Choosing a data destruction company: what to verify before the price

Every company in this market says secure, certified and compliant, and the work itself is invisible once done: a destroyed drive looks the same whoever destroyed it. What differs between vendors is what you can prove afterwards, so the selection method is to examine the record-keeping, the custody and the facts behind the logos, in that order, before price.

Facility or broker

Ask which facility will process your devices and whether it belongs to the company you are talking to. A large share of this market is brokered: sold by one firm, performed by another. That is workable when disclosed and a problem when discovered, because every additional company in the chain is an additional handover in the custody trail you will later have to defend.

Certifications, read for what they are

Ask for certifications by name, number and expiry, and verify them with the issuing body rather than taking the logo. Then keep the claim inside its limits: a certification establishes that a facility or process was audited against a standard. It does not establish that your job will be executed correctly, nor that the certified facility is the one your devices actually reach, which is the previous question again wearing different clothes.

Methods, matched to media

A competent company identifies media type per device and applies the matching method: erasure that verifies, degaussing for magnetic media only, shredding for flash and failed devices. Ask what happens when an unexpected media type turns up mid-job. The answer reveals whether sorting is a process or an improvisation, and the technical background is in the data destruction article.

Custody between your floor and the machine

Manifests per serial number at collection, numbered seals, documented handovers, a reconciliation on arrival, and a stated procedure for a count that does not match: the half of what a destruction engagement includes that is invisible in a quote. The company that answers “that does not happen” is telling you it has never been detected, which is not the same reassurance. Every additional handover is a place where the eventual certificate can quietly lose its meaning.

The blank certificate, again

Ask for an unfilled example of the closing report before any pricing conversation. Per serial number or per pallet, method stated per device or not, exceptions listed or absent: the blank document separates vendors faster than any reference call, for the reasons set out in the certificate article.

The boring questions that settle ties

What insurance covers the devices while in the vendor’s custody. Who the downstream processors are for the destroyed material, with the trail documented. Whether the crew that arrives is employed or subcontracted. None of these has a glamorous answer. All of them have short factual ones, and hesitation on any of them is itself an answer.

When the purchase is bigger than destruction

If the devices are leaving as part of an emptying hall, the destruction vendor is one role inside a sequenced project, and the selection questions widen to removal, resale and scheduling, covered in choosing a decommissioning company. Standalone or inside an exit, what the work involves is set out on the destruction page.