Retiring Clinic Laptops Under HIPAA: Hospital ITAD Use Case
How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.
Life sciences IT asset dispositionthat protects research data.
Years of research sit on instrument PCs and lab servers. Coretek 360 retires instrument computers, LIMS servers, and trial laptops, with research and patient data destroyed to NIST 800-88 and the records ready for your quality unit.
Get a quoteLab and research hardware retired under GxP and HIPAA.
Every system that held research, trial, or patient data is identified and destroyed to NIST 800-88. Your quality unit can show media was destroyed only after your retention schedule cleared it, without running the project.
Lab Inventory
We identify every system that held research, trial, or patient data. That includes the PCs attached to HPLCs, sequencers, and other instruments, LIMS and ELN servers, and clinical site laptops.
- Instrument computers included
- Research and trial data mapped
- Every device by serial number
Secure Collection
Equipment is collected from labs, clinical sites, and offices in tracked vehicles under documented chain of custody, once your quality unit confirms retention holds have cleared.
- Labs, clinical sites, and offices
- Tracked vehicles
- Chain of custody documented throughout
Data Sanitization
Every drive is wiped to NIST 800-88 and verified, or shredded, so research findings, trial data, and PHI cannot be recovered, supporting your HIPAA obligations and your IP protections. Shredding is done in house by Coretek 360. It is not yet covered by our R2v3 certificate, and we are actively working to add it.
- Wiped to NIST 800-88 and verified
- Shredded when media must not survive
- A certificate for every serial number
Remarketing & Recycling
Laptops, workstations, and servers with life left in them are refurbished and resold through our sales channels, once their data is destroyed, with the value returned to you. Everything else goes to R2v3 certified downstream processors, as a RIOS Certified Recycler.
- Working hardware refurbished and resold
- Value returned to you
- R2v3 certified downstream recycling
Audit Ready Reporting
A final report accounts for every asset by serial number, with a certificate of data destruction for each drive. It is ready for your quality unit, IT validation, and compliance reviewers to file alongside 21 CFR Part 11 records.
- Every serial number accounted for
- Certificates of data destruction
- Ready for quality and audit review
Protect research and patient data.
Retire lab and office hardware with Coretek 360, with the data destroyed, the value returned, and the records your quality unit needs.
Newsroom
Twenty-Five Years in ITAD: Why Coretek Became Coretek 360
Coretek was founded in 2001, R2 certified in 2013 and renamed Coretek 360 in 2026. What changed in IT asset disposition in 25 years, and why the name changed.
Chain of Custody for Examiners: A Bank ITAD Use Case
How a bank retired teller workstations and branch servers with every asset documented from dock to disposition, and value returned, before its GLBA exam.
How to Recover Value from Retired IT Assets (2026 Guide)
Six steps to recover resale value from retired IT assets: inventory, NIST 800-88 sanitization, valuation, R2v3 partner selection, logistics and settlement.
NIST 800-88 Rev. 2 Explained: Clear, Purge, Destroy (2026)
What NIST 800-88 Rev. 2 requires: clear, purge and destroy defined, what changed in 2025, SSD and cryptographic erase rules, what a certificate must record.