
Retiring Clinic Laptops Under HIPAA: Hospital ITAD Use Case
How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.
A planned Coretek 360 service: device setup and account configuration alongside the hardware we stage, image, and deploy.
Get a quoteSeven services we are planning around the devices we deploy. Scope is confirmed in writing per engagement, not assumed.
We review your current environment with you, users, email, files, devices, and licensing, and confirm which parts of the setup we can take on alongside the hardware deployment.
Planned scope covers tenant configuration, user accounts, groups, and multifactor sign in, set up before the new devices reach your teams.
Planned scope covers moving email, calendars, and files into Microsoft 365, scheduled around the device rollout so your people change over once.
Planned scope covers enrolling the devices we stage and image in device management, with your apps and settings applied before they ship.
Planned scope covers access and data protection policies across accounts and devices, matched to the requirements your compliance reviewer sets.
Planned scope covers walking your people through the new setup, from first sign in to finding their files, as the deployed devices land.
Planned scope covers support after go live for new users, changes, and questions, alongside the hardware lifecycle work we already run.
What teams ask about the planned Microsoft 365 service.
Microsoft 365 setup and support is a planned Coretek 360 service, not one we deliver today as a standalone offering. The planned scope covers device setup, account configuration, migration, and support, arranged around the hardware we stage, image, and deploy. Scope is confirmed in writing per engagement, so you know exactly what is covered.
Yes, and that is where the planned service fits. Our deployment support already covers staging, imaging, and rollout of new devices, tracked by serial number from our floor to your sites. Microsoft 365 setup is being planned as the companion step, so devices arrive configured and the old ones leave under documented chain of custody.
They are handled as IT asset disposition, which is the service we have run for over 25 years. Each device is logged by serial number and wiped to NIST 800-88 and verified, or shredded. It is then refurbished and resold, or recycled through R2v3 certified downstream processors. You receive a certificate of data destruction per drive and a final report.
Not today. The service is planned, and we are scoping it first around the hardware we deploy. If you need setup without a hardware project, tell us what your team uses and we will say plainly whether we can take it on now or point you to what we do offer.
Contact Coretek 360 with the size of your team, the devices you are deploying or replacing, and what you use today. We will scope the hardware work, staging, imaging, rollout, and disposition, and set out in writing which Microsoft 365 setup steps we can include in that engagement.
Devices can be staged and imaged centrally and shipped to every site, which is part of our current deployment support, with each device tracked by serial number to the door. Enrolling them in device management during staging is part of the planned Microsoft 365 scope and is confirmed per engagement.
Licensing is not in the planned scope. The service is being scoped around setup and configuration of the devices we stage, image, and deploy, and the accounts that go with them. Your licenses stay with your Microsoft agreement or reseller, and we work alongside whoever manages them.
In writing, before the work starts. Because the service is planned rather than delivered today, every engagement sets out the Microsoft 365 steps Coretek 360 can take on alongside the hardware work, and anything outside that is named as out of scope, so there are no surprises for your team or your budget.
Tell Coretek 360 about your team and the hardware you are deploying, and we will scope what we can set up.

How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.

Coretek was founded in 2001, R2 certified in 2013 and renamed Coretek 360 in 2026. What changed in IT asset disposition in 25 years, and why the name changed.

How a bank retired teller workstations and branch servers with every asset documented from dock to disposition, and value returned, before its GLBA exam.

Six steps to recover resale value from retired IT assets: inventory, NIST 800-88 sanitization, valuation, R2v3 partner selection, logistics and settlement.

What NIST 800-88 Rev. 2 requires: clear, purge and destroy defined, what changed in 2025, SSD and cryptographic erase rules, what a certificate must record.