NIST 800-88 aligned media sanitization in Tampa Bay: every drive inventoried at the serial level, sanitized or destroyed to standard, and documented with a certificate of destruction tied to the device, under a complete digital chain of custody.
The most expensive thing in your storage closet
The riskiest asset your organization owns is often a hard drive nobody is tracking. Retired laptops, servers, copiers, and phones leave the building carrying customer records, patient data, financials, and credentials. If that data resurfaces, the cost is measured in regulatory fines, litigation, and headlines, not in the price of the hardware. Companies have paid nine-figure penalties for getting this step wrong.
What secure destruction includes
- Serial-level intake inventory of every data-bearing device
- Media sanitization aligned to NIST 800-88 (clear, purge, or destroy, matched to media type and your policy)
- Certificate of destruction per asset, tied to the device serial number
- Complete digital chain of custody from pickup through final disposition
- Physical destruction available for drives that policy requires shredded
- Local Tampa Bay processing: drives are not shipped out of the metro
Built for compliance and security teams
American Circular is engineered to NIST 800-88 standards and built for complete digital chain of custody, so HIPAA, GLBA, SOX, and FERPA obligations are met with documentation your auditors can stand behind. R2v3 certification is in process, targeted late this year.
Frequently asked questions
Do you provide a certificate of destruction?
Yes. Every data-bearing device receives a certificate of destruction tied to its serial number, backed by an auditable digital chain of custody from pickup through final disposition.
Is wiping enough, or do drives need to be shredded?
NIST 800-88 defines three levels (clear, purge, destroy) matched to media type and data sensitivity. We align the method to your policy: verified sanitization preserves resale value where appropriate, and physical destruction is available where policy requires it.