Is onsite hard-drive destruction worth the premium over offsite?

Onsite and offsite destruction usually end in the same place: a shredded drive and a certificate carrying your serial numbers. The premium buys a different custody model. With onsite service, a technician brings industrial destruction equipment to your dock or server room and reduces the drives before anything leaves your control. With offsite service, the drives go into locked containers, ride to a plant in a locked and fully enclosed vehicle box, and are destroyed there [3]. Both routes can carry NAID AAA certification, and both produce a certificate of destruction.

i-SIGMA, which administers NAID AAA, treats the two as separate certified service platforms rather than one service delivered two ways. Its published program description distinguishes mobile operations, which "occur at the client's site using on-site equipment," from facility-based operations, which are "performed at a secure, stationary location" [2]. Media types are scoped separately too, with a distinct endorsement for hard-drive physical destruction and another for solid-state devices [3]. A vendor that says it is NAID AAA certified has told you little about whether it is certified for the thing you are buying.

The rule that makes onsite mean something

Specification 4.23 of i-SIGMA's certification manual applies only to the mobile and onsite service platform, and it states that the "Applicant must perform information destruction services on the Data Controller's premises." The audit method requires the provider's own policy manual to say that "mobile destruction services must be performed at the Data Controller's site unless there is a written Data Controller agreement stating otherwise" [3]. A certified mobile provider therefore cannot load your drives, drive away, and destroy them at the plant while still billing it as onsite service, unless you have signed something permitting exactly that.

What onsite does not mean

Onsite service is not a tighter destruction standard. i-SIGMA's hard-drive endorsement requires that drives be "damaged to the point where the platters will not engage," with no separate particle-size figure attached, and that requirement holds whether the shredder sits in a truck at your dock or on a plant floor [3]. Onsite is also not a substitute for verification. NIST's current guidance describes verifying a destructive method as inspecting "the remnants of a destruction technique" and identifying "the equipment used with it," which is an observation-and-records exercise in both models rather than a per-drive test [1].

Published US benchmarks put physical destruction of a hard drive at roughly $4 to $20 per unit offsite and $10 to $40 per unit onsite. One industry pricing comparison states that onsite services add a 50% to 100% premium for security and convenience, with minimum charges of about $90 to $300 per visit [8]. A second published guide puts the gap much lower, "often 20-30% higher than off-site alternatives" [9]. Both figures circulate widely, and the spread between them is the honest answer: the premium is not a stable percentage, because it is mostly a fixed cost expressed as one.

Volume is what moves it. Small onsite jobs of 25 drives or fewer can run "as high as $40 per drive" [9]. Below 50 drives, per-unit costs commonly sit in the $15 to $20 band, while above 100 drives they fall to $7 to $10, and one comparison quotes as low as $4.25 per drive at 251 units or more [10][8]. Since a visit fee is charged once regardless of load, a $150 mobilization cost works out to $6 per drive on a 25-drive job and 30 cents per drive on 500.

The equipment is faster than the paperwork

Mobile throughput is high enough that shredding time rarely drives the bill. Shred-Tech's ST-5, sold as a portable unit and as an installation on shred trucks for onsite work, is rated at up to 750 hard drives per hour or up to 1,000 solid-state drives per hour, reducing a drive in about five seconds [11]. A 400-drive onsite job is therefore well under an hour of actual shredding, and most of the visit goes to staging and serial-number capture.

Canadian and US rates land in similar territory

Rates published outside the US benchmarks sit in the same band. Carbon Neutral Shredding, which serves Toronto and the surrounding region, publishes a flat $10 per hard drive on a page describing destruction performed in front of the customer, with a photograph of each drive and its serial number taken before destruction and a second afterward [12]. That page cites the Treasury Board of Canada's shredding standard rather than a third-party destruction certification, a reminder that a headline per-drive rate and an audited chain of custody are separate line items.

Onsite becomes the defensible default when the media is unencrypted, holds regulated or contractually restricted records, and could not be reconstructed if it went missing. NIST's framing helps here because it is about control rather than about shredders. SP 800-88 draws a line between media under organizational control and media that is not, and it counts work "being performed on an organization's site, under the organization's supervision" as still under the control of the organization [1]. Onsite destruction keeps the entire disposal event inside that boundary. Offsite destruction moves it outside, shifting the assurance from your own observation to a vendor's controls and records. NIST adds that legal or statutory requirements attached to certain sensitive data "can treat the loss of organizational control of ISM that have not been sanitized as a data breach" [1].

Regulation itself rarely mandates onsite. The FTC's Disposal Rule sets a standard of "taking reasonable measures to protect against unauthorized access to or use of the information in connection with its disposal," and lists as one such measure "after due diligence, entering into and monitoring compliance with a contract with another party engaged in the business of record destruction" [5]. NIST stays neutral on the same question, listing "Whether sanitization techniques should be conducted by the organization or a third party" and "Whether sanitization is performed on-site or off-site" among the factors an organization should weigh, alongside the anticipated volume of media, whether the media will be processed in a controlled area, and the cost of sanitization [1]. Neither instrument asks for a witness.

Where onsite gets written into policy anyway

Internal policy and customer contracts do more work here than statute does. Defense subcontracts and some healthcare and financial agreements specify that data-bearing media may not leave a facility intact, and acquisition-related data purges often carry the same clause. Once that language exists, the cost comparison is over, and the useful question becomes whether your provider actually holds the mobile endorsement for the media type you are destroying, since NAID AAA scopes hard drives and solid-state devices as separate endorsements [3]. Ask for the endorsement list rather than the badge.

