How do you guys actually handle drive wipe documentation when decommissioning hardware?

Sorry to answer the first question, it depends on the customer. For the most part, a certificate/document is more than enough but if they need more they are welcome to request more which has been done in the past. Such as pick up sign off forms along with a certificate for each item and if an item couldn't be wiped then documentation about what was done with it and business justification

Hey, thanks for the question, apologies I only really partially described what out data guys did. Here's a high level of the whole process which I hope answers your question but if it doesn't feel free to let me know. 1) Customer reaches out, says they have tech that needs recycling. 2) We provide them a form to fill out with things such as: Site address Primary contact details Secondary contact details Collection details (Such and date and time and quantity of items being collected and the type of tech being collected What does the customer want done with the tech (Destruction or not) 3) Then a technician will call the contact before pick up to let them know they're on their way and estimated time of arrival 4) Technician arrives on site, photographs what gets picked up and scans everything before loading it onto the truck. 5) Site contact signs off on pick up. 6) Technician goes back to the warehouse, puts everything onto the pallet, wraps it and adds the pick up number and labels the pallet. 7) Technician loads up the scanned tech into the database in the format of: Hardware type, Make, Model. Serial, asset number. Uploads a scanned copy of the pick up sign off and any additional photos that were taken so that its all in the same pickup/case number. 8) Data techs take the pallet, open the case, do their scan of the pallet to make sure everything is there. 9) Follow data destruction process using Blanco then upload all their own recorded evidence to the case. (This will highlight if anything has gone missing or potentially stolen while it was sitting on the pallet) Everything is now in 1 case per collection with all pickup evidence, sign off records, data destruction or Blanco certificates, etc. When audit comes they don't usually ask for everything as that will be ALOT of work on their end, instead they'll ask for a summary of our records, then select maybe 25-50 cases then we provide all records for the cases they've requested just to make sure everything lines up or if there's any issues. (Generally there's not much issues because we had worked with them before hand to identify their requirement and make sure we suffice our regulators and laws etc. I hope that helps