Secure Destruction of Sensitive Data

ISO 27001 Registered including CESG Certified and Ministry of Defence (DIPCOG) Approved Services.

2009 09 0054

HIGH SECURITYDISPOSAL & DESTRUCTION

Data Eliminate Ltd, 107 Fleet St, London EC4A 2AB Tel: 0845-1234400 www.dataeliminate.com Page 2 of 5 Version 1.8 12

th July 2013 Copyright Data Eliminate Ltd 2013

HIGH SECURITY DECOMMISSIONING DESTRUCTION AND DISPOSAL

Data Eliminate provides secure decommissioning, disposal and recycling services for Electrical and Electronic Equipment (EEE). The applications covered by these servicesinclude the following: Hard Drives Handheld Devices Servers Network Switches & Routers Communications Systems Solid State Data Storage

Data Tapes Access Control Systems CCTV &Surveillance Electronics Forensics Equipment Telecommunications Electronic Payment Devices

Tablet Computers Military Electronics Guidance Systems Crime Scene Evidence Cryptographic Equipment Command & Control

We will decommission anything from a single hard drive or small part of a helicopter to a data centre or storage facility. This includes both data-bearing and non data-bearing components.

We offer these services at the customer’s own premises using our mobile inventory cataloguing and destruction capability which enables all work to take place within your own security perimeter under the supervision of your own staff. Alternatively, we provide a fully auditable disposal and recycling process at our own facility which incorporates detailed reporting on every item received, a method statement and the final outcome for each asset.

Data Eliminate Ltd, 107 Fleet St, London EC4A 2AB Tel: 0845-1234400 www.dataeliminate.com Page 3 of 5 Version 1.8 12

th July 2013 Copyright Data Eliminate Ltd 2013

COMPLIANT WITH HM GOVERNMENT& INTERNATIONAL SECURITY AND ENVIRONMENTAL STANDARDS

The procedures implemented by Data Eliminate are based on our original UK Government

(CESG) and Ministry of Defence (DIPCOG) Certified Service. (See here for details.)

All our services are independently audited by UKAS certified inspectors to:

ISO 27001:2005 Information Security Management System

ISO 14001:2004 Environmental Management System

ISO 9001:2008 Quality Management System

We carry all necessary Environment Agency and WEEE approvals.

This level of certification helps you prove to your customers that your organisation takes proper care of the sensitive information it handles.

Our Asset Disposal and Recycling services are available in three security grades:

SME Grade: for Small Businesses providing basic legislative and environmental compliance with EU and UK laws and regulations.

HMG/CorporateGradefor Corporate Clients and HM & Local Government departments and agencies providing end to end asset tracking for every item.This service is compliant with the requirements of CESG Information Assurance Standard No 5 for data carrying a HM Government Protective Marking of Business Impact Level 3 (BIL3) Restricted or below.

Military Grade for HM Government Defence, Foreign Relations and Law Enforcement Organisations with particularly sensitive requirements. This service is approved by the Ministry of Defence (DIPCOG) and is compliant with the requirements of CESG Information Assurance Standard No 5 for applications up to and including data carrying a HM Government Protective Marking of Business Impact Level 6 (BIL6) Top Secret or below.

Please see the chart on the next page for the features associated with each Service Grade. See Page 5 for additional information on our Overwriting / Erasure Services.

Finally, Data Eliminate offers a CPNI Trade Marked On-Site Destruction Service which is approved by the Centre for Protection of National Infrastructurefor UK Government Use, for details contact CPNI. This Service carries the CPNI Trademark which replaces the SEAP 8100 and 8200 standards.

.

Data Eliminate Ltd, 107 Fleet St, London EC4A 2AB Tel: 0845-1234400 www.dataeliminate.com Page 4 of 5 Version 1.8 12

th July 2013 Copyright Data Eliminate Ltd 2013

AVAILABILITY OF FEATURES BY SERVICE GRADE

Data Destruction Services SME

Grade HMG

Corporate Grade

Military Grade

Collection Service for Off-Site Processing at Data Eliminate’s Facility

On-Site Service carried out at the Customer’s Premises

Engineers Vetted to the Appropriate Security Level

Customer can select from a range of service dates

Unbranded/Plain Bodied, Satellite Tracked Vehicles where required

Repeatedly Verified & Cross-Checked Secure Chain of Custody

Professional Indemnity Cover to £1 million

Choice of Destruction Methods between Shredding and/or Degaussing/Demagnetizing and/or Software Overwriting where practical/available.

