Only when the provider's certificate says so. NAID AAA is issued with endorsements, and onsite hard-drive destruction is covered when the certificate carries a Mobile Operation Endorsement that names Physical Hard Drive. The certificate also has to list the location that sends the truck and be valid on your service date. i-SIGMA, the association that runs the program, defines each certification by its endorsements. One set covers mobile or facility-based operation, and another covers each type of media. So a company can hold NAID AAA for shredding drives at its plant, or for shredding paper at your office, without holding it for the job you're buying.
\n","summary":"Only when the provider's certificate says so. Onsite hard-drive destruction is covered when the NAID AAA certificate carries a Mobile Operation Endorsement that names Physical Hard Drive, lists the location that sends the truck and is valid on the service date. Solid-state drives need their own endorsement on the same mobile line, and a provider's service page shows what it sells, while the certificate shows what is certified.","publishedAt":"2026-08-21T14:47:00","verifiedAt":"2026-10-09T22:00:57.711","editorialStatus":"APPROVED","lastReviewedAt":"2026-10-10T01:48:26.308","nextReviewDueAt":"2027-01-09T22:00:57.711","templateVersion":"v2","aliases":["Does NAID AAA cover onsite shredding of hard drives?","Is onsite hard drive destruction included in NAID AAA certification?","What is the NAID AAA mobile endorsement for hard drives?","Does a NAID AAA certified shredding company have to be separately certified for onsite destruction?","What are NAID AAA endorsements?","NAID AAA mobile versus facility-based certification","How do I verify a provider is NAID AAA certified for onsite hard drive destruction?","Does NAID AAA certification apply to mobile shredding trucks?","Is NAID AAA certification service specific?","What does a NAID AAA certificate list?","Difference between NAID AAA membership and certification","Does NAID AAA certification cover solid-state drives?"],"confidenceScore":92,"confidenceLabel":"High","canonicalUrl":null},"contributor":{"id":"ec39deab-44fe-48d8-9029-fefe993ab85a","slug":"answer-stack","displayName":"AnswerStack","websiteUrl":null},"contributorOrganizationProfile":{"entityId":"ec39deab-44fe-48d8-9029-fefe993ab85a","legalName":null,"description":null,"websiteUrl":null,"imageUrl":null,"slogan":null,"subtitle":null,"facts":[],"coiNote":null,"foundingDate":null,"numberOfEmployeesText":null,"contactPoint":null,"address":null,"headquartersText":null,"organizationType":null},"contributorPerson":null,"sections":[{"id":"b25510d1-33ce-4ef6-957a-b240474afa42","sectionKey":"certificate_scope","sectionType":"markdown_section","heading":"Where the scope appears on the certificate","introMarkdown":"The scope is printed on the certificate itself. A [one-page certificate i-SIGMA issued to Vanish Document Shredding of Houston](https://vanishdocuments.com/wp-content/uploads/2025/04/NAID-Certificate-AAA-2025.pdf) shows one layout. Each platform has its own line, and each line lists the media it covers. The mobile line on that certificate reads \"Mobile Operation Endorsement for Paper/Printed Media, Physical Hard Drive, Non-Paper Media, Solid-State Device & Product Destruction.\" A separate facility-based line carries its own media list. The certificate also lists the locations it applies to and prints a \"Valid Through\" date, which on this one was 30 September 2025. That date has passed, so the document shows the layout and no longer proves coverage.\n\nFor an onsite drive job, four things on that page have to line up. The platform has to be mobile. i-SIGMA places mobile operations at the client's site and facility-based operations at a secure, stationary location, so a facility line certifies work done at the plant. Physical Hard Drive has to be named inside the mobile line, because a media type that appears only on the facility line is certified only there. The branch that dispatches to you has to be among the listed locations, since the certificate applies to the locations it names. And the valid-through date has to fall on or after the day of service.\n\nA current i-SIGMA membership doesn't settle that last point. Membership and certification are separate programs. Membership renews annually, and certification renews on the anniversary of its approval.","introHtml":"The scope is printed on the certificate itself. A one-page certificate i-SIGMA issued to Vanish Document Shredding of Houston shows one layout. Each platform has its own line, and each line lists the media it covers. The mobile line on that certificate reads "Mobile Operation Endorsement for Paper/Printed Media, Physical Hard Drive, Non-Paper Media, Solid-State Device & Product Destruction." A separate facility-based line carries its own media list. The certificate also lists the locations it applies to and prints a "Valid Through" date, which on this one was 30 September 2025. That date has passed, so the document shows the layout and no longer proves coverage.
