Data Destruction & Hardware Recycling

Data destruction means making the data on drives and storage media permanently unrecoverable. Deleted files are recoverable and formatted drives still hold data, so we destroy drives physically, by shredding and degaussing, and destroy whole servers when the hardware itself must go. Software wiping and cryptographic erasure are performed by a licensed contractor. Every item is documented by serial number.

Which data destruction method should you use?

Match the method to the media type, your security requirements and whether the hardware has resale value. Physical shredding reduces drives to fragments smaller than a fingernail. It is the most secure option and the only method that works equally well on HDDs, SSDs and flash media. Degaussing uses a powerful magnetic field to scramble data on traditional hard drives. It is fast and effective on HDDs, but has no effect on solid-state storage, so we use it as a pre-shred step for high-security HDD destruction. Cryptographic erasure destroys the keys on self-encrypting drives, leaving the data unreadable and the hardware intact for resale, but it only works on properly configured SEDs. Software wiping overwrites every sector and preserves hardware value. Both of the last two are performed by a licensed contractor.

Method	Works on	Hardware reusable	Performed by
Shredding	HDD, SSD, flash, tape	No	DataTech
Degaussing	HDD, tape	No	DataTech
Crypto erase	Configured SEDs	Yes	Licensed contractor
Software wipe	HDD, SSD	Yes	Licensed contractor

Does physical destruction meet NIST SP 800-88?

Yes. NIST SP 800-88, the federal guideline for clearing, purging and destroying media, treats physical destruction as the strongest outcome: the media cannot be used again and the data cannot be recovered with any known technique. Shredding meets that standard for every media type we handle. Degaussing counts as a purge method for magnetic media, not destruction, which is why we pair it with shredding when an HDD must be both scrambled and destroyed. Where you want to keep the hardware, software wiping or cryptographic erasure is performed by a licensed contractor whose process follows NIST SP 800-88 and produces a verification report showing the wipe completed. That report, like our certificate of destruction, lists each drive by serial number. Many regulations point back to this guideline when they require secure disposal, so a NIST-aligned record is what auditors usually expect to see. Our NIST 800-88 data destruction guide explains the guideline in plain language, and our comparison of degaussing, shredding and crypto erase goes method by method.

What happens when the whole server needs to be destroyed?

When the hardware itself has to go, we apply the same rigor we apply to drives. Full server shredding reduces entire systems to raw material, which suits equipment that held highly sensitive data or that your policy says must not re-enter the market. For situations that need selective destruction, we dismantle servers and destroy specific components, such as motherboards, memory modules and processors, while separating recyclable metals and plastics. You decide what gets destroyed and what gets recycled. We carry out the plan and document every step. Destroyed material and anything that cannot be reused goes to certified recyclers, the approach the EPA recommends for used electronics, with downstream records for your files. Batteries, coolants and other hazardous parts are separated first and handled on their own path, as covered in our article on certified recycling of hazardous materials. The same chain of custody that covers drives covers whole servers.

What documentation do you receive?

Every destroyed item gets a serial-number-level record: what it was, the destruction method, the date, who witnessed it, and the certificate of destruction that closes it out. Where a licensed contractor wiped or crypto-erased a drive, the contractor’s verification report is attached to the same record. Media arrives at destruction under seal and on a chain-of-custody record, so the serial numbers on the certificate match the ones that left your site. If you want to witness destruction yourself, we schedule it in advance and note it on the certificate. Our article on certificate of destruction requirements covers what a complete certificate should include. Keep the certificates with your asset register. When an auditor asks how a retired drive was handled, the answer is one serial number lookup away, from the moment it left the rack to the moment it no longer existed.