Retiring Clinic Laptops Under HIPAA: Hospital ITAD Use Case
How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.
IT asset disposition (ITAD) services,done right from pickup to resale.
Coretek 360 picks up, wipes, resells, and recycles your retired hardware, returns the value it still holds, and hands you the records your auditors need.
Get a quoteIT asset disposition services for every device you retire.
From laptop fleets to server rooms, each service is handled by our own team and ends with the value recovered and the paperwork done. This is not the full list, so ask about anything you do not see.
Laptop & Desktop Disposal
Coretek 360 retires end user equipment of every kind and fleets of any size, including laptops, desktops, workstations, thin clients, monitors, and tablets. Each device is logged by serial number, wiped to the NIST 800-88 standard, and then remarketed or recycled.
- Laptops, desktops, and workstations
- Thin clients, monitors, tablets, and more
- Lease term and excess equipment
- One device or a whole fleet
Server & Network Equipment Disposal
Server rooms and network closets are cleared rack by rack. We remove infrastructure of every kind, including servers, storage arrays, switches, routers, firewalls, and access points, sanitize every drive, and document each serial number.
- Servers and storage arrays
- Switches, routers, and firewalls
- Access points, VoIP phones, and more
- Racks and related infrastructure
On Site Packing & Pickup
Our project managers come to your facility to pack and palletize your retired assets for safe transport, while your staff stays focused on their work. Hardware leaves in tracked vehicles on a one time pickup or a recurring schedule, with chain of custody documented from your dock.
- On site packing and palletizing
- One time or recurring pickups
- Tracked vehicles
- Chain of custody from your dock
Data Destruction
Every data bearing device is wiped to the NIST 800-88 standard and verified, with a certificate of data destruction per serial number. When media must not survive, drives are shredded, on site or at our facility.
- Hard drive and SSD wiping to NIST 800-88
- Hard drive shredding
- On site data destruction
- A certificate of data destruction per serial
Hard drive shredding is performed in house by Coretek 360 and is not yet covered by our R2v3 certificate, which covers data sanitization, test and repair, and the downstream recycling chain. We are actively working to add it.
IT Asset Remarketing
Retired assets are tested, graded, refurbished, and reimaged, then remarketed through our sales channels. The value returned is itemized for you.
- Testing and grading
- Repair and refurbishment
- Resale through our sales channels
- Value returned, itemized by serial
Electronics Recycling
Equipment that cannot be reused is recycled through R2v3 certified downstream processors. Coretek 360 is also a RIOS Certified Recycler, and every lot is documented through final disposition.
- R2v3 certified downstream processors
- RIOS Certified Recycler
- Business e-waste of every type
- Documented through final disposition
Serialized Audit & Reporting
Every asset is checked in at our facility, its serial number scanned and reconciled against your inventory. A final serialized asset report accounts for each one, with a certificate of data destruction for every drive.
- Every serial number scanned and reconciled
- Make, model, and condition recorded
- Certificates of data destruction
- A report you keep for your auditors
Frequently asked questions about ITAD.
Direct answers on pickups, chain of custody, R2v3 recycling, and reporting.
What is IT asset disposition?
IT asset disposition (ITAD) is the secure retirement of hardware you no longer need: pickup, data sanitization to NIST 800-88, reuse or R2v3 certified recycling, and a record of what happened to every asset. Coretek 360 has provided ITAD services for over 25 years, and each engagement ends with a serialized asset report and certificates of data destruction.
How do pickups work?
We schedule pickups from your dock in tracked vehicles, as a one time job or on a recurring schedule across every location. Each asset is logged by serial number as it is loaded, and the chain of custody record starts at your dock and continues to our floor. Pickups serve organizations across the US.
How is chain of custody documented?
Every asset is logged by serial number at pickup and tracked through each handoff until its final disposition. The record covers collection in tracked vehicles, check in and reconciliation at our facility, sanitization, and resale or recycling. That chain of custody record is part of the serialized asset report you receive at the end of the engagement.
What happens to hardware that cannot be reused?
It is recycled through R2v3 certified downstream processors, and Coretek 360 is also a RIOS Certified Recycler. Data bearing media is wiped or shredded before any recycling begins, and each asset is documented through final disposition so the report shows exactly where it ended up.
What report do we receive?
A final serialized asset report that accounts for every serial number: make, model, condition at receipt, sanitization method, and final disposition, whether resale or recycling. It is delivered with a certificate of data destruction for each drive. Compliance teams keep the report for audits under HIPAA, GLBA, PCI DSS, or similar rules.
How long has Coretek 360 done this?
Coretek 360 has provided IT asset disposition services for over 25 years, serving organizations across the US and in 14+ countries from our North Carolina headquarters. In that time we have processed more than 5 million assets for more than 2,000 companies. Our R2v3, RIOS, NIST 800-88, and HIPAA credentials are all current, and every engagement is documented by serial number.
Is our data destroyed before disposition?
Yes. Every drive is wiped to NIST 800-88 and verified, or physically shredded, before any hardware is resold or recycled. You receive a certificate of data destruction per serial number, with the method recorded in the report. Shredding is performed in house by Coretek 360, at your site or at our facility. It is not yet within our R2v3 certificate scope, and we are working to add physical destruction.
Can retired hardware recover value?
Yes. Equipment with life left in it is tested, graded, refurbished, and resold through our sales channels, after its drives are wiped to NIST 800-88. The value returned is itemized for you by serial number in the final report, so finance can account for what each retired asset brought back.
Retiring hardware?
Hand it to Coretek 360 and get the value back, the data destroyed, and the paperwork done.
Newsroom
Twenty-Five Years in ITAD: Why Coretek Became Coretek 360
Coretek was founded in 2001, R2 certified in 2013 and renamed Coretek 360 in 2026. What changed in IT asset disposition in 25 years, and why the name changed.
Chain of Custody for Examiners: A Bank ITAD Use Case
How a bank retired teller workstations and branch servers with every asset documented from dock to disposition, and value returned, before its GLBA exam.
How to Recover Value from Retired IT Assets (2026 Guide)
Six steps to recover resale value from retired IT assets: inventory, NIST 800-88 sanitization, valuation, R2v3 partner selection, logistics and settlement.
NIST 800-88 Rev. 2 Explained: Clear, Purge, Destroy (2026)
What NIST 800-88 Rev. 2 requires: clear, purge and destroy defined, what changed in 2025, SSD and cryptographic erase rules, what a certificate must record.