How do we destroy your data securely?
We use different data destruction methods depending on your device, backed by NCSC-approved standards, accreditations and certificates.
Free collections when you recycle at least 10 laptops, PCs & servers (any combination). It’s also free to recycle almost all waste IT with us.
How do we destroy your data?
Key takeaways
Key Takeaways
- Data destruction methods ensure that sensitive information on storage media cannot be retrieved or reconstructed.
- We prioritise data wiping with NCSC-approved software for device reuse, followed by degaussing for magnetic media, and shredding for irretrievable devices.
- Our processes are backed by various accreditations, including ICO registration and NCSC-approved technologies.
- We provide a Duty of Care Waste Transfer Note and a Certificate of Destruction for every job, specifying the methods and dates used.
- Our methods comply with government requirements, making them suitable for public sector and regulated procurement.
Data sanitisation is the process of treating data on storage media so it can’t be retrieved or reconstructed. It covers everything from a simple overwrite to complete physical destruction, and which one applies depends on the device, its condition and how sensitive the data on it is.
Our approach follows the principles set out in NCSC guidance on secure sanitisation and disposal of storage media, the benchmark for secure data sanitisation in the UK. This applies across both our standard and enhanced service levels, whichever method below is used for a given device.
Data Wiping
Our preferred method wherever reuse is possible. We use NCSC-approved erasure software to overwrite the entire accessible memory space, so the original data can never be recovered, but the device itself can be used again. This is the option that supports refurbishment and reuse rather than scrapping, and it’s central to how we put circular economy principles into practice.
Degaussing
Used on magnetic media, such as hard disk drives and tapes, where software-based erasure isn’t suitable. This destroys data by eliminating the magnetic field on the device. It doesn’t work on solid-state drives or flash-based media, and it renders the device unusable, so it’s a less sustainable option than wiping.
IT Asset shredding
IT asset shredding. Physical destruction, breaking devices into fragments no larger than 6mm, the same benchmark set out in NCSC guidance. This is used when a drive can’t be wiped or degaussed, and completely destroys the platters, mechanisms and electronic components. Where possible, data is still erased before shredding, as an added layer of assurance.
Every drive we collect, including USB drives, hard drives, SSDs and removable media such as CDs, tapes and floppy disks, goes through one of these processes. Where a device can be wiped rather than destroyed, we prioritise that route, since it’s the better outcome for the circular economy as well as for cost.
See our hard drive and media destruction service for more on how this applies to specific device types.
What accreditations back our data destruction process?
Our data destruction processes are backed by:
- ICO registration for data protection (ZB782110)
- Environment Agency Waste Carriers Registration (CBDU563597)
- Waste exemptions covering secure storage and the repair or refurbishment of WEEE
- NCSC-approved data erasure software and CPNI-approved shredding technology
- Membership of TechUK and the Federation of Small Businesses
- Full insurance, including employers’ liability, public liability, products liability and professional liability
NCSC also runs a Sanitisation Assurance (CAS-S) scheme for providers working with government customers, a useful reference point if you’re comparing sanitisation providers against a recognised standard.
Read more on our accreditations and compliance page.
What evidence of data destruction will I receive?
For data security specifically, every job comes with the following:
Every job comes with a Duty of Care Waste Transfer Note, signed at collection and emailed to you straight away, and a Certificate of Destruction once your equipment has been processed, usually within 48 to 72 hours. For the pricing difference between our standard and enhanced certification, see data security.
What matters here is what the certificate actually records: the method used for each device, the date of destruction, and, for enhanced jobs, an individual wiping report per drive. That level of detail is what gives you evidence you can show to auditors, clients or regulators, not just a general assurance that the job was done. For more on how this works specifically for hard drives, see our guide to hard drive destruction certificates.
These sit alongside the other certificates we supply, including a Carbon Offset Certificate detailing the carbon emitted and offset across transport and processing for your job. See examples of our certificates for what each of these looks like.
To discuss data destruction methods of your old IT assets get in touch, or read more about data security and how we handle your equipment before it reaches this stage.
Here’s why businesses trust us to recycle their IT
Secure, carbon-negative IT recycling with free qualifying collections, data destruction and certificates always provided.
Free qualifying collections
Free for 10+ qualifying laptops, PCs or servers.
Secure data destruction
Sensitive data handled properly.
Certificates provided
Documentation for your records.
Carbon-negative recycling
Responsible, reuse-first processing.
Frequently asked questions
Data wiping overwrites a drive with NCSC-approved erasure software so the device can be reused. Degaussing destroys the magnetic field on the drive so it can no longer be used at all. We only degauss where wiping isn’t a suitable option.
No. NCSC-approved erasure software overwrites the drive so completely that the original data can’t be recovered, even though the physical device remains intact and usable.
Yes. Our Environment Agency Waste Carriers Registration and ICO registration numbers are published on our accreditations and compliance page, and available on request.
It goes for physical shredding, which breaks the device into fragments no larger than 6mm, destroying the platters, mechanisms and electronic components completely.
Yes. Our processes are approved by the National Cyber Security Centre (NCSC), which is increasingly required for public sector and other regulated procurement.
Yes. Even if a device won’t power on, we can still destroy any data held on its storage media, usually via degaussing or shredding.