This page summarizes remarks of our standard approach; specific project requirements are documented in individual scopes of work or service agreements.

Standards & Frameworks

Our processes are aligned with various industry standard guidelines for media sanitization and data destruction compliance. Our Standard Operating Procedure Framework and Data Destruction Policy is centered around the NIST Special Publication 800: NIST SP 800-88r2 Guidelines for Media Sanitization.

Sanitization Methods

Sanitization methods and techniques depend on device type, customer requirements, and media sensitivity.

All media sanitization methods, techniques, verification methods, and documentation methods align with various publications and guidelines.

Full Chain of Custody

Full Chain of Custody pertains to the concept of an organization retaining custody of an asset that may contain data and aligning with a framework that keeps the asset in custody of the asset until the data has been destroyed or sanitized aligned with the standards or specific project agreements documented in individual scopes of work or service agreements.

Customer Responsibilities

Customers remain responsible for identifying systems and media that contain sensitive data, specifying applicable regulatory requirements, and reviewing the scope of services to confirm that it meets their internal policies.

This summary is provided for convenience and does not replace detailed contractual terms or technical statements of work.

References: Chandramouli R, Hibbard EA (2025) Guidelines for Media Sanitization. (National Institute of Standards and Technology, Gaithersburg, MD), NIST Special Publication (SP) NIST SP 800-88r2. https://doi.org/10.6028/NIST.SP.800-88r2