Identify the media, not just the device
Your inventory should distinguish hard disk drives, solid-state drives, removable media, and storage inside servers or other devices. Tell us whether drives are accessible, whether equipment is damaged, and whether serial-number reconciliation is required.
A box of loose drives and a rack of storage systems require different preparation. Include the approximate quantities and the business requirements that apply to each group, without emailing sensitive files, credentials, or copies of the data.
Choose requirements around your information
Your organization should define what outcomes it needs for each media type and whether equipment is intended for reuse or destruction. Discuss method selection, the location of the work, verification, and handling of failures before the project is agreed.
NIST’s SP 800-88 Revision 2 media sanitization guidance, published in September 2025, addresses establishing a sanitization program appropriate to the information and media involved. It is a planning reference, not a claim that GreenLink holds a certification.
Decide what your records need to show
Before release, agree on the inventory, who may transfer custody, and how exceptions will be handled. If you need a certificate of destruction or other evidence, define the required fields and confirm those deliverables in the project scope.
- Device or media identifiers and expected quantities.
- Handoff dates and parties responsible for the equipment.
- The agreed processing method and completion evidence.
- How missing, unreadable, or failed items will be reconciled.
These are requirements to discuss, not a promise that every project includes every document or processing option.
Common questions
Can I request on-site or witnessed destruction?
Include that requirement in your inquiry. Location, method, equipment suitability, and availability need to be confirmed; this site does not advertise a standing mobile shredding service.
Does a destruction certificate establish compliance by itself?
A certificate records a defined service outcome. Your organization should review the complete handling process, contract, evidence, and applicable obligations with its responsible security or compliance team. No blanket compliance guarantee is made here.