IT Asset Disposition · Austria & EU
Your retired IT leaves the building audit-proof — and with residual value.
Mari4IT takes on retired laptops, PCs, servers, network gear and smartphones: documented collection, audit-proof data erasure certified to ISO/IEC 15408 (Common Criteria EAL2+) and ADISA, resale with transparent settlement — full documentation included.
- ISO/IEC 15408 · Common Criteria EAL2+
- ADISA certified
- NIST SP 800-88 compliant
- GDPR data processing agreement
- Erasure certificate per serial number
Verified standards
ISO/IEC 15408 · EAL2+ ADISA certified NIST SP 800-88 GDPR & NIS2 ready Circular economyServices
The full lifecycle — from collection to documentation
You choose which building blocks you need. We run them as a single project, with one point of contact and continuous documentation.
Certified data erasure
Erasure per NIST SP 800-88 with an engine certified to ISO/IEC 15408 (Common Criteria EAL2+) and ADISA. Drives that cannot be erased are physically destroyed. Certificate per serial number.
See erasure methodsCollection & logistics
Lockable containers, documented handover, an unbroken chain of custody. Cross-site across Austria, Germany and the EU — alongside your rollout if needed.
See logisticsRemarketing & resale
Technical diagnostics, grading, refurbishing and resale through established B2B channels. You see exactly what each device brought — fixed price or revenue share, your choice.
Check residual valueEmployee purchase
Erased, tested devices as a benefit for your team — with a dedicated shop, price list, invoicing and warranty. No workload for your IT or HR department.
See the programmeRecycling & disposal
Whatever has no second life left goes to material recovery through licensed partner facilities. You receive the disposal and transfer records.
See the recovery pathProcurement & refurbished
New and refurbished business hardware for replacement needs: laptops, workstations, displays, servers and network gear. Buy-back and replacement calculated in one project.
See procurementMetrics
Resilient processes, not promises
Every project ends with a data package you can present in an audit: asset list, erasure certificates, transport records, recovery and disposal evidence, CO₂e figures.
until you receive a binding quote after your enquiry
of storage media with documented erasure or destruction
process steps, each individually logged and handed over
collection across sites in Austria, DACH and the EU
Data security
We erase with Securaze — certified, verified, documented
The critical part of IT asset disposition isn't the transport — it's the proof that no data remains on the device. We use the erasure software from Securaze: its engine is certified to ISO/IEC 15408 (Common Criteria EAL2+) and ADISA, follows NIST SP 800-88, and was independently validated by ATTINGO data recovery.
Erasure is never trusted blindly: every run is verified, the result logged per device and storage medium, and recorded in our asset management. You receive the certificate with serial number, method, timestamp and verification result.
- Erasure of HDD, SSD, NVMe, eMMC as well as iOS and Android devices
- Freeze-lock release, firmware reset and verification pass instead of a plain overwrite
- Physical destruction when a drive cannot be safely erased
- Erasure on your premises when data must not leave the building
Internationally recognised security certification of the erasure engine we use (Common Criteria).
Erasure software certificationProduct testing with forensic attack methods against the claim that data is unrecoverable.
Erasure software certificationWe follow the Clear and Purge procedures from the US media sanitization standard.
Applied erasure methodData processing agreement under Art. 28 GDPR, documented retention periods, register of processing activities.
Contractual basisTransparency note: these certifications apply to the erasure software we use, not to a management system of Mari GmbH. What that means for your audit is explained openly on Security & Compliance.
Process
One project, seven documented steps
From the first conversation to the documentation package. You always know where your devices are and what status they're in.
Assessment & quote
We clarify quantities, device types, locations and security requirements. You receive a binding quote with an erasure concept and residual-value indication.
Containers & packaging
We deliver lockable containers or cartons. On request we handle disassembly and packing on-site.
Documented collection
Handover with a signed protocol. On request, containers can be sealed with numbered tamper seals. The chain of custody begins at your loading dock.
