Legal

Data Sanitization

Your data ends at our bench. Every storage device we take in is sanitized to NIST 800-88 before it goes anywhere else.

Last updated · July 2026 · Draft pending counsel review

The standard

Sanitization follows the NIST SP 800-88 guidelines for media sanitization. The method is matched to the media type — Clear or Purge for devices that will re-enter service, Destroy for anything that can't be verifiably sanitized.

The process

  • Intake. Every device is serial-logged on receipt and held in secure staging.
  • Sanitization. The NIST-appropriate method runs on every device — no sampling, no exceptions.
  • Verification. Sanitization is verified before the device moves on.
  • Test & grade. Only then does hardware enter testing and re-inventory.

Certificates

Per-device certificates of sanitization are available on request — serial number, method, date, and verifying operator. Ask the desk when you start a buyback and they'll be part of the paperwork.

Chain of custody

Devices are logged from dock to bench. Until sanitization is verified, storage media doesn't leave secure staging, full stop.

Failed or unsanitizable media

Media that fails sanitization or can't be verified is physically destroyed, and the destruction is documented on the same per-device record.

Compliance posture

Our processes are NIST-aligned; additional certifications are in progress. If your compliance team has questions or needs documentation for an audit, put them directly in touch with the desk via the contact page.