
Retiring Clinic Laptops Under HIPAA: Hospital ITAD Use Case
How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.
Coretek 360 retires nonprofit hardware with NIST 800-88 data destruction, R2v3 recycling, and resale value returned to your organization.
Get a quoteDonated and purchased hardware of any age or make is collected, wiped, and resold or recycled, with the value returned to your mission. This is not the full list, so ask about anything you do not see.
We review what you are retiring, including donated hardware of mixed age and make, along with your budget and any requirements from your board, funders, or auditors. Equipment is then collected in tracked vehicles on a schedule that works for your organization.
Every drive is wiped to NIST 800-88 and verified, or shredded, so donor, client, and member data is protected. A certificate of data destruction is issued per serial number.
Hard drive shredding is performed in house by Coretek 360 and is not yet covered by our R2v3 certificate, which covers data sanitization, test and repair, and the downstream recycling chain. We are actively working to add it.
Hardware with life left in it is tested, repaired where needed, and reimaged, so it can be resold rather than scrapped.
Refurbished equipment is resold through our sales channels, and the value comes back to your organization, itemized by asset.
What cannot be reused is recycled through R2v3 certified downstream processors. Coretek 360 is also a RIOS Certified Recycler.
A final serialized report accounts for every asset, with a certificate of data destruction for each drive and the value recovered itemized, ready for your board, funders, and auditors.
What nonprofits ask before they retire hardware with Coretek 360.
Yes. Coretek 360 provides ITAD for nonprofits, planned around the budget and schedule you have rather than a fixed program. The process is the same one we run for hospitals and school districts: tracked pickups, data destruction to NIST 800-88, R2v3 certified recycling, and a serialized report you can hand to your board.
Wiping is. Every drive is wiped to NIST 800-88 and verified under our R2v3 certification, which covers logical data sanitization, and a certificate of data destruction is issued per serial number. Where a drive is shredded instead, the same certificate is issued. Shredding is performed in house by Coretek 360 and is not yet covered by our R2v3 certificate, which covers data sanitization, test and repair, and the downstream recycling chain. We are actively working to add it. Donor records, client files, and member data are covered the same way as a hospital's patient data, and our handling is HIPAA compliant for organizations that hold health information.
Often, yes. Equipment with working life left is tested, refurbished, and resold through our sales channels, and the value is returned to your organization itemized by asset. We assess resale value during the needs assessment, so you know before pickup what is likely to come back.
It is handled as nonprofit computer recycling, with data destroyed first. Dismantling and materials recovery are performed in house, not yet covered by our R2v3 certificate, and recovered material goes to R2v3 certified downstream processors. Each unit is tracked by serial number through final disposition and appears in the final report, so your records show what was recycled and that it was handled responsibly.
Yes. You receive a final disposition report listing every retired asset by serial number, how its data was destroyed, and whether it was resold or recycled, along with a certificate of data destruction per drive. The report supports grant audits and funder reviews that ask how equipment was disposed of.
Tell Coretek 360 what you are retiring, where it is, and when it needs to go. An asset list helps, but we can inventory on pickup if you do not have one. We plan the collection, data destruction, and resale or recycling around your budget and return a written scope.
Yes. With on site data destruction, drives are shredded at your location before anything leaves the building. Serial numbers are logged first and a certificate of data destruction is issued for each drive, the same documentation you receive from our facility. Shredding is performed in house by Coretek 360. It is not yet within our R2v3 certificate scope, and we are working to add physical destruction.
We schedule pickups in tracked vehicles, as a one time job or on a recurring schedule, and document chain of custody from your door to our floor. Each asset is scanned by serial number at intake and reconciled against your list, so the report at the end matches what left your building.
Retire hardware securely with Coretek 360 and recover value wherever it allows.

How a hospital system retired ePHI laptops and imaging workstations under HIPAA: BAA, chain of custody, verified NIST 800-88 wipes, one certificate per drive.

Coretek was founded in 2001, R2 certified in 2013 and renamed Coretek 360 in 2026. What changed in IT asset disposition in 25 years, and why the name changed.

How a bank retired teller workstations and branch servers with every asset documented from dock to disposition, and value returned, before its GLBA exam.

Six steps to recover resale value from retired IT assets: inventory, NIST 800-88 sanitization, valuation, R2v3 partner selection, logistics and settlement.

What NIST 800-88 Rev. 2 requires: clear, purge and destroy defined, what changed in 2025, SSD and cryptographic erase rules, what a certificate must record.