Secure Media Destruction & ITAD

Retire devices without retiring your liability.

When laptops, desktops, hard drives and servers leave your office, the data on them is still yours to protect. IGNYTE sanitizes every drive in-house to NIST SP 800-88, issues a signed Certificate of Data Erasure for each one, and routes the hardware to an R2v3-certified Toronto recycler for zero-landfill disposal — with chain of custody documented from pickup to final disposition.

What you get, every time

✓
Serial-level inventoryEvery device and drive logged and signed over at pickup.
✓
NIST SP 800-88 Rev. 1 erasurePurge or Clear, performed by IGNYTE technicians, verified per drive.
✓
Signed, tamper-evident certificateCryptographic fingerprint; private link; kept 7 years.
✓
R2v3 zero-landfill recyclingFully certified downstream partner in Toronto. No export, no landfill.
✓
Recorded on your client profileRetired assets and certificates visible in your portal.

Laptops, desktops, hard disks and servers

One documented process for every type of storage media your business owns.

💻

Laptops

Windows, Mac and Chromebook fleets. Internal SSD/NVMe sanitized with Cryptographic Erase or NVMe Sanitize; device removed from Intune, Entra ID and Apple Business Manager; battery and chassis to R2v3 recycling.

🖥

Desktops & workstations

SATA and NVMe drives pulled, serialized and sanitized individually. Multiple drives per machine are each recorded on the certificate. Chassis, PSU and boards recovered as material.

💾

Hard disks & SSDs

Loose HDDs, SSDs, external drives, USB media and backup tapes. HDDs receive ATA Secure Erase or verified overwrite; SSDs receive Cryptographic Erase. Failed drives are flagged for physical destruction.

🖱

Servers & storage

Rack and tower servers, SAN/NAS and storage arrays. RAID members sanitized drive by drive; BMC, iDRAC and iLO reset; hypervisor and backup jobs decommissioned before the hardware leaves the rack.

How device retirement works

Five documented steps. Each one produces a record that ends up on your certificate.

1

Inventory & chain of custody

On site or at pickup, every device and drive is logged by type, make, model, serial number and asset tag. Media is sealed in tamper-evident bags or locked totes and signed over to IGNYTE.

  • Two-signature custody record (your representative and our technician)
  • Photographs of serials where legible
  • Legal holds and retention requirements confirmed before anything is erased
Output: signed custody record and asset inventory
2

Decommission

Devices are retired from the systems that still trust them, so nothing keeps syncing to hardware you no longer own and every licence is reclaimed.

  • Microsoft 365, Intune and Entra ID: wipe, retire and delete the device object
  • Active Directory computer accounts, Apple Business Manager, MDM
  • Backup jobs, monitoring agents, VPN certificates and BitLocker recovery keys
Output: decommissioning checklist per device
3

In-house NIST SP 800-88 erasure

Sanitization is performed by IGNYTE technicians in our own facility, never subcontracted. The method is chosen per drive type, following NIST SP 800-88 Rev. 1 Clear and Purge guidelines.

  • Purge: Cryptographic Erase (SED / SSD), ATA Secure Erase (HDD), NVMe Sanitize
  • Clear: verified overwrite where Purge is unsupported
  • Drives that fail or cannot complete sanitization are quarantined and flagged for physical destruction
Output: method and result recorded against each serial
4

Verify & certify

Each sanitized drive is read-back verified. Results are compiled into a Certificate of Data Erasure & Responsible Disposition, signed by the technician and sealed with a SHA-256 fingerprint so any later alteration is detectable.

  • Private link emailed to you; print or save as PDF
  • Every asset recorded on your client profile and visible in the client portal
  • Certificate retained by IGNYTE for seven years
Output: signed, tamper-evident certificate
5

R2v3-certified physical recycling

Sanitized drives, chassis, boards and scrap are transferred to our vetted downstream partner: a fully R2v3-certified electronics recycler in Toronto. Materials are recovered responsibly with a zero-landfill guarantee and no export of e-waste.

