Questions & answers
The questions enterprise customers ask before signing
Concrete answers on certification, erasure methods, evidence, cost, timing and data protection. If your question isn't here, we'll answer it in writing — even when the answer is inconvenient.
Certification
Which standards is your data erasure certified to?
Audit-proof data erasure, certified to ISO/IEC 15408 (Common Criteria EAL2+) and ADISA. Erasure procedures follow NIST SP 800-88, and effectiveness was independently validated by the ATTINGO data recovery lab. Every run is verified and logged per serial number.
What does EAL2+ mean in practice?
ISO/IEC 15408 (Common Criteria) is the internationally recognised framework for security certification of IT products. EAL2+ means the implementation was structurally reviewed and methodically tested by an independent body — not just claimed by the vendor.
Data erasure
Which storage media can you erase?
HDD (SATA, SAS), SSD, NVMe, eMMC and UFS in mobile devices, and media in servers and RAID arrays. Arrays are disbanded and each drive handled individually.
Can you erase on our premises?
Yes. If your policy requires data to stay in the building, we bring erasure stations and staff, erase in your space, and only then take devices — or we remove and destroy the media at handover.
What happens to defective media?
They're separated, physically destroyed, and logged individually by serial number with their own destruction record.
Documentation
What documents do we receive after the project?
Handover protocol, full asset list with serial numbers, erasure certificate per medium, destruction record for non-erasable media, diagnostics and grading report, recovery and disposal evidence, revenue statement, plus reuse rate and CO₂e evaluation.
Can we audit your facility?
Yes, explicitly. You can review documentation upfront, visit the facility, and witness erasure of your own devices.
Cost & return
What does an ITAD project cost?
Depends on quantity, device mix, age and locations. For marketable hardware, residual value typically covers process costs and leaves a return. For old or defective stock, a cost contribution applies. You always get a calculation before collection.
Which settlement models exist?
Fixed-price buy-out, revenue share, or fee-for-service with proceeds offset. All three include the full documentation package.
Legal & data protection
What contractual basis do you work on?
A data processing agreement under Art. 28 GDPR with documented instructions, named sub-processors and a description of technical and organisational measures. We sign an NDA before the initial assessment on request.
How fast can you collect?
Typically within five to ten working days after the order, or per your rollout schedule.
Your question wasn't here?
Send it to us — even the difficult ones. We answer in writing, and with a clear no if that's the honest answer.
Ask a question