Question 1

Is onsite hard-drive destruction worth the premium over offsite?

Accepted Answer

Onsite hard-drive destruction earns its premium when a data classification, a customer contract, or an internal policy requires that drives never leave your building intact, and it usually does not earn it for routine refreshes of standard office hardware. Published US benchmarks put physical destruction at roughly $4 to $20 per drive offsite and $10 to $40 per drive onsite, with one pricing comparison putting the onsite premium at 50% to 100% plus a per-visit minimum of about $90 to $300, and another putting it at 20% to 30% [8][9]. What the money buys is custody rather than a better shred: NAID AAA's mobile service platform requires a certified provider to destroy media on your premises unless you sign a written agreement saying otherwise, which closes the transport window entirely [3]. Offsite destruction under the same certification is not unsupervised, since the program sets locked-cab and locked-box vehicle rules, fleet route tracking, and seven-year criminal record screening for anyone who handles media [3]. Because most of the onsite premium is a fixed mobilization cost, volume decides the economics: at 25 drives it can nearly double the bill, and at several hundred it rounds to noise [9][10].

Question 2

Does a mid-market company need an RPRA-registered provider?

Accepted Answer

A mid-market company retiring its own laptops and servers almost never carries an obligation under Ontario's Electrical and Electronic Equipment Regulation, and nothing in that regulation requires it to hire an RPRA-registered provider. Responsibility sits with producers, defined as the brand holder resident in Canada or, failing that, the Ontario importer or first marketer of new equipment supplied into the province, and with the haulers, refurbishers, and processors that handle used equipment [1][3]. The regulation's hauler definition explicitly excludes anyone arranging transport of equipment they generated themselves, so moving your own retired assets creates no registrant role [1]. Registered status still matters commercially, because recovered weight counts toward a producer's management requirement only where a processor registered under section 22 handled it, and RPRA publishes every registrant by role: 18 ITT/AV processors as of July 29, 2026 [1][5][6]. Registration records an administrative filing rather than a security or environmental audit, so it belongs alongside contract terms and certification checks instead of replacing them [7][14].

Question 3

Do Ontario ITAD providers publish pricing?

Accepted Answer

Most do not. A check of seven Ontario ITAD and secure-destruction providers on August 17, 2026 turned up a published per-unit rate on exactly one site: Carbon Neutral Shredding in Toronto lists "Cost? $10/hard-drive including e-mailed documentation," with extra charges possible if a drive still has to be pulled from a machine [1]. Every other provider checked, among them Quantum Lifecycle Partners [3], Greentec in Cambridge [8], ALTA E-Solutions [4], Blue-Pencil [6] and eCycle Solutions [7], publishes no rate card and routes pricing to a custom quote. The reason is structural: an ITAD price depends on volume, media mix, pickup logistics, documentation scope and what the retired hardware resells for. That is why Ontario's public-sector buying group asks bidders for a maximum rate plus a minimum percentage of resale revenue returned to the customer instead of a single number [10].

Question 4

What documentation should a mid-market ITAD engagement produce?

Accepted Answer

A mid-market ITAD engagement should produce seven linked records: a serialized inventory of every asset collected, chain-of-custody documentation for each handoff, a certificate of data destruction or sanitization that names individual serial numbers, an exception report covering any device that failed sanitization or never arrived, a certificate of recycling showing material weights and downstream disposition, a settlement statement for resold assets, and a final disposition report that reconciles back to the submitted inventory. NIST SP 800-88 Rev. 2 specifies what belongs on the destruction record itself, including manufacturer, model, serial number, media type, the sanitization method and technique, the tool and its version, the verification method, and the identity and signature of whoever performed and validated the work [1]. NAID AAA certification separately requires a provider to record the serial numbers of hard drives it destroys and return that log to the customer, and to leave written documentation naming any drive that failed a wipe [3]. Reconciliation is the step buyers skip most often and the step that surfaces losses: a records reconciliation run during one Morgan Stanley decommissioning found 42 servers missing, all potentially holding unencrypted customer data [8].

Question 5

Does NAID AAA certification cover onsite hard-drive destruction?

Accepted Answer

NAID AAA covers onsite hard-drive destruction only when the provider holds the mobile/onsite endorsement for hard drives at the location doing the work. i-SIGMA does not issue the certification as one blanket badge: it is granted against a service platform, either facility-based or mobile/onsite, combined with endorsements for the specific media a company destroys, including paper, micro media, hard drives, and solid-state devices [1][2]. A company certified only for facility-based paper shredding has never been audited against specification 4.23, the on-premises requirement that applies to the mobile platform alone, and its certificate shows that, because the endorsement lines on an i-SIGMA certificate name the platform, the media types, and the covered street addresses [2][4]. Ask for a copy of the current certificate and confirm the listing through i-SIGMA's certified-provider directory before treating onsite drive destruction as in scope [3][5].

ITAD & Data Destruction

Is onsite hard-drive destruction worth the premium over offsite?

Does a mid-market company need an RPRA-registered provider?

Do Ontario ITAD providers publish pricing?

What documentation should a mid-market ITAD engagement produce?

Does NAID AAA certification cover onsite hard-drive destruction?