Australia's Leading Hard Drive Sherdding Specialists
Certified Hard Drive Destruction Sydney | Hard Drive Shredding Sydney
ISO 27001 Certified
2mm Particle Size
ISO 45001 Certified
500+ Drives Per Day
Submit Your Request
Please note: We collect electronic waste (e-waste) only. Other types of waste are not accepted.

ISO/IEC 27001:2022
Information Security Management

ISO 45001:2018
Occupational Health and Safety Management

ISO 9001:2015
Quality Management Systems

ISO 14001:2015
Environmental Management
Hard drive destruction physically breaks the media apart so the data on it cannot be read back by software, by a laboratory, or by anyone who buys the scrap. Hard drive shredding is how that is done: ITC runs HDDs, SSDs, tapes and phones through a commercial hard drive shredder down to particles of 25mm or smaller, either on site at your premises or at our secure North Rocks facility, and issues a serialised Certificate of Destruction naming every single drive.
What Is Hard Drive Destruction and When Do You Need It?
Hard drive destruction, also called hard drive shredding, is the physical breaking apart of a data storage device so that no known recovery method can reconstruct what was on it. You need it when a drive has failed, when it is encrypted and nobody holds the key, or when your own policy or your client's contract says data-bearing media must be destroyed rather than wiped and resold.
If the drive still works and still has resale value, certified erasure is usually the better commercial decision, because the asset keeps its value. If the drive is dead, locked, or covered by a destroy-only policy, shredding is the only answer that closes the question permanently. ITC provides both under one chain of custody. Where erasure is the right call, that work runs through our secure data destruction services in Sydney.
ISO certified hard drive shredding across Sydney, on your site or at our North Rocks facility. Every drive captured by serial number, and two certificates issued on every job.
Three published figures set the context for every hard drive destruction job in Australia. All three are quoted as published and none of them are ITC estimates.
Theft and loss account for 24 of the 25. Both are physical events that happen to a drive after it leaves the rack, which is exactly the window a witnessed on site shred closes.
Sources: Office of the Australian Information Commissioner, Notifiable Data Breaches Report July to December 2024 and the Privacy Act 1988 (Cth). Figures are quoted as published and are not ITC estimates.
Know your drive count already? Send it through and we will price the job against your actual media types, not a generic rate card.
Shred It or Erase It? Answer These Four Questions First
Most Sydney businesses arrive at this page assuming every retired drive has to be shredded. Often it does not, and shredding a functional enterprise SSD destroys real money. This is the decision, in the order it actually gets made.
| The question | If the answer is yes | If the answer is no |
|---|---|---|
| Does the drive still power up and pass a health check? | Erasure is on the table, and so is resale value | Shred it. A failed drive cannot be verified as erased, so erasure cannot be certified |
| Is it encrypted with a key someone still holds? | A cryptographic erase is fast and verifiable | Shred it. A locked drive cannot be sanitised through its own interface |
| Does your policy or your client contract mandate physical destruction? | Shred it. The decision is already made and the certificate is your evidence | Compare the resale value against the destruction cost before you decide |
| Is the drive worth more than the cost of erasing and testing it? | Erase, certify and resell. Proceeds can offset the rest of the project | Shred it. Below a certain value the handling costs more than the drive returns |
Where a drive is still functional and has a resale market, erasure keeps that value in play and the proceeds can offset the cost of the wider project. That route runs through IT asset buyback. Where the drive has failed, is encrypted with a key nobody holds, or falls under a policy that mandates destruction regardless of condition, shredding is the answer and the residual value is nil. Our guide to erasure versus destruction works through the same decision in more depth, and whether data can be recovered after wiping answers the question most security teams raise first.
Not sure which drives are worth erasing and which should go straight to the shredder? We will sort your fleet into both piles before you commit to anything.
How Do You Destroy Data on an SSD?
A solid state drive stores data as electrical charge trapped in NAND flash cells, not as magnetic domains on a spinning platter. That single difference breaks most of the destruction habits that Australian IT teams built up over twenty years of hard disks, and it is the single most common gap we find when we review a retired-hardware policy.
