Purpose
To ensure that all hardware, digital storage, and other resources are disposed of or reused in a manner that protects sensitive data and upholds security best practices.
Scope
Policy
1) Data Erasure
Before any device or storage media is reused, sold, or disposed of, all data is permanently removed using industry-standard data wiping tools or encryption key destruction.
2) Physical Disposal
Equipment that cannot be securely wiped or is no longer functional is physically destroyed or handed over to certified e-waste disposal vendors.
3) Reuse Protocols
Devices intended for reuse within the organization are reimaged and reset to factory conditions, ensuring no residual data remains.
4) Third-Party Vendors
When outsourcing disposal, TestInvite only partners with vendors that certify secure data destruction in compliance with applicable privacy regulations.
5) Record Keeping
Disposal and reuse actions are logged for audit purposes and retained for a minimum of 12 months.
Review
This policy is reviewed annually or as required by changes in applicable laws or business needs.