Goods receipt & asset logging
Every device is logged with manufacturer, model, serial number and configuration. Discrepancies against your list are reported.
Erasure & verification
Erasure with the certified Securaze engine, followed by verification. Drives that fail are physically destroyed and logged separately.
Diagnostics, grading & recovery
Technical testing and visual grading decide between remarketing, employee purchase, parts harvesting or recycling.
Settlement & documentation package
You receive the revenue statement, erasure certificates, disposal records and CO₂e evaluation as one package — ready for audit and ESG reporting.
Circular economy
Reuse first, recycling last
Every device given a second life saves a multiple of the emissions its production would have caused. That's why we evaluate reuse before material recovery — never the other way round.
- Reuse rate and avoided CO₂e per project
- Data basis for CSRD and ESG reports
- Metrics evaluable per cost centre or site
Sustainability
ESG figures your reports actually need
Sustainability in IT retirement is measurable: how many devices were reused, how many recovered, how much CO₂e avoided, how much WEEE mass was generated. We deliver these figures per project — not as a rough estimate, but derived from logging every single asset.
For recycling and disposal we work exclusively with licensed partner facilities. Their evidence flows back through us so you have one point of contact and one document trail.
- Reuse, remarketing and recycling rates per project
- CO₂e avoidance on a traceable calculation basis
- Evidence from licensed recovery partners
- Figures as PDF and Excel export for your reporting
Industries
Requirements differ. Our documentation doesn't.
We work to the compliance standards that apply in your sector — and document in a way your audit, DPO and auditors can rely on.
Banking & insurance
Erasure under supervisory requirements, DORA-relevant outsourcing documentation, four-eyes handover, on-site erasure on request.
Public sector
Tender-ready quotes, clear scope of work, audit-court-proof evidence, data protection under national and EU law.
Healthcare
Special categories of personal data under Art. 9 GDPR: stricter erasure concepts, sealed containers, documented chain of custody.
Manufacturing & industry
Control computers, measurement systems and retired production hardware, trade secrets in design data, collection within works traffic.
Leasing & finance
End-of-lease valuation, residual value reports, reconciliation against your asset list, fast feedback on missing devices.
IT service providers & MSPs
ITAD as a white-label module for your client projects: we deliver erasure certificates and revenue statements, you remain the contracting party.
Frequently asked
What enterprise customers ask first
What certifications underpin your data erasure?
We work with audit-proof data erasure, certified to ISO/IEC 15408 (Common Criteria EAL2+) and ADISA. The erasure procedures follow NIST SP 800-88, and their effectiveness was independently validated by the ATTINGO data recovery lab. Every erasure run is verified and documented per serial number — you can pull any serial number in an audit and we produce the matching record.
Does Mari GmbH hold a waste-treatment licence?
No. We are not a licensed waste treatment operator ourselves. For recycling and disposal we work with licensed partner facilities, and we disclose their permits and evidence on request. Our own focus sits earlier in the lifecycle — data erasure, reuse and remarketing — where devices are still products rather than waste.
What does collection cost?
It depends on quantity, device mix and locations. In many cases the residual value of marketable devices covers process and logistics costs, leaving a net return for you. For small quantities or largely worthless devices a cost contribution applies. You always receive a calculation before collection, never a surprise invoice afterwards.
Can data stay on our premises?
If your policy requires it: yes. We erase on-site with our own equipment and staff, and only take devices after erasure is complete. Alternatively we remove and destroy the storage media at the point of handover.
What evidence do we receive?
Handover protocol, asset list with serial numbers, erasure certificate per storage medium with method and timestamp, destruction record for non-erasable media, recovery and disposal evidence, revenue statement, plus CO₂e and reuse evaluation.
How fast can you collect?
After the order is placed we typically schedule collection within five to ten working days, or per your rollout schedule. For special cases such as site closures we align timing and stages in advance.