
Retiring Clinic Laptops Under HIPAA: Hospital ITAD Use Case
How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.
Your customers trust you with their data until the last drive is gone. Coretek 360 removes servers, storage, and network gear rack by rack, destroys every drive's data to NIST 800-88, and recovers the value in the hardware that still has some.
Get a quoteWe survey the floor, remove equipment rack by rack, and sanitize every drive. The serialized report supports your customer contracts and your SOC 2 or ISO 27001 commitments on media disposal.
We survey the floor with you, mapping servers, storage arrays, switches, and PDUs in each rack. The plan covers the power down sequence, the maintenance windows, and the escort rules the work has to fit.
Equipment is powered down, cabled out, and torn down rack by rack. It is then packed, palletized, and loaded into tracked vehicles under documented chain of custody.
Server, storage, and tape media are wiped to NIST 800-88 and verified, or shredded on site or at our facility. No tenant or customer data leaves the floor exposed, and every drive is tied to a certificate by serial number. Shredding is done in house by Coretek 360. It is not yet covered by our R2v3 certificate, and we are actively working to add it.
Servers, storage arrays, and switches with resale value are tested, refurbished, and resold through our sales channels, with the value returned to you. Everything else goes to R2v3 certified downstream processors, as a RIOS Certified Recycler.
A final report accounts for every serial number from every rack, with a certificate of data destruction per drive. Your operations, security, and finance teams get the evidence customers, auditors, and asset write-offs require.
Direct answers on the rules you answer to, the hardware we take, and the records you keep.
SOC 2 and ISO 27001 commitments on media disposal, along with your customer contracts, are yours to meet as the data center operator. Coretek 360 supports them by sanitizing every drive to NIST 800-88 and tying it to a certificate of data destruction by serial number, so every drive that held tenant or customer data has its own record.
Coretek 360 removes data center equipment rack by rack, including servers, storage arrays, switches, and more. Equipment is powered down, cabled out, packed, and palletized, then loaded into tracked vehicles under documented chain of custody. Hardware with resale value is tested, refurbished, and resold, with the value returned to you.
Customers and auditors can be shown two documents from Coretek 360 for every data center project. A certificate of data destruction per serial number records the drive serial number, the NIST 800-88 method used, and the date. A serialized asset report records custody, make and model, sanitization method, and final disposition, resale or recycling, for every asset from every rack.
Data center teardowns are planned around your maintenance windows and access rules. Coretek 360 surveys the floor with you first and maps the equipment in each rack. The plan then sets the power down sequence, the maintenance windows, and the escort rules the work has to fit, before any equipment is powered down or removed.
Yes. When customer contracts say media cannot leave the facility intact, drives are shredded on site, each serial number logged first for its certificate, before the racks are cabled out. Shredding is performed in house by Coretek 360 and is not yet within our R2v3 certificate scope, and we are working to add it.
Yes. Servers, storage arrays, and switches with life left in them are tested, refurbished, and resold through our sales channels after their drives are sanitized to NIST 800-88, and the value returned is itemized in your report. Equipment past reuse goes to R2v3 certified downstream processors.
Our team does. Coretek 360 powers down in the agreed sequence, cables out, packs, and palletizes rack by rack, then moves the equipment in tracked vehicles under documented chain of custody. Your facility staff manage access and the maintenance window; the teardown is handled for them.
Yes. Data center migration is a Coretek 360 service alongside decommissioning: the hardware that stays is staged and moved, the hardware that is retired is sanitized, resold, or recycled, and both are planned in one sequence around your maintenance window with one point of contact.
Last reviewed on .
Coretek 360 will plan the removal around your maintenance window, recover the value in the hardware, and leave your auditors nothing to chase.

How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.

Coretek was founded in 2001, R2 certified in 2013 and renamed Coretek 360 in 2026. What changed in IT asset disposition in 25 years, and why the name changed.

How a bank retired teller workstations and branch servers with every asset documented from dock to disposition, and value returned, before its GLBA exam.

Six steps to recover resale value from retired IT assets: inventory, NIST 800-88 sanitization, valuation, R2v3 partner selection, logistics and settlement.

What NIST 800-88 Rev. 2 requires: clear, purge and destroy defined, what changed in 2025, SSD and cryptographic erase rules, what a certificate must record.