Retiring Clinic Laptops Under HIPAA: Hospital ITAD Use Case
How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.
Retail IT asset dispositionfor every store and every register.
A remodel or POS refresh touches every location at once. Coretek 360 collects registers, payment terminals, and back office systems store by store, with cardholder data destroyed to NIST 800-88 for PCI DSS.
Get a quotePOS and store hardware disposal that supports PCI DSS.
Store hardware is collected location by location, and media that held cardholder data is wiped to NIST 800-88 or shredded. A report by store gives your PCI assessor the evidence Requirement 9 asks for.
Store Rollout Planning
We schedule collection store by store around trading hours and remodels. The plan covers POS registers, PIN pads, self-checkout units, handheld scanners, signage players, and back office servers, so no location is left without a working register.
- Planned around trading hours
- Every location on one schedule
- Registers replaced, not missed
Secure Collection
Registers, terminals, and back office systems are collected from each store in tracked vehicles under documented chain of custody, with serial numbers logged at pickup.
- Pickups at every store
- Serial numbers logged at pickup
- Chain of custody documented throughout
Cardholder Data Destruction
Any media that stored cardholder data is wiped to NIST 800-88 and verified, or shredded, supporting PCI DSS Requirement 9 on destroying media once it is no longer needed for business or legal reasons. Shredding is done in house by Coretek 360. It is not yet covered by our R2v3 certificate, and we are actively working to add it.
- Supports PCI DSS Requirement 9
- Wiped to NIST 800-88 or shredded
- A certificate for every serial number
Remarketing & Recycling
Registers, scanners, and back office hardware with life left in them are refurbished and resold through our sales channels, with the value returned to you. Everything else goes to R2v3 certified downstream processors, as a RIOS Certified Recycler.
- Working hardware refurbished and resold
- Value returned to you
- R2v3 certified downstream recycling
Audit Ready Reporting
A final report accounts for every device by store and serial number, with a certificate of data destruction for each drive. Your PCI compliance lead, loss prevention, and IT get the evidence for assessments.
- Organized by store
- Certificates of data destruction
- Evidence for PCI assessments
Retiring hardware across stores?
Coretek 360 runs one schedule for every location, returns the value in the hardware, and keeps your PCI evidence ready.
Newsroom
Twenty-Five Years in ITAD: Why Coretek Became Coretek 360
Coretek was founded in 2001, R2 certified in 2013 and renamed Coretek 360 in 2026. What changed in IT asset disposition in 25 years, and why the name changed.
Chain of Custody for Examiners: A Bank ITAD Use Case
How a bank retired teller workstations and branch servers with every asset documented from dock to disposition, and value returned, before its GLBA exam.
How to Recover Value from Retired IT Assets (2026 Guide)
Six steps to recover resale value from retired IT assets: inventory, NIST 800-88 sanitization, valuation, R2v3 partner selection, logistics and settlement.
NIST 800-88 Rev. 2 Explained: Clear, Purge, Destroy (2026)
What NIST 800-88 Rev. 2 requires: clear, purge and destroy defined, what changed in 2025, SSD and cryptographic erase rules, what a certificate must record.