Resources
The obligations, in plain English
Reference pages for operators who have just been handed a requirement. Answered in the first paragraph, sourced to the primary document, kept current, and written for the United States.
September 2, 2026 · United States
How to automate chain of custody in ITAD
Chain of custody is not a document you produce at the end. It is a claim about every device you touched, and automating it means capturing the evidence at the moment the work happens rather than reconstructing it after.
August 30, 2026 · United States
Verification and validation are not the same thing
Revision 2 made them two separate obligations, recorded separately. You can verify every drive you process and still have no validation at all — and that is the gap an assessor finds first.
August 17, 2026 · United States
How long must you keep a certificate of destruction?
Three to seven years is the working answer. The real answer is set by your client's regulator, not by your client — and often not by anything they will tell you unprompted.
August 17, 2026 · United States
NIST SP 800-88 Rev. 2 — what changed, and what you have to do
Revision 1 was withdrawn on September 26, 2025. If your disposal policy, your contracts or your certificate template still cite it, they cite a withdrawn document. Here is what changed and what to update.
We're on a mission to bring automation to ITAD
Interested in hearing more, or got something you'd like to talk through? Get in touch.