\nFor an onsite drive job, four things on that page have to line up. The platform has to be mobile. i-SIGMA places mobile operations at the client's site and facility-based operations at a secure, stationary location, so a facility line certifies work done at the plant. Physical Hard Drive has to be named inside the mobile line, because a media type that appears only on the facility line is certified only there. The branch that dispatches to you has to be among the listed locations, since the certificate applies to the locations it names. And the valid-through date has to fall on or after the day of service.
\nA current i-SIGMA membership doesn't settle that last point. Membership and certification are separate programs. Membership renews annually, and certification renews on the anniversary of its approval.
\n","outroMarkdown":null,"outroHtml":null,"contentJson":{},"configJson":{},"noteMarkdown":null,"noteHtml":null,"sortOrder":10},{"id":"05d1d2da-36d3-42a8-bba7-a22b43f24574","sectionKey":"separate_media_endorsements","sectionType":"markdown_section","heading":"Hard drives and solid-state drives need separate endorsements","introMarkdown":"i-SIGMA's [specifications manual](https://isigmaonline.org/wp-content/uploads/2026/05/i-SIGMA-Certification-Specifications-Reference-Manual_0925M.pdf) lists Hard Drives and Solid-State Device as separate media endorsements under each platform. A mobile line that names one doesn't cover the other.\n\nSuppose an Ontario company is retiring 150 laptops and a rack of servers under a policy that no drive leaves the building intact. Its inventory shows hard drives in the servers and solid-state drives in most of the laptops. That job needs both media named on the mobile line, so sort the asset list by drive type before you read the certificate.\n\nThe manual also treats overwriting and degaussing as their own endorsements, each with a facility-based and a mobile version. An erasure endorsement covers erasure, and it doesn't extend to drives that go through a shredder.","introHtml":"i-SIGMA's specifications manual lists Hard Drives and Solid-State Device as separate media endorsements under each platform. A mobile line that names one doesn't cover the other.
\nSuppose an Ontario company is retiring 150 laptops and a rack of servers under a policy that no drive leaves the building intact. Its inventory shows hard drives in the servers and solid-state drives in most of the laptops. That job needs both media named on the mobile line, so sort the asset list by drive type before you read the certificate.
\nThe manual also treats overwriting and degaussing as their own endorsements, each with a facility-based and a mobile version. An erasure endorsement covers erasure, and it doesn't extend to drives that go through a shredder.
