Data Destruction Policy
Last Updated: 7/22/2024
1. Our Commitment to Data Security
EcoCycle Hub understands that data security is the highest priority for our clients. We are committed to the complete and permanent destruction of all data on retired IT assets. This policy outlines our rigorous procedures for data sanitization and physical destruction, ensuring your sensitive information is handled with absolute integrity and confidentiality.
2. Chain-of-Custody Protocol
A secure process begins with a documented chain-of-custody. Our protocol includes:
- Secure Transport: All assets are transported from your location in secure, GPS-tracked vehicles by uniformed personnel.
- Asset Tagging & Logging: Upon arrival at our facility, every data-bearing device is inventoried, assigned a unique serial number, and logged in our tracking system.
- Secure Quarantine: Devices are held in a locked, access-controlled area of our facility, accessible only to authorized data destruction technicians.
- Reconciliation: A final reconciliation report is generated to ensure every asset logged at pickup has been processed for destruction.
3. Data Sanitization and Wiping (Reuse)
For devices that may be refurbished and reused, we perform a thorough data sanitization process that meets or exceeds industry standards.
- Standard Followed: Our primary data wiping standard is NIST Special Publication 800-88, "Guidelines for Media Sanitization."
- Overwrite Process: We use certified software to perform a multi-pass data overwrite on all sectors of the hard drive or solid-state drive (SSD), rendering the original data completely irrecoverable.
- Verification: After the wiping process, a random sector-level verification is performed to guarantee the sanitization was successful.
4. Physical Destruction (Recycling)
For devices that are end-of-life or when requested by the client, we perform complete physical destruction.
- Hard Drive Shredding: We use an industrial-grade shredder to physically destroy hard drives, SSDs, backup tapes, and other media into small, irrecoverable fragments. This process adheres to the DoD 5220.22-M standard for physical destruction.
- On-Site Services: For maximum security and peace of mind, we offer on-site hard drive shredding at your business location.
5. Certification and Reporting
Upon completion of the data destruction process, EcoCycle Hub provides a formal Certificate of Data Destruction. This legally-binding document includes:
- A unique serial number for the certificate.
- A list of the serialized assets that were destroyed.
- The method of destruction used (e.g., NIST 800-88 Wipe, Physical Shred).
- The date of destruction.
- An authorized signature from EcoCycle Hub.