"We recycled it" is not the same as "the data is provably gone." American Circular is built to deliver the second one, on every drive, with the paperwork to prove it.
NIST 800-88 aligned media sanitization in Tampa Bay: every drive inventoried at the serial level, sanitized or destroyed to standard, and documented with a certificate of destruction tied to the device, under a complete digital chain of custody.
The most expensive thing in your storage closet
The riskiest asset your organization owns is often a hard drive nobody is tracking. Retired laptops, servers, copiers, and phones leave the building carrying customer records, patient data, financials, and credentials. If that data resurfaces, the cost is measured in regulatory fines, litigation, and headlines, not in the price of the hardware. Companies have paid nine-figure penalties for getting this step wrong.
What secure destruction includes
- Serial-level intake inventory of every data-bearing device
- Media sanitization aligned to NIST 800-88 (clear, purge, or destroy, matched to media type and your policy)
- Certificate of destruction per asset, tied to the device serial number
- Complete digital chain of custody from pickup through final disposition
- Physical destruction available for drives that policy requires shredded
- Local Tampa Bay processing: drives are not shipped out of the metro
Built for compliance and security teams
American Circular is engineered to NIST 800-88 standards and built for complete digital chain of custody, so HIPAA, GLBA, SOX, and FERPA obligations are met with documentation your auditors can stand behind. R2v3 certification is in process, targeted late this year.
FAQ
Do you provide a certificate of destruction?
Yes. Every data-bearing device receives a certificate of destruction tied to its serial number, backed by an auditable digital chain of custody from pickup through final disposition.
Is wiping enough, or do drives need to be shredded?
NIST 800-88 defines three levels (clear, purge, destroy) matched to media type and data sensitivity. We align the method to your policy: verified sanitization preserves resale value where appropriate, and physical destruction is available where policy requires it.
Are you R2v3 certified?
Our R2v3 certification is in process, targeted late this year. The facility was built from the ground up to the R2v3 standard, and our processes are engineered to it today.
Can you support HIPAA, GLBA, SOX, or FERPA obligations?
Yes. Serial-level inventory, NIST 800-88 aligned destruction, per-device certificates, and full chain-of-custody records give compliance teams the documentation those frameworks expect at the disposal step.
Do you destroy drives on-site or at your facility?
Processing happens at our Clearwater facility under a tracked chain of custody. If your policy requires witnessed or on-site destruction, ask when you request a quote and we'll scope it.