Full answers — always visible, no clicks required. These are the foundational questions every IT manager, compliance officer, and sustainability lead should be able to answer.
What is ITAD?
IT Asset Disposition (ITAD) is the structured process of retiring, decommissioning, and responsibly disposing of end-of-life IT equipment — including servers, laptops, desktops, networking gear, and storage devices. A proper ITAD program includes certified data destruction (to prevent data breaches), asset inventory and chain-of-custody documentation, value recovery through resale or buyback, and environmentally responsible recycling of materials that cannot be reused. For businesses in regulated industries — healthcare, finance, government, education — ITAD is not optional. It is a compliance requirement under HIPAA, GLBA, FERPA, SOX, and CMMC. EWaste Phoenix provides certified ITAD for businesses throughout the Phoenix metropolitan area.
What is NIST 800-88 compliance?
NIST 800-88 compliance is the highest standard in the data destruction industry, It requires annual unannounced third-party audits of a company's data destruction processes, equipment, employee screening, and security protocols. NIST 800-88 compliant companies must demonstrate compliance with NIST SP 800-88, maintain documented chain-of-custody procedures, and pass surprise audits — not just scheduled ones. For businesses disposing of sensitive data, choosing a NIST 800-88 compliant vendor is the single most important due diligence step. EWaste Phoenix follows NIST 800-88 destruction methods.
What is responsible recycling practices?
Our responsible recycling program is the leading international certification standard for electronics recyclers, administered by Sustainable Electronics Recycling International (SERI). It requires annual third-party audits covering data security, environmental compliance, worker health and safety, downstream vendor accountability, and legal compliance. responsible recyclers must track every device to its final disposition and cannot export e-waste to developing countries. When you choose an responsible recycler, you have independent verification that your electronics are being handled responsibly. EWaste Phoenix is committed to responsible recycling practices.
What is a Certificate of Destruction?
A Certificate of Destruction (COD) is a legal document issued by a certified data destruction provider confirming that specific data-bearing devices have been permanently and irreversibly destroyed. A proper COD includes: the device serial number, the destruction method used (shredding, degaussing, or NIST 800-88 wipe), the date of destruction, the technician ID, and the certification standard followed. CODs are required for HIPAA, GLBA, FERPA, SOX, CMMC, and PCI-DSS compliance audits. EWaste Phoenix issues serialized CODs within 24 hours for every data-bearing device we process — hard drives, SSDs, phones, tablets, copiers, and more.
What is NIST 800-88?
NIST SP 800-88 Rev. 2 is the U.S. National Institute of Standards and Technology's guidelines for media sanitization — the authoritative federal standard for how data should be destroyed on different types of storage media. It defines three levels of sanitization: Clear (software-based overwrite), Purge (cryptographic erase or degaussing), and Destroy (physical shredding). The 2025 revision added specific guidance for NVMe SSDs, self-encrypting drives (SEDs), and flash media. EWaste Phoenix follows NIST 800-88 Rev. 2 for all data destruction, and our technicians are trained and tested on the specific requirements for each media type.
What is data center decommissioning?
Data center decommissioning is the structured process of safely retiring, removing, and disposing of all equipment in a data center or server room — including servers, storage arrays, networking equipment, UPS systems, and cabling. A proper decommissioning project includes: pre-project asset inventory and CMDB reconciliation, certified data destruction for all storage media, chain-of-custody documentation for every asset removed, value recovery assessment for resalable equipment, and environmentally responsible recycling of all remaining materials. EWaste Phoenix manages end-to-end data center decommissioning projects for businesses throughout the Phoenix metro area, with NIST 800-88 compliant data destruction and responsible recycling.
What is the difference between hard drive shredding and wiping?
Hard drive shredding physically destroys the drive — reducing it to metal fragments of 2mm or smaller — making data recovery physically impossible. Hard drive wiping (also called data erasure or sanitization) overwrites the data on the drive using software, following standards like NIST 800-88. Shredding is more absolute but destroys the hardware value. Wiping preserves the drive for reuse but requires verification that the wipe was completed successfully. For most enterprise use cases, a properly verified NIST 800-88 wipe is sufficient. For healthcare, defense, and financial services clients — or any device that cannot be verified — physical shredding is recommended. EWaste Phoenix offers both, with certificates issued for either method.
What is the difference between ITAD and e-waste recycling?
ITAD (IT Asset Disposition) and e-waste recycling are related but distinct services. E-waste recycling focuses on the environmental processing of end-of-life electronics — recovering materials and keeping devices out of landfills. ITAD is a broader enterprise service that includes data security (certified destruction of all data-bearing media), asset management (inventory, chain-of-custody, and documentation), value recovery (buyback and remarketing of resalable equipment), and environmental compliance (responsible recycling). For businesses, ITAD is the appropriate service — it addresses both the data security liability and the environmental obligation. EWaste Phoenix provides both ITAD and e-waste recycling services, with the same certified standards applied to both.
What is chain of custody in ITAD?
Chain of custody in ITAD is the documented, unbroken record of every person who handled a piece of IT equipment from the moment it left your facility to the moment it was destroyed or recycled. A proper chain of custody includes: a signed manifest at pickup, GPS-tracked transport, intake logging at the processing facility, serialized tracking through each processing step, and a final Certificate of Destruction or Recycling tied to each device's serial number. Chain of custody documentation is required for HIPAA, GLBA, SOX, and CMMC compliance audits. EWaste Phoenix maintains serialized chain-of-custody documentation for every device we process.
How much does ITAD cost?
ITAD pricing varies based on volume, device types, required services (data destruction, pickup logistics, reporting), and the complexity of the project. For most Phoenix-area businesses, EWaste Phoenix provides free pickup and free recycling for qualifying volumes — the service is offset by the value recovered from resalable equipment. Data destruction services (shredding, wiping with certificates) are priced per device or per project. Data center decommissioning projects are quoted individually based on scope. Contact EWaste Phoenix at (877) 321-4823 for a free assessment and quote — most businesses are surprised to find that certified ITAD costs less than they expected, and often generates a net credit through value recovery.