  • R2v3 (Responsible Recycling) is the leading international standard for electronics recyclers
  • Transfer date and partner recorded as the final disposition on your certificate
  • Working equipment can be redeployed or donated at your request instead
Output: disposition recorded; lifecycle closed

Certificate of Data Erasure & Responsible Disposition

Retiring equipment is a privacy event. Ontario organizations handling personal or health information must safeguard it through disposal (PIPEDA Principle 4.7; PHIPA s. 13). The certificate is the evidence your auditor, regulator or cyber-insurer will ask for, and it is issued for every job.

  • Unique certificate number and SHA-256 fingerprint
  • Your company, contact and site address
  • Every asset: type, make, model, drive serial, capacity
  • NIST SP 800-88 method applied to each drive (Purge / Clear)
  • Statement that sanitization was performed in-house by IGNYTE
  • R2v3-certified, zero-landfill recycling disposition
  • Technician name, signature and date

Existing clients: retired assets are listed under Devices → Retired Devices in your client portal, with a link to each certificate.

Certificate No. IGY-CMD-2026-0001 · Sample Certificate of Data Erasure & Responsible Disposition
Client: Example Law LLP · Date: May 29, 2026 · Standard: NIST SP 800-88 Rev. 1
AssetSerialMethod
Laptop · Dell Latitude 55407XK2Q93Purge: NVMe Sanitize
Desktop · HP EliteDesk 800 G6MXL1234ABCPurge: Cryptographic Erase
Server drive · Seagate Exos 4TBZC1A2B3CPurge: ATA Secure Erase

IGNYTE Consulting certifies that the media listed above was sanitized in-house using the NIST SP 800-88 Purge/Clear method recorded for each item and verified afterwards.

Physical hardware transferred to an R2v3-certified downstream partner for responsible, zero-landfill physical recycling.
Signed: A. Sam, IGNYTE Consulting · 135 Village Green Sq., Toronto, ON · Fingerprint A480 C116 E2D3 4C7D …

Media destruction questions we get asked

What is the difference between wiping a drive and destroying it?

Wiping (NIST SP 800-88 Clear or Purge) removes the data logically so it cannot be recovered with laboratory techniques, and leaves the drive intact for recycling. Physical destruction (shredding, degaussing) removes the data by destroying the medium. IGNYTE wipes in-house as the default because it is verifiable per serial and far better for the environment; drives that fail or cannot be sanitized are flagged for physical destruction instead.

Is a NIST 800-88 Purge enough for PIPEDA or PHIPA?

PIPEDA (Principle 4.7) and PHIPA (s. 13) require personal and health information to be protected through disposal and destroyed securely, without prescribing a single method. NIST SP 800-88 Rev. 1 is the standard regulators, auditors and cyber-insurers recognize. What they ask for is evidence: the serial-level inventory, the method applied to each drive, verification, and a signed certificate. That is exactly what our certificate records.

What happens to the hardware after the data is erased?

Chassis, boards, drives and scrap are transferred to our vetted downstream partner, an R2v3-certified electronics recycler in Toronto, for zero-landfill materials recovery. No e-waste is exported. The transfer is recorded as the final disposition on your Certificate of Data Erasure & Responsible Disposition.

How do I get the certificate, and where is it kept?

Once every drive is verified, your technician signs the certificate and you receive a private link by email. You can print it or save it as PDF. Every retired asset is also recorded on your client profile, so you (and your auditor) can pull the history from the client portal at any time. IGNYTE retains certificates for seven years.

Can you handle servers and storage arrays, not just laptops?

Yes. Servers, SAN/NAS units and storage arrays are processed drive by drive, with RAID members individually serialized and sanitized. Hot-swap bays and BMC/iDRAC/iLO modules are reset as part of decommissioning.

What does device retirement cost?

Pricing is per drive for erasure and per pallet or per unit for pickup and recycling, with a minimum call-out. Existing managed-services clients receive preferential rates and can bundle retirement into their refresh cycle. Request a pickup and we will quote the exact count.

Schedule a device retirement pickup

Tell us roughly how many laptops, desktops, drives or servers you have and where they are. We will confirm a pickup window, bring the custody paperwork, and you will have signed certificates within days of collection.

Request a Pickup →

Or email support@ignyteconsulting.com with your asset count.