IronbayAsset Recovery

Financial services

Examiners ask how customer data is disposed of, and "our recycler handles it" is not an answer. The vendor file, the certificates and the chain of custody are.

What is different here

Vendor due diligence

The GLBA Safeguards Rule puts vendor oversight on you. We supply insurance, certifications, policies and a completed questionnaire for the vendor file.

Branch networks

Forty branches, forty closets of old equipment. We run a route and consolidate every site onto one certificate pack and one invoice.

Witnessed destruction

Your information security officer can watch the shred, on-site or at our facility, and sign the certificate alongside us.

Regulations we document against
GLBA Safeguards RuleFACTA Disposal RuleSOX retentionPCI DSS 9.4.7

Most financial customers choose destroy-only for anything that held customer data and remarket the rest. Certificates are issued per site so each branch has its own record.

See what each regulation asks for
What we typically collect
  • Branch PCs & teller terminals
  • Servers & storage
  • Network & security appliances
  • Card readers & PIN pads
  • Loose drives & tapes
  • Phones
Chain of custody

The same six stations, every job.

01

Seal

Every bin, cage or pallet is sealed at your dock with a numbered tag. The seal number goes on the manifest you sign.

02

Transport

Company-owned, GPS-tracked vehicles and our own drivers. No freight brokers on data-bearing loads, ever.

03

Receive

Seals checked against the manifest, then every device scanned under camera: make, model, serial, asset tag.

04

Sanitize

Purge to NIST SP 800-88 and verify, or destroy. Anything that fails verification is destroyed.

05

Remarket

Devices that pass are graded, tested and sold. Proceeds come back to you, itemized by serial.

06

Certify

A certificate listing every serial, the method and the date. Recycling certificates for everything else.

Retiring equipment in financial services?

Tell us what is coming out and who needs the paperwork. We will match the process to your regulator.