Secure Data Destruction as Part of Your E-Scrap Process
When corporate operators decommission electronic equipment — servers, workstations, storage arrays, or industrial computers — two obligations arise simultaneously: the responsible recovery of the precious metals contained in those devices, and the secure, certified destruction of any data stored on them.
Suran Recycling addresses both within a single, documented process. Before e-scrap material enters our precious metal recovery pathway, all storage media is subject to certified data destruction in accordance with applicable data protection legislation, including GDPR and Romanian Law 190/2018.
What We Destroy Data From
We accept storage media as part of e-scrap lots or as standalone submissions from corporate clients:
- Hard disk drives (HDD) — all formats and capacities
- Solid-state drives (SSD) — including NVMe and M.2 formats
- Embedded storage in servers, workstations, and industrial equipment
- Other electronic storage media submitted as part of e-scrap lots
Our Data Destruction Methods
Software-Based Erasure Where the device is functional, certified software erasure is performed in accordance with NIST SP 800-88 or DoD 5220.22-M standards. This method overwrites all data on the storage medium, rendering it unrecoverable before the device enters our precious metal recovery process. A certificate of erasure is issued for each unit processed, confirming the standard applied and the date of destruction.
Physical Destruction Where software erasure is not possible — due to device failure, media type incompatibility, or client requirement — physical destruction is carried out. The storage medium is shredded to a degree that makes data recovery technically impossible under any circumstances. A certificate of destruction is issued for each unit or lot, and the destroyed material proceeds to our standard e-scrap precious metal recovery process.
What You Receive
Every data destruction assignment at Suran Recycling produces a complete documentation package:
- Serial number recording of all units received
- Certificate of Erasure or Certificate of Destruction per unit or per lot
- Destruction method applied and standard referenced
- Date and location of destruction
- Chain of custody record from receipt to completion
Documentation is structured for your internal compliance records, GDPR audit files, and any external regulatory requirements applicable to your organisation.
Why This Matters for Your Organisation
Disposing of electronic equipment without certified data destruction exposes your organisation to the risk of data breaches, regulatory penalties under GDPR, and reputational damage. The obligation to ensure secure data destruction before disposal applies regardless of whether the equipment is being recycled or processed for precious metal recovery.
By combining certified data destruction with precious metal recovery through a single partner, your organisation reduces the number of custody transfers, simplifies compliance documentation, and recovers the full residual value of the equipment in a single process.
Legal Framework
Our data destruction service is designed to support your organisation’s compliance with:
- Regulation (EU) 2016/679 — General Data Protection Regulation (GDPR), in particular Art. 5(1)(f) requiring that personal data be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss or destruction
- Romanian Law 190/2018 on measures implementing GDPR
- ISO/IEC 27001 — Information Security Management (Suran Recycling is ISO 27001 certified)
- NIST SP 800-88 — Guidelines for Media Sanitisation
Request a Data Destruction Assessment
Contact our team with a description of your equipment — device types, quantities, and any specific compliance requirements — and we will provide a tailored service proposal.
All data destruction assignments are treated as strictly confidential. An NDA is available on request before any material details are shared.
