
Retiring Clinic Laptops Under HIPAA: Hospital ITAD Use Case
How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.
Coretek 360 provides responsible recycling for equipment that cannot be refurbished, as an R2v3 certified and RIOS Certified Recycler, documented through final disposition.
Get a quoteComputers, servers, network gear, peripherals, and other business electronics are collected, data is destroyed, and every load is routed through our R2v3 certified downstream chain and documented. This is not the full list, so ask about anything you do not see.
Business e-waste is collected from your dock in tracked vehicles, on one scheduled pickup or a recurring program, with chain of custody documented from pickup. Each load is checked in at our facility, weighed, and recorded.
End of life computers of every kind, including desktops, laptops, workstations, thin clients, and tablets, are checked in and sorted. Anything with life left in it is set aside for reuse first, and the rest is recycled through R2v3 certified downstream processors.
Retired infrastructure, including servers, storage arrays, switches, routers, firewalls, and access points, is recycled once their drives are destroyed, with serialized assets scanned against your list.
Monitors, multi-function printers, copiers, VoIP phones, and other peripherals are sorted by type. Batteries and other hazardous parts are removed and handled separately.
Every data bearing device is wiped to NIST 800-88 or shredded before any equipment is recycled, with a certificate of data destruction for every serial number.
Hard drive shredding is performed in house by Coretek 360 and is not yet covered by our R2v3 certificate, which covers data sanitization, test and repair, and the downstream recycling chain. We are actively working to add it.
What cannot be reused is dismantled into its component materials. Metals, plastics, and circuit boards are separated and sent to R2v3 certified downstream processors rather than to landfill, with downstream documentation kept on file.
Demanufacturing and materials recovery is performed in house by Coretek 360 and is not yet covered by our R2v3 certificate, which covers data sanitization, test and repair, and the downstream recycling chain. We are actively working to add it.
You receive a certificate of recycling and a record of what was processed, with weights and serial numbers, documented through final disposition.
Direct answers on certification, data destruction, downstream processing, and proof.
Business e-waste that is past reuse and cannot be refurbished: desktops, laptops, servers, network gear, monitors, drives, and the peripherals around them. Each load is weighed and recorded at our facility, serialized assets are scanned against your list, and everything is routed through our R2v3 certified downstream chain and documented through final disposition.
Yes. Coretek 360 is an R2v3 certified facility, with a certified downstream recycling chain, and also a RIOS Certified Recycler. Demanufacturing and materials recovery happen in house, outside that R2v3 scope today. Both certifications are current. Materials go only to certified downstream processors, and the downstream documentation is kept so your recycling record stands up to a compliance review.
Yes. Drives are wiped to NIST 800-88 or shredded before any hardware is processed, and a certificate of data destruction is issued for every serial number. Shredding can happen on site or at our facility. Data destruction comes before sorting and demanufacturing, so no data bearing device reaches a downstream processor intact.
Each asset is logged by serial number and documented through final disposition, and each load is weighed and recorded at check in. You receive a certificate of recycling, certificates of data destruction for every drive, and a final report that reconciles what you sent against what was processed and where it went downstream.
Resell whatever still works. Equipment with life left in it is tested, refurbished, and resold through our sales channels, with the value returned to you, and only hardware past reuse is recycled. We sort every load for reuse before recycling, so the right path is confirmed by testing rather than assumed, and both paths appear in one report.
We schedule pickups from your dock in tracked vehicles, as a one time job or a recurring program, serving organizations across the US. Chain of custody is documented from pickup to check in at our facility, where each load is weighed and serialized assets are scanned against your list.
Yes. You receive a certificate of recycling for the load and a final disposition report that accounts for every serial number you send us, with weights recorded at check in. The report shows that materials went to certified downstream processors under R2v3, which is the downstream documentation auditors ask for.
Yes. With on site destruction, drives are shredded at your location and never leave it whole. Each drive's serial number is logged before shredding so the certificate of data destruction traces to a specific device. The shredded material then goes to R2v3 certified downstream processors and is documented through final disposition.
Send Coretek 360 what cannot be reused and we will route it through our R2v3 certified downstream chain.

How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.

Coretek was founded in 2001, R2 certified in 2013 and renamed Coretek 360 in 2026. What changed in IT asset disposition in 25 years, and why the name changed.

How a bank retired teller workstations and branch servers with every asset documented from dock to disposition, and value returned, before its GLBA exam.

Six steps to recover resale value from retired IT assets: inventory, NIST 800-88 sanitization, valuation, R2v3 partner selection, logistics and settlement.

What NIST 800-88 Rev. 2 requires: clear, purge and destroy defined, what changed in 2025, SSD and cryptographic erase rules, what a certificate must record.