no longer active.

Paid for. The cost is settled before wind-up, as part of the wind-up budget. There is no ongoing subscription to lapse, no invoice to go unpaid, no access to be cut off because nobody renewed. The economics of the archive are resolved while there is still a scheme to resolve them.

How Knowa Archive addresses this

Knowa Archive was built specifically for this problem. It is a dedicated, ISO 27001-certified governance archive for UK pension schemes approaching or completing wind-up.

Schemes already on Knowa transition their full history (every meeting, every document, every decision) seamlessly into the archive. Schemes new to Knowa consolidate records from any source via drag-and-drop upload. Knowa Q reads across the entire archive and returns sourced answers in seconds. Every decision carries a timestamped audit trail. Access is maintained for the chosen retention period with no ongoing subscription.

For a detailed look at how Knowa Archive works, read our launch article or book a demo.

Years of diligence deserve more than a zip folder.