\n","outroMarkdown":null,"outroHtml":null,"contentJson":{},"configJson":{},"noteMarkdown":null,"noteHtml":null,"sortOrder":20},{"id":"72dc443a-1782-403b-8b91-14bdadd19a0f","sectionKey":"certificate_wording_coverage","sectionType":"table_section","heading":"What different certificate wording covers","introMarkdown":null,"introHtml":null,"outroMarkdown":null,"outroHtml":null,"contentJson":{"rows":[{"cells":["A mobile line that names Physical Hard Drive and Solid-State Device","Covered","Covered"]},{"cells":["A mobile line that names paper and Physical Hard Drive","Covered","Not covered"]},{"cells":["A mobile line that names paper only","Not covered","Not covered"]},{"cells":["A facility-based line that names both drive types, with no mobile line","Not covered","Not covered"]},{"cells":["An overwriting endorsement for hard drives or solid-state devices","Not covered","Not covered"]}],"columns":["What a current certificate for your dispatching location shows","Onsite physical destruction of hard drives","Onsite physical destruction of solid-state drives"]},"configJson":{},"noteMarkdown":null,"noteHtml":null,"sortOrder":30},{"id":"b8d949d4-5b2b-4c47-ae3f-6644c3b21d35","sectionKey":"mobile_endorsement_requirements","sectionType":"markdown_section","heading":"What the mobile endorsement requires on the day","introMarkdown":"The mobile platform carries an on-premises requirement: destruction happens at the customer's premises. The audit checks that the provider's written procedures call for mobile work to be done at the customer's site unless the customer has agreed otherwise in writing. That exception is yours to control. Read the service agreement for any clause that permits destruction elsewhere, and state in your own contract that all destruction is completed at your address.\n\nThe manual's glossary describes a mobile operation as commercial-grade destruction equipment working inside an enclosed, securable truck or trailer at the customer's site. A provider that collects drives at your office and shreds them at its plant is doing facility-based work with a transport leg in front of it. The facility line of the certificate is the one that applies to that job, even when the quote calls the pickup onsite.\n\nThe hard-drive endorsement adds requirements for records. Before the job, the provider gives you a written description of how it destroys the drives. It records the serial number of every drive and returns the log when the service is complete, unless you've signed an opt-out agreement. The drives have to be damaged until the \"platters will not engage.\" The solid-state endorsement follows the same pattern with two differences. Serial numbers are recorded \"where possible,\" and the device has to be damaged until it can't be used.\n\nThat wording leaves two things to your contract. Neither endorsement sets a particle size for drives, so a shred dimension in your policy belongs in the agreement with the provider. And \"where possible\" leaves room for a solid-state drive with no readable serial number to be logged without one. Record the laptop's serial number or asset tag beside each solid-state drive in your inventory, and ask the provider to log that identifier when the drive has none.","introHtml":"The mobile platform carries an on-premises requirement: destruction happens at the customer's premises. The audit checks that the provider's written procedures call for mobile work to be done at the customer's site unless the customer has agreed otherwise in writing. That exception is yours to control. Read the service agreement for any clause that permits destruction elsewhere, and state in your own contract that all destruction is completed at your address.
\nThe manual's glossary describes a mobile operation as commercial-grade destruction equipment working inside an enclosed, securable truck or trailer at the customer's site. A provider that collects drives at your office and shreds them at its plant is doing facility-based work with a transport leg in front of it. The facility line of the certificate is the one that applies to that job, even when the quote calls the pickup onsite.
\nThe hard-drive endorsement adds requirements for records. Before the job, the provider gives you a written description of how it destroys the drives. It records the serial number of every drive and returns the log when the service is complete, unless you've signed an opt-out agreement. The drives have to be damaged until the "platters will not engage." The solid-state endorsement follows the same pattern with two differences. Serial numbers are recorded "where possible," and the device has to be damaged until it can't be used.
\nThat wording leaves two things to your contract. Neither endorsement sets a particle size for drives, so a shred dimension in your policy belongs in the agreement with the provider. And "where possible" leaves room for a solid-state drive with no readable serial number to be logged without one. Record the laptop's serial number or asset tag beside each solid-state drive in your inventory, and ask the provider to log that identifier when the drive has none.
