Data Erasure

PlanITROI has stringent security measures in place to ensure the safety of client assets and the information stored on your hard drives, tape media, etc. The entire process is contained within the client facility and under complete surveillance physically with each step in the process tracked and recorded within PlanITROI’s PlanITvision system.

Since 2001, PlanITROI has processed over 60 million media devices (HDD, Tape, SSD, Flash, etc.) and destroying massive amounts of data stored on them, we have never had an incident of client’s confidential information being exposed. Our methodology for the protection of client information is sound and based on industry practices. Additionally, PlanITROI can provide tamper-proof boxes and witnessed destruction for any site, and region per client request.

PlanITROI follows all NIST and Department of Defense (DOD) guidelines for executing all PlanITROI ISO procedures as illustrated below.

• Data Destruction - Secure Steps
• Data Erasure
• Erasure System Forces Operator to... Erase, Record & Report Results
• Erasure System provides shop floor control over erasure operator forcing the adherence to Client's SLA's for data eradication. In addition, System provides test results and automatic next steps to the operator while recording every step in the process and reporting to the Client by Serial Number on Drive and tracing it back to the SN on Unit
• Data Eradication: Quality Control
• Within the System, there are unlimited QC checks that can be setup based on client and type of product. If there are issues, we will not allow it to move to finished goods.

Since 2001 PlanITROI has processed over 60 million media devices (HDD, Tape, SSD, Flash, etc.) and destroyed massive amounts of data stored on them, we have never had an incident of client’s confidential information being exposed. PlanITROI has never been reprimanded for improper use of confidential information as an onsite and offsite partner. Our methodology for the protection of client information is sound and based on industry practices -- PlanITROI has demonstrated this with all its clients.

PlanITROI follows all NIST and Department of Defense (DOD) guidelines for executing all PlanITROI ISO procedures.

PlanITROI Data Security Policy (depot, onsite, & mobile):

• Certified ISO 9001 and ISO 14001 media sanitation process standards to ensure 100% data safe outcomes, with redundancy and quality checks.
• All media is erased utilizing certified drive erasure programs that are compliant with NIST SP 800.88 or DOD 5220.22-M standards depending on our client's requirements
• PlanITROI's data overwrite process is audited monthly to ensure compliance with the most up to date erasure standard, in accordance with National Institute of Standards and Technology guidelines for Media Sanitation. For more information: http://csrc.nist.gov/publications/drafts/800-88-rev1/sp800_88_r1_draft.pdf)
• PlanITROI's Data Destruction and Erasure Standards shall at all times be compliant with NIST SP 800.88 standards, Office of Emergency Management (OEM), as well as compliant with the Sarbanes-Oxley Act, the Gramm-Leach-Bliley Act (GLBA), and the Health Insurance Portability and Accountability Act (HIPAA)
• Certificates of Data Destruction and Recycling are standard
• All devices that have memory and sdata storage features, including flash drives, removable media, mobile phones, printing devices, PCs, tablets, etc. and any other media that store data are addressed.

PlanITROI uses Tabernus software for erasing the hard drives, performing a NIST SP 800-88 compliant pass data wipe. If the Tabernus software records an exception of if there is any type of error, the drive is degaussed to ensure data destruction. For hard drives that are being remarketed, PlanITROI formats them using the Microsoft Windows tools and overwriting occurs when loading the new product image (operating system and applications) on the hard drive.

Erasure System Forces Operator to... Erase, Record & Report Results

Erasure System provides shop floor control over erasure operator forcing the adherence to Client's SLA's for data eradication. In addition, System provides test results and automatic next steps to the operator while recording every step in the process and reporting to the client by serial number (SN) on Drive and tracing it back to the SN on Unit.

Data Eradication: Quality Control (QC)

Within the System, there are unlimited QC checks that can be setup based on client and type of product. If there are issues, we will not allow it to move to finished goods.

PlanITROI’s default data sanitization procedure is a Minimum of 1X (DATA_1X) Data Erasure wipe. PlanITROI sanitizes all hard drives using a National Institute of Standards and Technology (NIST) SP 800-88 compliant pass data overwrite process to ensure the complete destruction of any data from the drives. Each sanitized drive is validated though a quality inspection process (visual verification of data eradication) to ensure it has been overwritten properly. Any drives that cannot be successfully sanitized will be physically destroyed and Recycled. However, PlanITROI can undertake any data security requirement and implement any protocol necessary.

PlanITROI uses the National Institute of Standards and Technology (NIST) SP 800-88 standard for wiping hard drives.