The paperwork behind the certificate.
Anyone can say "certified" and "zero landfill." What a security or procurement team needs is the certificate number, the expiry date and a list of downstream outlets they can call. Ask, and we send all three the same day.
R2v3
The SERI Responsible Recycling standard: data security, downstream due diligence and environmental handling, audited annually.
Certificate number on request
NAID AAA
i-SIGMA certification for information destruction, including unannounced audits of the process and the people who run it.
Certificate number on request
ISO 14001:2015
An environmental management system covering the facility, the fleet and every process in between.
Certificate number on request
DTSC universal waste handler
Registered with California DTSC for batteries, lamps, CRTs and electronic devices under Title 22.
EPA ID on request
DOT hazmat trained
Drivers trained and current for hazardous materials, including lithium battery packaging and marking.
Training records on request
Screened staff
Everyone who handles customer equipment is background-checked, drug-screened and trained on data-handling policy each year.
Policy on request
What your regulator asks for, and what answers it.
Choose the rule you answer to. You'll see what it requires when you dispose of media, and the document from us that satisfies it.
- Applies to
- Healthcare
- Citation
- 45 CFR §164.310(d)(2)(i)–(ii)
- What it requires
- Covered entities must implement policies for the final disposal of ePHI and the media it is stored on, and remove ePHI before media is reused.
- What we give you
- Serialized certificate of destruction; signed business associate agreement; our media disposal policy.
- Applies to
- Financial
- Citation
- 16 CFR Part 314 (Safeguards Rule)
- What it requires
- Financial institutions must securely dispose of customer information and oversee the service providers who handle it.
- What we give you
- Vendor due-diligence pack: certifications, insurance, policies, completed security questionnaire, and certificates per job.
- Applies to
- Any business
- Citation
- 16 CFR Part 682 (Disposal Rule)
- What it requires
- Anyone who holds consumer report information must take reasonable measures to protect it when disposing of it, including when using a vendor.
- What we give you
- Certificate of destruction plus the vendor due-diligence pack, which the rule treats as a reasonable measure.
- Applies to
- California
- Citation
- Cal. Civ. Code §1798.81 & §1798.81.5
- What it requires
- Businesses must destroy customer records containing personal information so they are unreadable, and maintain reasonable security.
- What we give you
- Certificate recording the method per device; destruction dates to match your retention schedule.
- Applies to
- Payments
- Citation
- Requirement 9.4.7 (v4.0)
- What it requires
- Electronic media with cardholder data must be destroyed when no longer needed, so the data cannot be reconstructed.
- What we give you
- Destruction to 2 mm for any media from the cardholder data environment, certified by serial.
- Applies to
- Public companies
- Citation
- Sections 802 & 404
- What it requires
- Records must be retained on schedule and then disposed of in a controlled, documented way.
- What we give you
- Dated certificates you can file against your retention schedule; serial-level reconciliation for the audit trail.
- Applies to
- Everyone
- Citation
- Rev. 1, Guidelines for Media Sanitization
- What it requires
- Defines Clear, Purge and Destroy, and which one is appropriate for each media type and level of confidentiality.
- What we give you
- The method per device named in 800-88 terms on the certificate, with verification of every purge.
A summary for orientation, not legal advice. Your counsel or compliance team decides what your organization needs.
Insurance
Certificates issued to your requirements, naming your entity, landlord or colocation provider as additional insured, usually within one business day.
- Commercial general liability
- Auto liability for the full fleet
- Workers' compensation
- Pollution and environmental liability
- Cyber and professional liability covering data destruction
Security questionnaires
We complete SIG Lite, CAIQ and custom vendor questionnaires, usually within two business days. Our standard vendor pack has everything most reviews ask for:
- Certifications with numbers and expiry dates
- Certificates of insurance
- Data-handling and media disposal policies
- Downstream vendor list with their certifications
- A specimen certificate of destruction
Need our paperwork before you can onboard us?
Say which documents and who they are addressed to. Most go out the same business day.