Introduction
Solidaritech receives donated devices from individuals, businesses and organisations, and we take the protection of donor data extremely seriously. Every device received by Solidaritech is treated as potentially containing sensitive information and is sanitised before refurbishment, reuse or recycling.
We maintain documented data sanitisation procedures designed to align with recognised industry best practice, including the principles set out in NIST SP 800-88 for media sanitisation. Devices that cannot be successfully sanitised and verified are not reused and are physically destroyed and recycled.
Laptop and Desktop Data Sanitisation
Data Sanitisation
Once a machine has been assessed as operational, we commence the data sanitisation process.
For traditional hard disk drives (HDDs), we use full-disk overwrite methods using industry-standard data erasure tools to overwrite all accessible storage areas of the drive. Where supported by the device, verification is performed to confirm successful completion of the sanitisation process.
For solid state drives (SSDs), we use manufacturer-supported Secure Erase, NVMe Sanitize, cryptographic erase, or equivalent device-supported sanitisation methods where available. These methods are preferred for SSDs because modern solid state storage technologies may not respond reliably to traditional overwrite-only approaches.
Where a storage device cannot be successfully sanitised, verified, accessed, or repaired, the device is physically destroyed and recycled. Such devices are never reused or passed on to beneficiaries.
Operating System Installation
Following successful sanitisation, the most appropriate operating system is installed for the intended recipient. This process takes place only after the previous data has been removed from the device.
Other Media Sanitisation
From time to time, we receive other forms of storage media including USB flash drives, memory cards, removable disk drives and similar devices.
Where these devices are suitable for reuse, they are sanitised using the same principles applied to computers and other donated devices. Where sanitisation cannot be completed or verified, the media is physically destroyed and recycled rather than reused.
In all cases, donor data is removed before refurbishment, reuse or redistribution.
Need a Bespoke Data Destruction Process?
Every organisation’s requirements are different. Whether you’re working to internal information security policies, customer contractual requirements, Cyber Essentials controls or other data protection obligations, we’d be happy to discuss your needs before donating equipment.
Our team can advise on the most appropriate sanitisation or destruction approach for the devices you wish to donate and explain how donated equipment is processed through our refurbishment workflow.
Contact us to discuss your requirements.