Data Security Services for San Francisco Bay Area Businesses
A retired laptop is not an empty laptop. Until the storage inside it is sanitized or destroyed, it is data at rest sitting in a closet, on a loading dock, or in the back of somebody’s car.
GreenCitizen handles that last step. We erase or physically destroy the storage in drives, servers, phones, tablets, copiers, and backup media — tracking every unit by serial number and closing every job with documentation your auditor can read.
Every Job Includes
- Serial-level tracking from intake to disposition
- Sanitization to NIST SP 800-88 Rev. 2
- Itemized Certificate of Destruction
- Processing inside the United States only
Data security doesn't end when the device leaves your office
Most organizations have a clear policy for data while a device is in service. The gap opens at disposal.
Decommissioned equipment carries the same PII, PHI, financial records, and internal documents it carried in production. A factory reset rarely removes it. Deleting a file removes the pointer, not the data, and residual data stays recoverable with tools that cost very little.
That exposure is a compliance problem before it is a security problem. None of the regulations governing your records stop applying because the hardware was retired.
The defense is a documented chain of custody: know which device held what, know what was done to it, and be able to prove both.
Still applies at disposal
Records retention and secure disposal obligations under:
Data Erasure or destruction — choosing a method
There are two ways to make data unrecoverable, and the right one depends on what happens to the hardware next.
Data Erasure - $5/device
Logical sanitization. The data goes; the device survives and can be resold, redeployed, or donated. This is the reuse-first path, and it is the one we recommend wherever the hardware still has life in it. It requires that the device powers on and that its storage responds to sanitization commands.
Physical Destruction - $20/device
The storage device is crushed and rendered permanently inoperable. Nothing is recovered from it, and nothing is recovered of it — the drive is done. This is the right call for failed drives, drives that won't power on, drives that refuse sanitization, and any situation where your policy requires destruction regardless of device condition.
If we start with erasure and a drive can’t be sanitized to standard, we destroy it. You are never left with a device in an unknown state.
Data erasure and media sanitization
We sanitize to NIST SP 800-88 Rev. 2, the current version of the federal media sanitization guideline, published in September 2025 to replace Revision 1. Rev. 2 defines the goal — Clear, Purge, or Destroy — and directs technique selection to IEEE 2883, the storage sanitization standard maintained by the drive industry itself.
That distinction matters more than it sounds, because the correct technique now depends on what kind of storage you have.
Physical Data Destruction
Every drive we destroy is logged into AGTAMS — our AI-powered GreenCitizen Total Accountability Management System — by make, model, and serial number before anything happens to it.
You keep a record. We keep the matching one. When it comes to destroying data, accountability is the product.
Beyond drives, we destroy phones, tablets, and flash media. For prototypes, failed products, and branded IT equipment, see our product destruction service.
-
Logged
Make, model, and serial number recorded in AGTAMS at intake.
-
Destroyed
The drive goes into the hard drive destroyer and comes out physically deformed and permanently unreadable.
-
Documented
You receive a Certificate of Destruction listing each individual device by serial and model number.
Four ways to get it done
Drop off at our Burlingame EcoCenter
Bring drives and devices to 1831 Old Bayshore Hwy, Suite 2, Burlingame, CA.
Open Monday through Friday. No appointment needed for small quantities.
Scheduled business pickup
We collect from your office or facility across the San Francisco Bay Area.
Pickup is free for businesses with five or more qualifying items; smaller loads and non-qualifying categories are quoted individually. Full details on our business recycling pickup page.
On-site destruction
For organizations whose policy requires it, we bring a portable destroyer to your facility.
Serial numbers are captured on site, your staff witnesses each drive being destroyed, and the equipment never leaves your control intact. The Certificate of Destruction follows.
Mail-in
Practical for remote offices and small volumes.
- Complete the mail-in destruction form.
- Enclose the form with your drives and ship certified mail to the address printed on it.
- Once drives and payment arrive, we destroy them and issue your Certificate of Destruction.
Pay by check enclosed with the package, or by credit card over the phone.
The Paper Trail
Serialized tracking runs through everything above. Each device is recorded in AGTAMS at intake and carries that record through sanitization or destruction to final disposition.
What you get back is a Certificate of Destruction or Data Destruction Certificate itemizing every device by make, model, and serial number, along with the method applied. It is an audit trail, and it is the piece most disposal vendors leave out.
Why organizations send us their drives
Operating Here Since 2005
GreenCitizen has served San Francisco Bay Area businesses and organizations for two decades from our Burlingame EcoCenter.
Processed in the United States
Everything we take in stays here. Nothing is exported. Our downstream processing vendors hold R2 and e-Stewards certifications, and material recovery is handled by partners we audit rather than brokers we don't.
Customers Served
GreenCitizen has served 75,019 San Francisco Bay Area businesses and 414,161 residents since 2005, diverting 34,006,783 pounds of e-waste in the process.