Data Destruction to CESG Lower Level Standard(s) - Shredding to 15mm x 15 mm particles, Degaussing or Software Overwriting (or a combination thereof)

Data Destruction to CESG Higher Level Standard(s) - Shredding to 6mm x 6mm particles, Degaussing or Software Overwriting to CESG Higher Level Standard (or a combination of methods as required)

Certificate of Destruction and Documentation showing Data Protection Act and WEEE Compliance and showing the sum total(s) of item types processed

Certificate of Destruction and Documentation with audit trail showing serial numbers of assets processed (and other characteristics such as model number, internal asset code etc by arrangement)

CPNI (Centre for Protection of National Infrastructure) Approved Service for UK Government Use. For further information contact the CPNI. (Formerly SEAP 8100 and 8200 Compliant)

Asset Decommissioning and Disposal Features that can be added to the Data Destruction Services Features Above

Dismantling and Decommissioning of EEE (Electrical and Electronic Equipment) installations such as Data Centre Racks or Research Rigs

Sorting, palletizing and packing of all Electronic and Electrical Equipment and removal from the Customer’s premises

Recording of multiple characteristics about each item, assembly or component eg. Make, model, part number, serial number, customer asset code

Removal where practicable of any non manufacturer labels associating the asset with the customer

The opening and examination of each asset to determine the presence of any data-bearing devices and the removal thereof.

Multi-stage process with audit trail showing the final disposal or recycling outcome for each asset or component)

Transport and Recycling Management of both Controlled and Hazardous Waste EEE (WEEE) via our Environment Agency approved facility

Zero landfill policy with effectively 0% going to landfill

Established Network of approved and vetted downstream partners for recycling, disposal and.re-marketing.

Data Eliminate Ltd, 107 Fleet St, London EC4A 2AB Tel: 0845-1234400 www.dataeliminate.com Page 5 of 5 Version 1.8 12

th July 2013 Copyright Data Eliminate Ltd 2013

Data Erasure/Overwriting Service For Hard Drives and Handheld Devices

Data Eliminate (DE) offers an erasure/overwriting service which removes all data from computer hard drives and handheld devices such as iPhones and Blackberries enabling them to be safely redeployed for use in your organisation or elsewhere. On completion, we will provide a Certificate of Destruction showing the make, model and serial number of the hard drives/devices processed and details of the HM Government standard applied. The data destruction process will remove all data from the drives/devices including operating systems. It is suitable for dismounted/loose hard drives as well as those mounted in servers, workstations, laptops, photocopiers and printers. Subject to certain technical requirements, the service is available on-site in the security of your own premises or off-site at our premises. The on-site service enables you to witness the entire process within your own security perimeter. Alternatively, items can be collected by us and securely transported to our facility using satellite tracked, unmarked vehicles, or delivered to us by the Customer. Enhanced transport security measures such as double-manning, sealed enclosures or enhanced vetted staff are available upon request. The erasure software deployed is approved by CESG, the UK Government’s Information Assurance Authority. The processes used are those specified in our original CESG/MOD approved service. See www.cesg.gov.uk/publications/documents/dataeliminate_icd.pdf

In a typical batch where drives/devices come directly from a working environment and are in good condition, up to approximately 5 per cent of drives/devices may be faulty and cannot therefore be safely overwritten. This is usually because they are no longer readable (fail to spin/have damaged power/cable connectors) or have faulty sectors. If a drive/device has a fault and cannot be overwritten we will physically destroy it – again to the CESG standard selected - at no additional charge.

The Data Erasure Service is available at two Security Grades:

Security Grade Typical Application Appropriate UK Govt Data Classification

DE HMG –Corporate / CESG Lower Level

Private Corporations, Local and National Government including NHS, Social Services etc

Up to and including Impact Level 3 Restricted (BIL3)

DE Military / CESG Higher Level

Military, Defence and National Security Organisations.

Up to and including Impact Level 6 Top Secret (BIL6)

Terms and Conditions – All Services All prices exclude VAT @ 20%, are valid for 30 days unless otherwise stated, and assume acceptance of our Standard Terms and Conditions..