Offsite fits high-volume, mixed-asset work better than onsite does. A plant runs larger equipment than anything that fits in a truck, and it can separate reusable assets from destruction candidates while processing a data center's worth of drives in one intake. Provider guidance describes the same split. Greentec, an Ontario ITAD and electronics recycling company, frames offsite destruction as "generally preferred for large-volume projects, data center decommissions, or mixed electronics streams where destruction, recycling, and reuse may all be required," and frames onsite as the choice where "policy or risk tolerance dictates that data-bearing media must never leave the site intact" [14].

Value recovery is the second reason volume pushes offsite. Drives that will be shredded have no resale value, but a decommissioning project that includes servers, switches, and laptops usually has recoverable assets in the pile. Splitting that into an onsite destruction visit plus a separate offsite logistics engagement adds a mobilization fee without changing the outcome for drives that were always going to be shredded.

Site constraints decide more jobs than buyers expect

Physical access stops more onsite plans than budget does. A shred truck needs a route in, a place to park, and floor space to stage cartons, and the destruction has to happen on your premises to satisfy the mobile specification rather than in a lot down the block [3]. Multi-tenant high-rises and hospital campuses with controlled loading docks tend to make onsite either impossible or expensive enough that the premium becomes the entire cost. Portfolios of small branch offices hit the same wall, since each site is its own visit. Scheduled offsite collection absorbs distributed footprints far more cheaply.

Witnessing proves that the specific drives you handed over were destroyed at a specific time. It proves nothing about the drives you did not hand over, and that distinction matters more than it sounds, because inventory error is a far more common failure than destruction error. In the Morgan Stanley matter, no shredder underperformed. The firm hired "a moving and storage company with no experience in data destruction," that vendor sold the devices to a third party which auctioned them online with unencrypted data intact, and 42 servers were never accounted for [6]. A witness standing at the dock would not have caught any of that. A reconciled serial-number inventory would have.

NIST's current verification guidance points the same direction. For destructive methods it describes verification as inspecting "the remnants of a destruction technique" and identifying "the equipment used with it," and its validation step names sanitization "performed by unqualified personnel" or equipment that was "not approved and/or were improperly calibrated" among the reasons an outcome should be rejected [1]. Physical destruction therefore gets verified by observing the process and the machine and then reconciling records, not by testing each drive afterward. That argues for onsite service, and just as strongly for making an offsite plant name and document the equipment it used.

The paperwork carries the assurance in both models

i-SIGMA's hard-drive endorsement requires that serial numbers of all drives destroyed be recorded unless the customer signs an opt-out, that the log of recorded serial numbers be returned to the customer on completion of the service, and that the provider supply a written description of the destruction process before it happens [3]. None of those requirements change between the mobile and facility-based platforms. A buyer who reconciles the returned serial log against an asset inventory holds stronger evidence than a buyer who watched a truck run for an hour and never checked the list. Doing both beats doing either alone, and the reconciliation is the cheaper half.

Offsite adds a transport window, and under NAID AAA that window is audited rather than left to trust. i-SIGMA's specification manual requires that "all vehicles used for transfer of Data-Controller Media will have lockable cabs and lockable, fully enclosed boxes," that those cabs and boxes "must be locked during transport and when unattended," and that providers define "clear and effective controls to manage fleet route location detail such as GPS tracking technologies or other reporting" [3]. Vehicles are inspected before going into service each day, containers may not be left unattended unless locked in a transportation vehicle or inside the secured facility, and auditors physically inspect trucks, covering every vehicle when a provider runs three or fewer and 75% when it runs four or more [3]. Staff who handle media must clear a seven-year criminal record search through an outsourced third-party screening service, a seven-year employment history verification, and pre-hire drug screening [3]. Certified companies "must pass scheduled and surprise audits" [4].

The measured incidence of disposal failures is also low. Of 710 healthcare data breaches reported to US regulators in 2025, exactly one was an improper-disposal incident, although it affected more than 35,000 people [7]. Disposal is a low-frequency, high-visibility failure mode.

The residual risk offsite is real but specific

What offsite exposes you to is the gap between the manifest and the plant. Drives stay intact and readable from the moment they leave your dock until they reach the shredder, and during that stretch you are relying on the provider's controls instead of your own. For standard office hardware, particularly drives encrypted at rest, that exposure is acceptable and priced accordingly. For unencrypted media holding regulated records, it is the precise exposure onsite service exists to remove.

Onsite reduces one risk and introduces a smaller one

A truck at your dock means an outside technician moving through your space with your drives in cartons. i-SIGMA requires certified providers to hold a written policy preventing staff from using photographic or other electronic equipment, including handheld phones, in the presence of customer media [3]. Confirm that policy is in force during your visit, and escort the technician.

The premium is not linear, so price both options on the same inventory

Because the visit charge is fixed while per-drive rates fall with volume, the onsite premium on a 500-drive job can be smaller in absolute dollars than the premium on a 40-drive job [8][9][10]. Ask for onsite and offsite pricing against the identical asset list rather than accepting one number and a percentage.

Solid-state media is a separate conversation

Flash memory needs a finer particle size than magnetic platters, and one published pricing comparison notes that solid-state media requires shredding to a smaller particle size, which is part of why it prices higher [8]. NIST warns that a sanitization step can complete and still accomplish nothing, giving the example that "a sanitization operation that degausses an SSD can complete successfully, but no sensitive data is sanitized" [1]. i-SIGMA scopes solid-state destruction as its own endorsement, requiring that devices be "damaged to the point where they are unable to be used" [3]. Confirm your provider holds that endorsement, and note that customers "may specify a smaller particle size at their discretion, which should be codified contractually" [3].

Cost data in this market is thin, so treat percentages as directional

Most providers quote rather than publish. Shred-it's own comparison describes offsite as "often more cost-effective" and onsite as "may be higher due to on-site service delivery," with no figures attached [13]. Any single published premium percentage, including the ones cited here, should be read as a starting point for negotiation rather than a market rate.