Contributor: Ana Pacheco, Director, Quality Assurance
When organizations think about IT asset disposition, the first concern is almost always the same:
What happens to our data once equipment leaves our hands?
It’s a valid concern, and the answer isn’t always simple. At Homeboy Electronics Recycling, data security isn’t a single step in our process — it’s built into every step, from pickup to final reporting. Here’s what that looks like.
It Starts With Standards — Not Assumptions
At Homeboy, our globally recognized standards guide how we process customer data, ensuring it’s handled appropriately.
We are certified to R2v3 (Responsible Recycling), NAID AAA, ISO 9001, ISO 14001, and ISO 45001, and we adhere to NIST SP 800-88 requirements. These standards define how data must be cleared, purged, or destroyed, based on verified methods (not preference).
Depending on the device and requirement, we implement logical data wiping using ADISA-certified software and/or physical destruction. Every asset is processed according to these protocols, regardless of how the device arrives to us (even when pre-wiped by a customer).
Full Visibility, Down to the Serial Number
Security without documentation is incomplete. Homeboy Electronics Recycling tracks and reports on each data-bearing device individually to ensure no device is left unprocessed.
As our client, you can receive an array of reports, including, but not limited to:
- Certificate of Data Destruction. This includes the verified method of data sanitization.
- Audit Report. This includes the make, model, serial number, and customer asset tag of each device processed.
- Certificate of Recycling. This includes the counts and weights of each device category processed.
This level of reporting creates a clear, defensible record of what happened to every asset, so you can rest assured your data has been handled appropriately and securely.
The Chain of Custody Is Continuous
Data protection doesn’t begin in the warehouse — it begins at pickup. Our NAID AAA-approved drivers handle all customer equipment as if it contains the most sensitive data — because it could:
- Our drivers securely package your equipment and load it into our GPS-tracked vehicles, then transport it back to our warehouse.
- Our vehicles take controlled routes, never making unnecessary stops along the way.
- For organizations with stricter requirements, sealed or dedicated transport can be arranged.
Every step is designed to eliminate gaps in custody.
Controlled Environment, Verified Outcomes
Once onsite, devices are handled in our secured, access-controlled facility that is monitored with 24/7 surveillance and staffed only with NAID background-checked personnel.
Beyond process, verification matters — which is why we perform monthly QC checks on randomly selected devices to confirm that data sanitization has been completed thoroughly and in accordance with our certifications.
This ensures the process is not only followed, but validated.
Flexible Options Based on Risk Tolerance
Not every organization approaches risk the same way.
For environments requiring maximum control, onsite data destruction is available. This ensures data never leaves the premises. In addition, Homeboy maintains $10M in total cyber liability coverage ($5M primary + $5M excess), providing an added layer of protection and accountability.
Transparency Over Assumptions
Secure IT asset disposition isn’t about claiming compliance. It’s about demonstrating it, and replacing uncertainty with clarity.
We encourage you to visit our facility so you can see our process firsthand. Or, feel free to contact us with your questions. We’re here to ensure you feel confident in entrusting your ITAD to the Homeboy Electronics Recycling team.
About the Author
About the AuthorAna Pacheco has been with Homeboy Electronics since 2016. She is a graduate from the University of Washington, in Environmental Studies, Urban Design and Planning apacheco@homeboyrecycling.com