Data Security & Destruction Standards

Last updated: September 23, 2026

Protecting the data on your equipment is the most important part of what we do. This page describes the standards and controls New Gen Technology uses to sanitize and destroy data, track every device, and document the results for your auditors.

1. Our sanitization standard

Every data-bearing device we receive is sanitized using methods consistent with NIST Special Publication 800-88, Guidelines for Media Sanitization, the federal guideline widely used by government agencies, healthcare providers, financial institutions and schools. Depending on the media type and your requirements, we apply one of the three NIST levels:

• Clear: overwriting all user-addressable storage with non-sensitive data using validated software.
• Purge: firmware-level techniques such as secure erase, block erase or cryptographic erase that protect against laboratory recovery.
• Destroy: physical destruction such as shredding, crushing or drilling that makes media unusable and data unrecoverable.

Customers may request physical destruction of all media, for example for classified, PHI or high-sensitivity environments, instead of software sanitization.

2. Sanitization methods by device type

• Hard disk drives (HDD): verified software overwrite, or physical destruction.
• Solid-state drives (SSD, NVMe) and flash storage: firmware-based purge or cryptographic erase, or physical destruction.
• Phones and tablets: cryptographic erase through a verified factory reset of encrypted storage, confirmed free of accounts, locks and management enrollment.
• Servers, storage arrays and network equipment: drives are sanitized or destroyed individually, and configurations are reset to factory defaults.
• Loose drives, failed media and removable media: physically destroyed.

3. Verification and failed media

Every software sanitization is verified and logged by serial number. Any drive or device that cannot complete sanitization, fails verification, or cannot be tested is physically destroyed. Data-bearing Equipment is never resold or released to a downstream partner until sanitization or destruction is complete and recorded.

4. Chain of custody

• Custody begins at pickup by our team or arranged carrier, or on delivery to our facility.
• Each device is inventoried and tracked by serial number, asset tag or barcode from intake through final disposition.
• Equipment is reconciled against your inventory, and discrepancies are reported to you in the Audit report.
• Data-bearing Equipment awaiting processing is stored in access-restricted areas.

5. Facility and personnel security

• Processing areas are access-restricted and limited to authorized personnel.
• Personnel handling customer Equipment are trained in our data security procedures and bound by confidentiality obligations.
• Personnel are prohibited from accessing, viewing, copying or removing customer data, and from removing Equipment or media from controlled areas.
• Security procedures are reviewed regularly and updated as standards and technologies change.

6. Certificates and reporting

When a job is complete, we can provide documentation that supports your compliance and audit needs, including:

• certificates of sanitization or destruction listing each device by serial number or asset tag, the method used and the date;
• chain-of-custody records and inventory reconciliation;
• Audit and valuation reports; and
• recycling and environmental reporting.

We support customer security questionnaires, vendor reviews and on-site visits by appointment.

7. What we ask of customers

• Back up any data you need before releasing Equipment. We cannot recover or return data once Equipment is released.
• Remove Apple Activation Lock, Google Factory Reset Protection, MDM enrollment and BIOS passwords before shipping.
• Provide an accurate inventory, and tell us about any special handling or destruction requirements before pickup.
• Tell us if your organization requires a data protection agreement or business associate agreement.

8. Website and account security

Our website uses HTTPS encryption. Quote and contact forms are transmitted securely and delivered only to our business team. Please do not send passwords, full bank account numbers or other highly sensitive information through website forms. We will provide a secure method when that information is needed.

9. Reporting a security concern

If you believe you have found a security vulnerability on our website, or have a concern about how Equipment or data was handled, contact us right away. We investigate every report promptly and will not take action against good-faith security researchers who report issues responsibly and do not access or disclose others' data.

New Gen Technology LLC
San Antonio, Texas
Email: Accounts@new-gentech.com
Phone: +1 (201) 381-1965