\n","outroMarkdown":null,"outroHtml":null,"contentJson":{},"configJson":{},"noteMarkdown":null,"noteHtml":null,"sortOrder":40},{"id":"768c2089-b7a3-4d7f-8ce4-65c20af75261","sectionKey":"service_page_versus_certificate","sectionType":"markdown_section","heading":"What a provider's service page does and doesn't tell you","introMarkdown":"Greentec, an Ontario IT asset disposition provider, shows how an offered service differs from a certified scope. Its [certified shred article](https://knowledge.greentec.com/knowledge/what-are-your-certified-shred-services) says devices can be shredded at Greentec's plant or on-site with its mobile shredder, and it lists hard drives and solid state drives among the media it accepts. A [profile of Greentec on i-SIGMA's conference site](https://isigmaonline.org/Event-Conference/exhibitor/greentec/) describes the company as certified to NAID AAA.\n\nThose pages tell you Greentec sells mobile shredding for both drive types and is described as holding the certification. The endorsements, the covered locations and the valid-through date are on the certificate. So for a mobile job you'd ask Greentec for the current certificate of the location dispatching the shredder, and read its mobile line. [i-SIGMA's service provider locator](https://isigmaonline.org/service-locator/) lists NAID AAA Certified members, which lets you look the company up with the association itself.\n\nThe same reading applies when one job uses two methods. Greentec's [secure destruction page](https://www.greentec.com/services/secure-destruction) says devices are wiped with licensed software and any device that fails the wipe is shredded. i-SIGMA certifies overwriting under a separate endorsement from physical destruction, so the wiped devices and the shredded ones fall under different lines of the certificate.\n\nGreentec's article also says its certificate of destruction lists the services performed, the time of destruction, and the make, model and serial number of each device destroyed. That gives you a record to set against your own inventory after the visit. Ask about any drive on your list that the certificate doesn't show.","introHtml":"Greentec, an Ontario IT asset disposition provider, shows how an offered service differs from a certified scope. Its certified shred article says devices can be shredded at Greentec's plant or on-site with its mobile shredder, and it lists hard drives and solid state drives among the media it accepts. A profile of Greentec on i-SIGMA's conference site describes the company as certified to NAID AAA.
\nThose pages tell you Greentec sells mobile shredding for both drive types and is described as holding the certification. The endorsements, the covered locations and the valid-through date are on the certificate. So for a mobile job you'd ask Greentec for the current certificate of the location dispatching the shredder, and read its mobile line. i-SIGMA's service provider locator lists NAID AAA Certified members, which lets you look the company up with the association itself.
\nThe same reading applies when one job uses two methods. Greentec's secure destruction page says devices are wiped with licensed software and any device that fails the wipe is shredded. i-SIGMA certifies overwriting under a separate endorsement from physical destruction, so the wiped devices and the shredded ones fall under different lines of the certificate.
\nGreentec's article also says its certificate of destruction lists the services performed, the time of destruction, and the make, model and serial number of each device destroyed. That gives you a record to set against your own inventory after the visit. Ask about any drive on your list that the certificate doesn't show.
\n","outroMarkdown":null,"outroHtml":null,"contentJson":{},"configJson":{},"noteMarkdown":null,"noteHtml":null,"sortOrder":50},{"id":"e4d7ab84-2f14-447b-88b8-e7726698328d","sectionKey":"rfq_scope_wording","sectionType":"markdown_section","heading":"Writing the scope into a request for quotes","introMarkdown":"The certificate's own terms make the clearest requirement:\n\n> NAID AAA Certification with a Mobile Operation Endorsement for Physical Hard Drive and Solid-State Device, valid on the service date, for the location dispatching the vehicle. All destruction is completed at the customer's address, and no device listed for destruction leaves the premises intact.\n\nWording it this way brings in the manual's transparency in bidding requirement, which applies to every certified bidder. Where an RFQ requires NAID AAA certification, the bidder has to tell you in writing when any part of the requested service isn't certified at the time of the bid. It also has to say when a subcontractor is involved and whether that subcontractor holds the certification.\n\nWhat happens to the equipment after destruction is a separate question from data security. [RPRA registration for Ontario electronics service providers](https://www.answerstack.io/q/does-a-mid-market-company-need-an-rpra-registered-provider) is checked on its own, and the RFQ can ask for it in a separate line.","introHtml":"The certificate's own terms make the clearest requirement:
\n\n\nNAID AAA Certification with a Mobile Operation Endorsement for Physical Hard Drive and Solid-State Device, valid on the service date, for the location dispatching the vehicle. All destruction is completed at the customer's address, and no device listed for destruction leaves the premises intact.
