Retiring Clinic Laptops Under HIPAA: Hospital ITAD Use Case
How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.
Financial services IT asset disposition,ready for your next exam.
Examiners ask where retired hardware went. Coretek 360 retires teller workstations, branch servers, and laptops that held customer PII, account data, and financial records, returns the value in them, and has the answer ready for your examiners.
Get a quoteITAD for banks and credit unions, built for GLBA, FFIEC, and SOX.
PII, customer account data, and financial records are destroyed to NIST 800-88, and every asset is reconciled to your fixed asset register. Your examiners get the disposal and vendor oversight records they look for.
Branch & Asset Inventory
We inventory retired hardware across branches, back offices, and data centers: teller workstations, ATMs and check scanners, laptops, core banking servers, and storage. Each asset is matched to your fixed asset register, and the devices that held PII, customer account data, financial records, or confidential business information are identified for destruction.
- Every branch and office
- Matched to your fixed asset register
- Devices holding regulated data identified
Secure Collection
Hardware is collected in tracked vehicles under documented chain of custody, with every serial number logged at the dock before regulated data leaves your control.
- Tracked vehicles
- Serial numbers logged at pickup
- Chain of custody documented throughout
Data Sanitization
Every drive that held PII, customer account data, or financial records is wiped to NIST 800-88 and verified, or sent to secure media destruction by shredding, supporting the disposal provisions of the GLBA Safeguards Rule and the FFIEC IT Examination Handbook. Shredding is done in house by Coretek 360. It is not yet covered by our R2v3 certificate, and we are actively working to add it.
- Wiped to NIST 800-88 and verified
- Secure media destruction by shredding
- A certificate of data destruction for every drive
Remarketing & Recycling
Laptops, desktops, and servers with life left in them are refurbished and resold through our sales channels, only after every drive is wiped and verified or removed for shredding, with the value returned to your institution. Everything else goes to R2v3 certified downstream processors, as a RIOS Certified Recycler.
- Working hardware refurbished and resold
- Value returned to you
- R2v3 certified downstream recycling
Audit Ready Reporting
Serialized reporting accounts for every asset by serial number, with a certificate of data destruction for each drive, so your CISO, internal audit, and vendor management teams can answer examiners and support SOX fixed asset controls.
- Every serial number accounted for
- Certificates of data destruction
- Evidence for exams and SOX asset controls
Retire financial hardware without the exam headache.
Coretek 360 destroys the data, returns the value, and gives your examiners the disposal records they look for.
Newsroom
Twenty-Five Years in ITAD: Why Coretek Became Coretek 360
Coretek was founded in 2001, R2 certified in 2013 and renamed Coretek 360 in 2026. What changed in IT asset disposition in 25 years, and why the name changed.
Chain of Custody for Examiners: A Bank ITAD Use Case
How a bank retired teller workstations and branch servers with every asset documented from dock to disposition, and value returned, before its GLBA exam.
How to Recover Value from Retired IT Assets (2026 Guide)
Six steps to recover resale value from retired IT assets: inventory, NIST 800-88 sanitization, valuation, R2v3 partner selection, logistics and settlement.
NIST 800-88 Rev. 2 Explained: Clear, Purge, Destroy (2026)
What NIST 800-88 Rev. 2 requires: clear, purge and destroy defined, what changed in 2025, SSD and cryptographic erase rules, what a certificate must record.