SSD shredding is a different job from HDD shredding
HDD shredding has to defeat one large magnetic surface. SSD shredding has to defeat several flash packages that may each be smaller than a postage stamp, sitting on a board next to a controller that has already moved your data around without telling you. The magnetic methods do not carry across either: a field strong enough to collapse the domains on a platter passes straight through NAND and changes nothing, so a degaussed SSD comes out the other side with every byte intact. If a provider quotes one flat method for a box of mixed drives without asking which ones are solid state, that is the moment to ask a second question. The physics is set out in does degaussing work on SSDs and in what degaussing actually is.
One overwrite pass does not reach every cell
SSD controllers spread writes across the flash to even out wear, and they hold a reserve of cells outside the addressable range as over-provisioning. A host-level overwrite writes to the logical addresses the controller presents, not to the physical cells behind them, so a block can be retired from service with readable data still sitting on it. The correct instruction is the drive's own sanitise command, which the controller executes across the whole of the media including that reserve. Our SSD data destruction guide works through the options end to end.
Shred size matters more on an SSD than on a hard disk
A 3.5 inch hard disk holds its data across one or more large platters, so breaking the platter into fragments is enough to defeat reconstruction. An SSD holds its data inside several flash packages that may each be smaller than a postage stamp. A shred size that comfortably destroys a platter can leave a flash package intact. For that reason ITC separates solid state media from magnetic media before processing rather than running both through the same stream, and shreds flash media to a finer size than the 25mm applied to magnetic drives. In practice SSD destruction and HDD destruction are scoped, quoted and scheduled as two separate streams inside the same job.
| Question | HDD (magnetic) | SSD (NAND flash) |
|---|---|---|
| How the data is held | Magnetic domains on a rotating platter | Electrical charge in NAND flash cells |
| Does degaussing work | Yes, this is magnetic media | No, there is no magnetic field to collapse |
| Is one overwrite pass reliable | Generally yes on a modern drive | No, wear levelling and over-provisioning can leave cells unreached |
| The interface-level option | ATA Secure Erase | The drive's own sanitise command over NVMe, SATA or SAS |
| What physical destruction has to achieve | Break up one large platter surface | Break up several small flash packages, so shred size matters more |
| How ITC processes it | Shredded to 25mm or smaller | Separated from magnetic media first, then shredded to a finer size |
If your last disposal ran HDDs and SSDs through the same process, it is worth a second look. We will review your current method at no charge.
Our Eight-Step Hard Drive Destruction Process
Every step is documented, and every drive is tracked by serial number rather than by bin or by weight. That is the difference between a receipt and audit evidence.
- 1
Consultation
We scope volume, media types and whether destruction happens on site or at our facility.
- 2
Asset inventory
Every drive is scanned and recorded by serial number before anything moves.
- 3
Secure collection
Sealed containers, scanned at pickup and scanned again on arrival, or our mobile unit attends your site.
- 4
Optional certified erasure
Where dual destruction is required, drives are erased and a serialised erasure report is issued first.
- 5
Media separation
Solid state media is separated from magnetic media so each is shredded to the size it needs.
- 6
Physical shredding
Industrial shredding of magnetic media to particles of 25mm or smaller, and flash media finer.
- 7
Witnessed destruction
Option to attend in person or watch by secure video link, recorded against the job reference.
- 8
Certification and recovery
Serialised Certificate of Destruction issued, and material is passed to certified downstream processors under our ISO 14001 system.
Complete chain of custody
From the moment we take possession to the moment the certificate is issued, every handover is recorded and every drive is accounted for individually. Our guide to chain of custody in IT disposal sets out what a defensible custody record has to contain, and the questions to ask a data destruction company is a short checklist worth running over any provider, including us.
Want the process run against your site and your policy rather than a generic description? Book a scoping call and we will map it step by step.
On Site or At Our Facility: Which Suits Your Job?
Choose on-site destruction when your policy states that data-bearing media must not leave the building intact, or when somebody needs to physically watch it happen. Choose facility-based destruction for larger volumes, mixed media and decommissioning projects, where the per-drive cost is lower and the throughput is higher. Both routes produce the same serialised certificate.
| Consideration | On-site mobile destruction | ITC secure facility |
|---|---|---|
| Where it happens | At your premises, in the mobile unit | At our North Rocks site in Sydney |
| Can you watch it | Yes, in person, on the day | Yes, by appointment or by secure video link |
| Media leaves site intact | No | Yes, in sealed containers scanned in and out |
| Best suited to | Small and medium volumes, and destroy-before-it-leaves policies | Large volumes, mixed media, server rooms and data centre decommissioning |
| Typical cost position | Higher per drive, because a unit and an operator attend | Lower per drive once volume builds |
On-site versus off-site data destruction works through the risk trade-off in full. For a whole server room or a floor of racks, destruction usually sits inside a wider data centre decommissioning engagement, and the decommissioning checklist is a useful place to start scoping.
