Loading
For banks, NBFCs & regulated enterprises
Retirement is a controls question before it is a logistics one.
In a regulated organisation, the question is never simply whether hardware was disposed of. It is whether internal audit, the information security function and procurement can each evidence that it was done under control. This page is about producing that evidence.
Start here
Send your vendor questionnaire and NDA with the scope. We will complete them before the first conversation.
Request asset recovery
Our position
Three functions have to sign off, and they want different things
Information security wants to know where every data-bearing device went and under what instruction. Internal audit wants a chain of custody that survives scrutiny after the fact. Procurement wants a commercial basis that can be defended — a valuation, a fee or an offset — with the vendor engaged under the organisation's onboarding process.
A disposal that satisfies one of the three and not the others is a disposal that gets re-examined. So our documentation is built to be read by all three: the media register for security, the reconciled handover and disposition records for audit, and the scope document with its commercial basis for procurement.
We also expect to be onboarded properly. Send the vendor questionnaire and NDA with your first message; we would rather complete them early than be the exception in your process.
Situations
You will probably recognise one of these.
Branch estate refresh
Hundreds of branches, each with a small server, a few desktops, a printer and a router, retired in waves as infrastructure centralises.
Core infrastructure replacement
Servers, storage and security appliances in a primary or DR data centre reaching end of support, with regulatory attention on where the data-bearing media goes.
Self-service hardware
ATMs, kiosks and self-service terminals — devices that contain storage and are frequently overlooked in an IT-led disposal scope.
Audit finding remediation
A previous disposal that could not be evidenced, and a mandate that the next one must be.
Our approach
What we do differently for you.
Media register reconciled to handover
Every data-bearing unit itemised at scoping and handover, handled to your written policy, and reconciled on receipt. Where your standard is one we cannot meet, we say so before you commit.
Chain of custody that reads later
Scope, handover, receipt, assessment and disposition records that a reviewer who was not present can follow end to end.
Commercial basis agreed in writing
Valuation, fee or offset stated in the scope document before collection, with the assessment outcome reported against it afterwards.
Onboarding and NDA welcomed
Vendor questionnaires, NDAs and site induction requirements completed up front. We expect to be scrutinised.
Process
Every engagement runs the same six stages.
- Step 01
Asset Discovery
Establish exactly what is being retired, and where it sits.
- Step 02
Collection & Logistics
Move the hardware off your floor without disrupting what stays.
- Step 03
Asset Assessment
Determine what still has working life, and what does not.
- Step 04
Data Security & Processing
Media handled the way you instruct, recorded line by line.
- Step 05
Reuse & Recovery
Keep working hardware working before it becomes material.
- Step 06
Responsible Recycling
Close out end-of-life material through accountable channels.
FAQ
Questions we are asked before the first call
- 01Our policy requires media destruction to a specific standard. Can you comply?
- We will confirm in writing whether we can meet the named standard before any commitment. Where we cannot, the recommended route is for media to be destroyed under your own control before handover, with the hardware collected without drives — and the record showing exactly that.
- 02Can you support internal audit with documentation after the fact?
- Yes. Every engagement produces a document set designed for exactly that. If audit asks a question the records do not answer, we will tell you what we can and cannot evidence.
- 03Do you handle ATMs and self-service terminals?
- They can be included in scope. They contain storage media and are treated as data-bearing units, with the same itemised handling as a server or laptop.
Need a disposal your auditors will accept?
Send your vendor questionnaire and NDA with the scope. We will complete them before the first conversation.