Retiring Clinic Laptops Under HIPAA: Hospital ITAD Use Case
How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.
Law firm IT asset dispositionthat protects privilege.
A retired laptop still holds client files. Coretek 360 wipes or shreds every attorney laptop, document server, and copier drive, returns the value in the hardware, and gives the firm the record to prove it.
Get a quoteRetire firm hardware without exposing privileged client data.
Every device that held client information is identified and destroyed to NIST 800-88, and the firm gets one record that supports your Model Rule 1.6 duty of confidentiality and answers your clients' outside counsel guidelines, without your staff running the project.
Confidential Inventory
We identify every device that held client files, case records, or discovery data: attorney laptops, document management servers, copiers and scanners with hard drives, phones, and external drives from discovery. Copier drives and loose discovery media are easy to overlook, so they go on the list from the start.
- Laptops, servers, and copiers
- Phones and removable media
- Discovery drives and litigation hold media
Secure Collection
Devices are collected in tracked vehicles under a documented chain of custody, with every handoff recorded. When firm policy says privileged material cannot leave the building intact, drives are shredded at your office.
- Tracked vehicles
- On site shredding available
- Custody documented at every handoff
Data Sanitization
Every drive is wiped to NIST 800-88 and verified, or shredded, so privileged client material cannot be recovered after a device leaves the firm. Each drive gets its own certificate of data destruction. Shredding is done in house by Coretek 360. It is not yet covered by our R2v3 certificate, and we are actively working to add it.
- Wiped to NIST 800-88 and verified
- Shredded when media must not survive
- A certificate for every serial number
Remarketing & Recycling
Laptops, monitors, and servers with life left in them are refurbished and resold through our sales channels, only after their drives are sanitized, with the value returned to the firm. Everything else goes to R2v3 certified downstream processors, as a RIOS Certified Recycler.
- Working hardware refurbished and resold
- Value returned to you
- R2v3 certified downstream recycling
Audit Ready Reporting
A certificate of data destruction for every drive and a final report by serial number give your managing partner, general counsel, and records manager one file. The firm can produce it for a client audit or an outside counsel guideline review.
- A certificate for every drive
- Custody records for every handoff
- Evidence for client audits
Protect privileged client data.
Retire firm hardware with Coretek 360: privilege protected, value returned, and the records your clients' guidelines ask for.
Newsroom
Twenty-Five Years in ITAD: Why Coretek Became Coretek 360
Coretek was founded in 2001, R2 certified in 2013 and renamed Coretek 360 in 2026. What changed in IT asset disposition in 25 years, and why the name changed.
Chain of Custody for Examiners: A Bank ITAD Use Case
How a bank retired teller workstations and branch servers with every asset documented from dock to disposition, and value returned, before its GLBA exam.
How to Recover Value from Retired IT Assets (2026 Guide)
Six steps to recover resale value from retired IT assets: inventory, NIST 800-88 sanitization, valuation, R2v3 partner selection, logistics and settlement.
NIST 800-88 Rev. 2 Explained: Clear, Purge, Destroy (2026)
What NIST 800-88 Rev. 2 requires: clear, purge and destroy defined, what changed in 2025, SSD and cryptographic erase rules, what a certificate must record.