Policy says nothing leaves the building intact? We will bring the destruction to you and you can watch every drive go in.
Why Sydney Businesses Choose ITC for Hard Drive Destruction
Most providers offering hard drive destruction in Sydney are document shredding companies that added drives to a price list, or general recyclers who treat a drive as scrap metal. ITC is an IT asset management business. Drives are the job, not a line item.
Four current ISO certifications
ISO/IEC 27001:2022 for information security, certificate AUP1338IT, plus ISO 9001:2015, ISO 14001:2015 and ISO 45001:2018, all certified by QAS International. Security, quality, environment and safety are audited by an external body, not asserted in marketing copy.
Serial level accountability
Every drive is captured individually at intake and reconciled against the destruction record. The certificate lists what was destroyed drive by drive, so your evidence matches your asset register rather than a weight on a docket.
Solid state media handled properly
An SSD is not a small hard disk. It holds no magnetic charge, so a magnetic field does nothing to it, and its controller can hide data from a single overwrite pass. We separate flash media before shredding and reduce it further than magnetic media.
Australian obligations, not generic compliance
Our documentation is built around the Privacy Act 1988 and Australian Privacy Principle 11.2, the notifiable data breaches scheme, APRA CPS 234 where it applies, and the State Records Act 1998 for NSW public offices. We do not point you at overseas regulations that do not govern you.
Two certificates for every job
A Certificate of Destruction for your privacy and audit file, and a Recycling Certificate for your environmental and sustainability reporting. Most providers issue one document, which covers half of what you are asked to prove.
The whole asset, not only the drive
We are set up for the machine the drive came out of as well. Chassis, memory, cables and screens are processed in line with the AS/NZS 5377 standard under our ISO 14001 system, so a decommission ends with one provider and one set of paperwork.
What every ITC hard drive destruction job includes
- A written scope before anything moves. Media types, quantities, whether it happens on site or at our facility, and what the certificate will show.
- Individual capture of every data bearing device at intake, reconciled at destruction so nothing is unaccounted for.
- Sealed, tracked transport with a documented handover at each change of custody.
- Separation of solid state media from magnetic media so each is reduced to the size that media actually needs.
- The option to witness destruction in person or by secure video link, recorded against the job reference.
- A serialised Certificate of Destruction naming the method, the date, the operator and the job reference.
- A Recycling Certificate covering the downstream recovery of the shredded material.
- Optional certified erasure on any drive worth resale value, with the proceeds offset against your invoice through IT asset buyback.
- A named contact for the job from quote through to certificate.
Every one of those is standard, not an upgrade. Tell us how many drives you have and we will scope it in writing.
How ITC Compares to the Other Ways Sydney Businesses Destroy Drives
There are four realistic routes for a Sydney business with a pile of retired drives. They are not equally defensible, and the difference only becomes visible when somebody asks you to prove what happened. The comparison below is by category rather than by company name.
| What you need | ITC Asset Management | Document shredding company | General e-waste recycler | In house drill or hammer |
|---|---|---|---|---|
| Drives as a core service | Yes | Usually an add on to paper shredding | Often treated as scrap metal | No |
| Information security certification | ISO/IEC 27001:2022, certificate AUP1338IT | Rarely published | Rarely published | None |
| Solid state media handled differently to magnetic | Yes, separated and reduced further | Frequently not distinguished | Frequently not distinguished | No, and a drilled SSD often survives |
| Serial level record of every drive | Yes, on the certificate | Often a weight or a bin count | Often a weight on a weighbridge docket | Whatever you write down yourself |
| Certificate of Destruction | Yes, serialised | Usually yes, often not serialised | Sometimes a recycling report only | None |
| Recycling Certificate for sustainability reporting | Yes, issued with every job | Uncommon | Sometimes | None |
| Environmental management certification | ISO 14001:2015 | Varies | Varies | None |
| Chain of custody you could hand to an auditor | Documented at every handover | Varies | Usually collection only | None |
| Handles the rest of the hardware too | Yes, complete ITAD | No | Yes | No |
| Resale value returned to you | Yes, where a drive or device has value | No | Occasionally | No |
Six questions worth asking any provider, including us
If you are comparing quotes, these are the questions that separate a service you can evidence from a service you simply have to trust.
