Media Destruction

Destroy. Record. Report.

100% Data Destruction Guaranteed

“We chose PlanITROI because they are 100% buttoned up in terms of certifications, professionalism, and service. In all the years of working with them, we’ve never felt like our data was at risk. That peace of mind that comes with knowing our data is in safe hands is priceless.”

– PlanITROI Client

Since 2001, PlanITROI has had a history of processing over 60 million media devices (HDD, Tape, SSD, Flash, etc.) and destroying massive amounts of data stored on them, we have never had an incident of client’s confidential information being exposed.

Our methodology for the protection of client information is sound and based on industry practices. Additionally, PlanITROI can provide tamper-proof boxes and witness destruction for any site, and region per client request.

How is your sensitive data safeguarded (e.g. hard drive data, tape media, etc.)?

PlanITROI has stringent security measures in place to ensure the safety of client assets and the information stored on your hard drives, tape media, etc. The entire process is contained within the client facility and under complete surveillance physically with each step in the process tracked and recorded within PlanITROI’s PlanITvision system.

Since 2001, PlanITROI has processed over 60 million media devices (HDD, Tape, SSD, Flash, etc.) and destroyed massive amounts of data stored on them, we have never had an incident of client’s confidential information being exposed. Our methodology for the protection of client information is sound and based on industry practices. Additionally, PlanITROI can provide tamper-proof boxes and witness destruction for any site, and region per client request.

PlanITROI follows all NIST and Department of Defense (DOD) guidelines for executing all PlanITROI ISO procedures as illustrated below.

Data Destruction – Secure Steps
Data Erasure
Erasure System Forces Operator to… Erase, Record & Report Results
Erasure System provides shop floor control over erasure operator forcing the adherence to Client’s SLA’s for data eradication. In addition, the System provides test results and automatic next steps to the operator while recording every step in the process and reporting to the Client by Serial Number on Drive and tracing it back to the SN on Unit
Data Eradication: Quality Control
Within the System, unlimited QC checks can be set up based on client and type of product. If there are issues, we will not allow it to move to finished goods.

How do we ensure the protection of confidential client information?

Since 2001, PlanITROI has processed over 60 million media devices (HDD, Tape, SSD, Flash, etc.) and destroyed massive amounts of data stored on them, we have never had an incident of client’s confidential information being exposed. PlanITROI has never been reprimanded for improper use of confidential information as an onsite and offsite partner. Our methodology for the protection of client information is sound and based on industry practices — PlanITROI has demonstrated this with all its clients.

PlanITROI follows all NIST and Department of Defense (DOD) guidelines for executing all PlanITROI ISO procedures.

PlanITROI Data Security Policy (depot, onsite, & mobile):

Certified ISO 27001 media sanitation process standards to ensure 100% data safe outcomes, with redundancy and quality checks.
All media is erased utilizing certified drive erasure programs that are compliant with NIST SP 800.88 or DOD 5220.22-M standards depending on our client’s requirements
PlanITROI’s data overwrite process is audited monthly to ensure compliance with the most up-to-date erasure standard, in accordance with the National Institute of Standards and Technology Guidelines for Media Sanitation. For more information: http://csrc.nist.gov/publications/drafts/800-88-rev1/sp800_88_r1_draft.pdf)
PlanITROI’s Data Destruction and Erasure Standards shall at all times be compliant with NIST SP 800.88 standards, Office of Emergency Management (OEM), as well as compliant with the Sarbanes-Oxley Act, the Gramm-Leach-Bliley Act (GLBA), and the Health Insurance Portability and Accountability Act (HIPAA)
Certificates of Data Destruction and Recycling are standard
All devices that have memory and data storage features, including flash drives, removable media, mobile phones, printing devices, PCs, tablets, etc., and any other media that store data are addressed.

Do we have a process in place to protect hard drives removed from PCs for physical destruction prior to that destruction taking place?

Yes. PlanITROI currently has a technician onsite who protects hard drives removed from PCs for physical destruction by keeping them in a locked bin until they are ready to be degaussed.

Note: PlanITROI’s onsite technician has received hard drive assemblies that are too big to fit into the degausser. Our technician, who goes to great lengths to abide by PlanITROI’s strict client data protection guidelines, dismantles the hard disk boxes so that they can fit into the degausser.

Do we have audit procedures in place to ensure that all data is removed from all equipment?

Erasure System Forces Operator to… Erase, Record & Report Results

Erasure System provides shop floor control over erasure operator forcing the adherence to Client’s SLA’s for data eradication. In addition, the System provides test results and automatic next steps to the operator while recording every step in the process and reporting to the client by serial number (SN) on Drive and tracing it back to the SN on Unit.

Data Eradication: Quality Control

Within the System, unlimited QC checks can be set up based on client and type of product. If there are issues, we will not allow it to move to finished goods.

Below is PlanITROI’s process for data erasure and auditing.

Describe the industry standards for data destruction that PlanITROI meets. What are our auditing procedures to ensure compliance with industry standards?

PlanITROI’s industry standards for data destruction follow NIST SP 800-88 processes. These include media erasure methods utilizing media wiping of 1x pass minimum, degaussing, and shredding. Cryptographic erasure and data erasure methods are utilized on solid-state hard drives. Auditing is performed multiple times, first during the Tabernus wipe, then during internal and random checks, and once again at PlanITROI’s Denville, NJ facility.

What onsite data destruction services do we offer?

PlanITROI offers the following data destruction solutions onsite: data wiping, shredding and degaussing.

PlanITROI offers both mobile on-site as well as off-site high-volume hard drive shredding services.

A. Mobile on-site is done within a PlanITROI secure truck

B. Off-site is done within a PlanITROI secure facility

Both have the capabilities of video recording if needed for visual verification. Disposing of the destroyed hard drives consists of placing the remnants of the destroyed hard drives in a locked sealed bin. The locked bin is wrapped in black plastic and sent back to PlanITROI’s Denville, NJ facility via FedEx Secure freight.