Data Security
Our commitment
Every storage device entering our facility is sanitised before any other work begins, whether or not it has already been wiped. We assume nothing about the state of an incoming drive.
Method by drive type
Full overwrite for mechanical drives. Secure erase or cryptographic erase for solid-state. Physical destruction where a drive fails to verify. Every drive is sanitised to NIST SP 800-88 Revision 1.
Verification
Every erase is verified. Any drive failing verification is physically destroyed rather than retried.
Certificates
One per serial number, carrying the method, date, result and operator. A consolidated pack is issued to the donor. We retain each certificate for seven years.
Chain of custody
Units are counted at your premises against the manifest and signed for by both parties, travel sealed, and are counted and signed for again on arrival by a second member of staff. Any discrepancy is reported to you within one working day.
Physical security
All drives are processed at our secured facility in Accra, Ghana, in an access controlled area under supervision. Assets are logged on arrival, tracked by serial number throughout, and kept apart from unprocessed equipment until sanitisation is verified.
Drives we do not wipe
Drives from units graded for parts or rejection are removed and destroyed, not sanitised and resold.
Asset tags and branding
Donor asset tags, engravings and branding are removed before deployment.
What we do not do
We do not sell donated equipment. We do not pass units into the informal repair market. We do not deploy any machine that has not passed both sanitisation and quality assurance.