- Which certifications do you currently hold, who issued them, and what is the certificate number?
- Do you shred solid state media to a different size than magnetic media, and what size is each?
- Will the certificate list every drive individually, or only a total weight or count?
- Who holds custody between collection and destruction, and how is each handover recorded?
- Can I attend the destruction, and if not on the day, can I watch it by video link?
- What happens to the shredded material afterwards, and will you certify that too?
Our full checklist of questions to ask a data destruction company goes further, and it is written to be used against us as much as anyone else.
Run those six questions past us right now and see how the answers compare with the quote already on your desk.
Which Laws Actually Require You to Destroy Data in Australia?
Australian Privacy Principle 11.2, under the Privacy Act 1988 (Cth), requires an organisation to destroy personal information or ensure it is de-identified once the information is no longer needed for any permitted purpose. A retired hard drive sitting in a cupboard is still holding that information, so the obligation has not been met.
The obligation is on the entity that collected the data. Handing drives to a third party does not transfer it, which is why the evidence a provider gives you back matters as much as the destruction itself.
Four separate Australian obligations converge on the same requirement: destroy the data and be able to prove it. Sources: Privacy Act 1988 (Cth), Office of the Australian Information Commissioner, APRA Prudential Standard CPS 234, State Records Act 1998 (NSW).
Privacy Act 1988 and the penalty that follows a serious breach
- For a serious or repeated interference with privacy, the maximum civil penalty for a body corporate is the greater of fifty million dollars, three times the benefit obtained from the conduct, or thirty per cent of adjusted turnover for the relevant period
- Our guide to the Privacy Act and destroying personal information works through what APP 11.2 asks of you in practice
- The Act itself is available in full at the Federal Register of Legislation
The notifiable data breaches scheme
- Where a breach is likely to result in serious harm, you must notify affected individuals and the Office of the Australian Information Commissioner
- Australian organisations lodged 1,113 notifications across the 2024 calendar year
- In the July to December 2024 period alone, fifteen notifications were attributed to theft of paperwork or a data storage device, nine to loss of paperwork or a data storage device, and one to insecure disposal
- That is twenty five notifications in six months traceable to a physical device that was not properly controlled
- The figures are published in the OAIC notifiable data breaches report for July to December 2024, and our own guide covers notifiable data breaches arising from IT disposal
APRA CPS 234 for regulated financial entities
- Banks, insurers and superannuation trustees regulated by APRA must maintain information security capability commensurate with the threat, and that obligation extends to information assets managed by third parties
- Destruction is the final control in the asset lifecycle, and it is one an auditor will ask you to evidence
- See APRA CPS 234 and data destruction, and the standard itself at APRA
- If you are in banking, how banks dispose of IT equipment sets out the typical control set
State Records Act 1998 for NSW public offices
- NSW public offices cannot dispose of a State record except as authorised
- Where records are held on a hard drive, destruction of the drive has to be carried out and documented in a way that satisfies that authorisation
- Our government IT disposal page covers how that works in practice
Environmental obligations under the POEO Act
- Once the data problem is solved, the material itself is still regulated
- In NSW the Protection of the Environment Operations Act 1997 governs waste handling and transport
- NSW regulates how this material is transported and processed rather than operating the outright disposal restrictions that apply in some other states, which is why the destruction and the recovery are certified separately
- What is left after shredding is processed in line with the AS/NZS 5377 standard under our ISO 14001:2015 environmental management system
If an auditor asked tomorrow what happened to the drives you retired last quarter, could you answer with a document? We can make sure next quarter you can.