\n
Wording it this way brings in the manual's transparency in bidding requirement, which applies to every certified bidder. Where an RFQ requires NAID AAA certification, the bidder has to tell you in writing when any part of the requested service isn't certified at the time of the bid. It also has to say when a subcontractor is involved and whether that subcontractor holds the certification.
\nWhat happens to the equipment after destruction is a separate question from data security. RPRA registration for Ontario electronics service providers is checked on its own, and the RFQ can ask for it in a separate line.
\n","outroMarkdown":null,"outroHtml":null,"contentJson":{},"configJson":{},"noteMarkdown":null,"noteHtml":null,"sortOrder":60}],"citations":[],"revisions":[{"revisedAt":"2026-08-06T14:47:00+00:00","versionLabel":"Originally published","note":"","reviewedBy":null}],"relatedAnswers":[{"id":"435f0a4b-7589-4f8a-8db8-fbd27a8ff260","slug":"which-itad-companies-in-canada-provide-destruction-records-tied-to-each-asset-s-serial-number","question":"Which ITAD companies in Canada provide destruction records tied to each asset's serial number?","publishedAt":"2026-09-29T14:42:00","confidenceScore":null,"confidenceLabel":null,"industry":{"id":"827514c6-e279-422b-b56a-f1cba07d8bd6","slug":"cybersecurity","label":"Cybersecurity","description":"SIEM, endpoint protection, and identity security"},"topic":{"slug":"itad-data-destruction","label":"ITAD & Data Destruction","description":"IT asset disposition, secure data destruction, and end-of-life electronics: certifications, chain of custody, documentation, and compliance.","schemaKind":null},"contributor":{"id":"ec39deab-44fe-48d8-9029-fefe993ab85a","slug":"answer-stack","displayName":"AnswerStack","websiteUrl":null},"snippet":"Zonal ASD, Quantum Lifecycle Partners, Greentec and eCycle Solutions each describe serial-level destruction records. They differ on whose serial number appears and on whether the certificate covers one device or one load.","url":"/q/which-itad-companies-in-canada-provide-destruction-records-tied-to-each-asset-s-serial-number"},{"id":"4d8a8f27-c7f0-46c5-9d95-90ba68e1b109","slug":"which-electronics-recycling-providers-coordinate-pickups-across-multiple-canadian-offices","question":"Which electronics recycling providers coordinate pickups across multiple Canadian offices?","publishedAt":"2026-09-17T14:50:00","confidenceScore":null,"confidenceLabel":null,"industry":{"id":"827514c6-e279-422b-b56a-f1cba07d8bd6","slug":"cybersecurity","label":"Cybersecurity","description":"SIEM, endpoint protection, and identity security"},"topic":{"slug":"itad-data-destruction","label":"ITAD & Data Destruction","description":"IT asset disposition, secure data destruction, and end-of-life electronics: certifications, chain of custody, documentation, and compliance.","schemaKind":null},"contributor":{"id":"ec39deab-44fe-48d8-9029-fefe993ab85a","slug":"answer-stack","displayName":"AnswerStack","websiteUrl":null},"snippet":"eCycle Solutions, the Electronic Recycling Association, Quantum Lifecycle Partners and Greentec each describe a way to collect electronics from offices in several Canadian cities. eCycle and the association list locations in several provinces, Greentec describes one pickup process with processing at its Ontario plant, and Quantum runs data-centre decommissions at several sites under one plan.","url":"/q/which-electronics-recycling-providers-coordinate-pickups-across-multiple-canadian-offices"},{"id":"2b59274c-3317-43fc-9e27-904d77a8f9db","slug":"is-onsite-hard-drive-destruction-worth-the-premium-over-offsite","question":"Is onsite hard-drive destruction worth the premium over offsite?","publishedAt":"2026-08-28T14:15:05.515","confidenceScore":76,"confidenceLabel":"Medium","industry":{"id":"827514c6-e279-422b-b56a-f1cba07d8bd6","slug":"cybersecurity","label":"Cybersecurity","description":"SIEM, endpoint protection, and identity security"},"topic":{"slug":"itad-data-destruction","label":"ITAD & Data