IronbayAsset Recovery

The questions we actually get asked.

Grouped the way they usually come up: security first, then logistics, then money.

Data security
How do we know our data is actually gone?
Every data-bearing device is either purged to NIST SP 800-88 Rev. 1 and then verified, or physically destroyed. Verification is a separate read-back of the media after the wipe, not a trust-the-software step. Anything that fails verification is destroyed. The certificate lists each device by serial with the method and result, so you can reconcile it against your own asset register.
Can we watch the destruction?
Yes, and we would rather you did. Witnessed destruction is booked like any other appointment, at our facility or at your dock with the mobile shredder. The witness signs the certificate with us.
Can the drives stay on our premises?
Yes. The mobile shredder comes to your loading dock, and drives are destroyed under your camera with your staff present. Nothing data-bearing crosses your property line intact, and the certificate is issued before we leave.
What about SSDs? Is shredding enough?
For SSDs and NVMe the controller and the flash chips are what matter. We use cryptographic erase or a verified sanitize command where the device supports it, and for destruction we reduce the media to a 2 mm particle size, which destroys the individual flash chips rather than just the board.
Process & logistics
Is there a minimum?
For a scheduled collection, around 20 devices, or anything with drives in it. Below that, you can drop equipment at our Oakland facility during opening hours, with the same certificate.
How quickly can you collect?
Within the core Bay Area, collections are usually scheduled inside 48 hours of a confirmed quote. Data center decommissions are planned after a site walk, typically one to three weeks out depending on the size of the hall.
How long until we get the certificate?
Usually within five business days of collection. The settlement statement for anything remarketed follows once those devices have sold, normally within 30 days.
Will you sign our vendor agreement, NDA or BAA?
Yes, routinely. Send them with your insurance requirements and security questionnaire. We normally turn all of it around within two business days.
Value & pricing
Do we get paid for our old equipment?
Often, yes. Devices with a resale market are remarketed after sanitization and the proceeds are returned to you, itemized by serial. On newer equipment that value usually more than covers the service. The recovery estimator gives a first number in about a minute.
What do you charge for?
Destruction of drives you want destroyed rather than wiped, on-site shredding, and collections below the minimum. Pickup, sanitization, certificates and recycling are otherwise included and offset against resale value. You get one statement showing both sides.
Is there a cost for monitors, printers or CRTs?
Flat panels and most printers are recycled at no charge. CRTs and some refrigerant-bearing equipment cost money to handle responsibly, and we will say so on the quote rather than bury it in a fee.
Compliance
Which regulations does your certificate satisfy?
The certificate documents media disposal as required by HIPAA, the GLBA Safeguards Rule, the FACTA Disposal Rule, CCPA/CPRA and PCI DSS, and it records the NIST SP 800-88 method per device. The regulation mapper shows what each one asks for and which document answers it.
Where do the materials end up?
Nothing goes to landfill. Every downstream outlet is on a list we will send you, with their certifications, and focus materials such as circuit boards, batteries and CRT glass are tracked to final processing, not just the next broker.

Still not answered?

Call and you will reach someone who runs jobs, not a call center.