Retiring Clinic Laptops Under HIPAA: Hospital ITAD Use Case
How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.
Government IT asset dispositionthat stands up to an audit.
Public hardware comes with public accountability. Coretek 360 sanitizes agency hardware to NIST 800-88, the federal guideline, returns the value to your agency, and closes your property records cleanly.
Get a quoteITAD for agencies, cities, and counties, aligned to NIST 800-53 and CJIS.
Media is sanitized to NIST 800-88, the method NIST 800-53 media protection controls and the CJIS Security Policy point to. Every asset is reconciled to your property records, with the disposal records your auditors ask for.
Asset Reconciliation
We work from your property and surplus records, so every workstation, laptop, mobile data terminal, server, and copier is identified and reconciled before anything leaves your custody.
- Matched to property records
- Every asset identified
- Reconciled before pickup
Secure Collection
Hardware is collected in tracked vehicles under documented chain of custody. Where policy requires it, drives are shredded on site, so media that held criminal justice or citizen data never leaves your building intact.
- Tracked vehicles
- On site shredding available
- Chain of custody documented throughout
Data Sanitization
Media is sanitized to NIST 800-88, the guideline written for federal agencies, and verified, or shredded, supporting the media sanitization controls in NIST 800-53 and the CJIS Security Policy. Shredding is done in house by Coretek 360. It is not yet covered by our R2v3 certificate, and we are actively working to add it.
- Wiped to NIST 800-88 and verified
- Shredded when media must not survive
- A certificate for every serial number
Remarketing & Recycling
Workstations, laptops, and servers cleared for release are refurbished and resold through our sales channels, with the value returned to your agency. Everything else goes to R2v3 certified downstream processors, as a RIOS Certified Recycler.
- Working hardware refurbished and resold
- Value returned to you
- R2v3 certified downstream recycling
Audit Ready Reporting
A final report accounts for every asset by serial number, with a certificate of data destruction for each drive. Your records officer, property manager, and auditors can close out property and surplus disposal records.
- Every serial number accounted for
- Certificates of data destruction
- Property and surplus records closed out
Accountable disposal for every public asset.
Coretek 360 handles the disposal, returns the value to your agency, and closes out your property records for your auditors.
Newsroom
Twenty-Five Years in ITAD: Why Coretek Became Coretek 360
Coretek was founded in 2001, R2 certified in 2013 and renamed Coretek 360 in 2026. What changed in IT asset disposition in 25 years, and why the name changed.
Chain of Custody for Examiners: A Bank ITAD Use Case
How a bank retired teller workstations and branch servers with every asset documented from dock to disposition, and value returned, before its GLBA exam.
How to Recover Value from Retired IT Assets (2026 Guide)
Six steps to recover resale value from retired IT assets: inventory, NIST 800-88 sanitization, valuation, R2v3 partner selection, logistics and settlement.
NIST 800-88 Rev. 2 Explained: Clear, Purge, Destroy (2026)
What NIST 800-88 Rev. 2 requires: clear, purge and destroy defined, what changed in 2025, SSD and cryptographic erase rules, what a certificate must record.