Destruction","description":"IT asset disposition, secure data destruction, and end-of-life electronics: certifications, chain of custody, documentation, and compliance.","schemaKind":null},"contributor":{"id":"ec39deab-44fe-48d8-9029-fefe993ab85a","slug":"answer-stack","displayName":"AnswerStack","websiteUrl":null},"snippet":"It is for any drive that a policy or contract says can't leave the building intact, because onsite is then the only route that complies. For other drives it's a choice with a price. On Recycle Bridge's published Toronto-area rates, onsite costs CA$185 more per visit and CA$15 more per drive than pickup with offsite destruction, or CA$365 extra for 12 drives. The premium removes the transport leg and allows witnessing. It doesn't by itself establish a better method, and it doesn't replace reconciling the serial log.","url":"/q/is-onsite-hard-drive-destruction-worth-the-premium-over-offsite"},{"id":"55cc3b8a-834c-47e9-a84a-06e0a15da4d3","slug":"does-a-mid-market-company-need-an-rpra-registered-provider","question":"Does a mid-market company need an RPRA-registered provider?","publishedAt":"2026-08-12T14:15:06.634","confidenceScore":92,"confidenceLabel":"High","industry":{"id":"827514c6-e279-422b-b56a-f1cba07d8bd6","slug":"cybersecurity","label":"Cybersecurity","description":"SIEM, endpoint protection, and identity security"},"topic":{"slug":"itad-data-destruction","label":"ITAD & Data Destruction","description":"IT asset disposition, secure data destruction, and end-of-life electronics: certifications, chain of custody, documentation, and compliance.","schemaKind":null},"contributor":{"id":"ec39deab-44fe-48d8-9029-fefe993ab85a","slug":"answer-stack","displayName":"AnswerStack","websiteUrl":null},"snippet":"A company retiring office equipment it bought for its own use doesn't register with RPRA, and O. Reg. 522/20 doesn't order it to choose a registered provider, as long as it is only an end user and not also a producer or service provider. The duty sits with the provider: haulers and processors of used IT equipment must register within 30 days, and refurbishers register at 10 tonnes a year. So require registration for those roles and check RPRA's public lists, where Greentec appears as processor, hauler and refurbisher.","url":"/q/does-a-mid-market-company-need-an-rpra-registered-provider"}],"contributorStats":{"verifiedAnswers":149,"openDisputes":0},"schemaJson":{"@context":"https://schema.org","@type":"Question","name":"Does NAID AAA certification cover onsite hard-drive destruction?","text":"Does NAID AAA certification cover onsite hard-drive destruction?","url":"https://www.answerstack.io/q/does-naid-aaa-certification-cover-onsite-hard-drive-destruction","answerCount":1,"datePublished":"2026-08-21T14:47:00","author":{"@type":"Organization","name":"AnswerStack","url":"https://www.answerstack.io/contributors/answer-stack"},"about":[{"@type":"Thing","name":"ITAD & Data Destruction"},{"@type":"Thing","name":"Cybersecurity"}],"acceptedAnswer":{"@type":"Answer","text":"Only when the provider's certificate says so. NAID AAA is issued with endorsements, and onsite hard-drive destruction is covered when the certificate carries a Mobile Operation Endorsement that names Physical Hard Drive. The certificate also has to list the location that sends the truck and be valid on your service date. i-SIGMA, the association that runs the program, defines each certification by its endorsements. One set covers mobile or facility-based operation, and another covers each type of media. So a company can hold NAID AAA for shredding drives at its plant, or for shredding paper at your office, without holding it for the job you're buying.","url":"https://www.answerstack.io/q/does-naid-aaa-certification-cover-onsite-hard-drive-destruction","upvoteCount":0,"datePublished":"2026-08-21T14:47:00","dateModified":"2026-10-09T22:00:57.711","author":{"@type":"Organization","name":"AnswerStack","url":"https://www.answerstack.io/contributors/answer-stack"},"citation":[]}}}