
Retiring Clinic Laptops Under HIPAA: Hospital ITAD Use Case
How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.
Tell Coretek 360 what you are retiring, deploying, or replacing, and we will build a hardware lifecycle plan around your sites and schedule.
Get a quoteRecurring refreshes, lease returns, office moves, remote workforce devices, and anything else your hardware calls for, combined into one program with one point of contact.
Work that repeats, such as recurring pickups or annual refreshes, runs on one plan so every cycle produces the same documentation.
Lease term equipment is collected, logged by serial number, and wiped to NIST 800-88, with a certificate of data destruction for each drive.
When an office moves, consolidates, or closes, our team packs and removes the IT equipment under documented chain of custody, and retires what you no longer need.
Devices used by remote teams are harder to account for at retirement. We build their collection, data destruction, and reporting into your program.
We combine the services you need, from tracked pickups and data destruction to refurbishment, resale, and deployment support, into one hardware lifecycle plan. You receive a written scope and a pickup schedule for every location before any work begins.
A final serialized report accounts for every asset, with a certificate of data destruction for each drive and the value recovered itemized.
What teams ask when their hardware program does not fit a standard solution.
A custom ITAD program is a hardware lifecycle plan built around your equipment, locations, and schedule, combining any of our services under one scope. Every asset is still tracked by serial number, every drive is sanitized to NIST 800-88 or shredded, and you still receive the final report and certificates of data destruction.
Any of them: scheduled pickups and reverse logistics, data destruction by NIST 800-88 wipe or in house shredding, refurbishment and resale, recycling through R2v3 certified downstream processors, rack level decommissioning, and deployment support with staging and imaging. The written scope lists which services apply at which site, so the plan is clear before work starts.
Yes. Multi-location ITAD is the usual reason for a custom program. We schedule pickups in tracked vehicles at each site, document chain of custody from every dock to our floor, and consolidate the results into one serialized report, so each location follows the same process.
Yes. Every asset is logged by serial number at pickup and tracked through sanitization, resale, or recycling. The final report covers every site in the program, with a certificate of data destruction per drive. The documentation is the same whether the work is a one time project or a recurring pickup.
Planning starts as soon as you tell us what you are retiring, deploying, or replacing, and where it sits. We return a written scope and schedule for review before any pickup is booked. The more complete your asset list and site list, the faster the plan comes together.
Contact Coretek 360 with what you are working on: the hardware, the locations, and any compliance requirements from HIPAA, GLBA, FERPA, or your own auditors. We map the full hardware lifecycle from pickup to final report and send a written scope you can route to procurement.
Yes. Drives can be shredded at your location so they never leave the building intact, or wiped to NIST 800-88 and verified at our facility. Either way, a certificate of data destruction is issued per serial number for the final report. Shredding is performed in house by Coretek 360. It is not yet within our R2v3 certificate scope, and we are working to add physical destruction.
Yes. Equipment with working life left is tested, refurbished, and resold through our sales channels, with the value returned itemized by serial number. Hardware that cannot be reused is recycled through R2v3 certified downstream processors. Both outcomes are recorded in the same final report.
Describe the project and Coretek 360 will design an ITAD program around it.

How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.

Coretek was founded in 2001, R2 certified in 2013 and renamed Coretek 360 in 2026. What changed in IT asset disposition in 25 years, and why the name changed.

How a bank retired teller workstations and branch servers with every asset documented from dock to disposition, and value returned, before its GLBA exam.

Six steps to recover resale value from retired IT assets: inventory, NIST 800-88 sanitization, valuation, R2v3 partner selection, logistics and settlement.

What NIST 800-88 Rev. 2 requires: clear, purge and destroy defined, what changed in 2025, SSD and cryptographic erase rules, what a certificate must record.