What We Shred, How Small, and Where the Material Goes
Physical destruction only counts if the pieces are small enough that the surviving fragments cannot be assembled into readable data. On a magnetic hard disk the data lives on rigid platters, so a fragment has to be smaller than a usable arc of track. On flash media the data lives in memory packages that are already small, so the shred has to be finer again to be sure a package is broken rather than merely detached.
| Media | How the data is held | Our treatment |
|---|---|---|
| 3.5 inch and 2.5 inch hard disks | Magnetic domains on rigid platters | Shredded to particles of 25mm or smaller |
| SSDs, M.2 and NVMe drives | Charge trapped in NAND flash cells | Separated from magnetic media and reduced further |
| USB drives and memory cards | NAND flash | Processed with the solid state stream |
| LTO and DAT backup tapes | Magnetic particles on flexible tape | Shredded, with the cartridge body separated for recovery. See destroying backup tapes |
| Photocopier and MFP drives | Usually a standard hard disk inside the machine | Removed and destroyed with the drive stream. See photocopier hard drive data |
| Server and SAN drives, including SAS | Magnetic or flash depending on the model | Identified at intake and routed to the correct stream |
| Mobile phones and tablets | Embedded flash storage | Processed with the solid state stream |
What happens to the material after the shred
A shredded drive is not waste. Roughly speaking it is aluminium or steel, rare earth magnet material, circuit board and, on a solid state device, silicon packages. Once destroyed, the material is sorted and passed to certified downstream processors for recovery under our ISO 14001:2015 environmental management system, and the recovery is certified back to you.
The destruction and the recovery are certified separately, which is why an ITC job produces two documents rather than one.
The volumes behind this are not trivial. The Australian Bureau of Statistics records 588,000 tonnes of Australian e-waste in 2023, up thirty eight per cent in a decade, in its Waste Account, Australia. The Department of Climate Change, Energy, the Environment and Water estimates around 430 million dollars of recoverable materials are lost to landfill in a single year. What happens to e-waste after collection follows the material further downstream.
If your policy names a maximum particle size, send it to us and we will confirm in writing what we can meet for each media type before you commit.
What Your Certificate of Destruction Proves
The certificate is the only part of this service that outlives the job. Years later it is the document that answers the question, so it has to be specific enough to stand on its own without anyone from either business being available to explain it.
| Field | Why it decides the value of the document |
|---|---|
| Serial numbers | Without them the certificate proves that something was destroyed, not that your drives were. It is the only field that ties the document to your asset register. |
| Method and media type | Physical destruction and erasure are different controls with different residual risk. The certificate has to say which one was applied to which media. |
| Date and location of destruction | Establishes the gap between collection and destruction, which is the window an auditor will ask about. |
| Named operator and authorising signature | Makes the record attributable to a person rather than to a company logo. |
| Job reference tying to the custody record | Connects the certificate back to the handover trail, so the whole chain can be reconstructed from one number. |
Our page on the certificate of data destruction shows the full anatomy of the document field by field, including the sections that apply to erasure rather than shredding.
Ask us for a sample certificate before you commit. If any provider will not show you one, that tells you what the real one is likely to look like.
How Much Does Hard Drive Destruction Cost in Sydney?
Hard drive destruction in Sydney is normally priced either per drive or as a fixed job price, and the number moves on volume, media mix, whether destruction happens at your site or ours, and how far the collection has to travel. We quote per job rather than publishing a rate card, because a single rate would be wrong for most of the jobs we are asked to do.
A twelve drive cleanout and a four hundred drive decommission are not the same service at a different scale. They differ in handling, transport, reporting and turnaround.
| Driver | Effect on price |
|---|---|
| Volume | The largest single factor. Per drive cost falls as quantity rises, because the fixed cost of attending and reporting is spread further. |
| On site or at our facility | On-site destruction costs more per drive because a unit and an operator attend your premises for the job. |
| Media mix | Solid state media needs separation and finer reduction, so a mixed batch is handled differently to a pallet of identical hard disks. |
| Whether drives are still in machines | Extraction is labour. Loose drives in a box cost less to process than drives still mounted in servers or laptops. |
| Location and access | Sydney metro is straightforward. Regional NSW, restricted loading docks, after hours access and data centre escort requirements all add cost. |
| Reporting depth | A serialised certificate is standard. Bespoke reporting formats mapped to your asset management system take additional work. |
| Resale value in the batch | Works the other way. Where devices carry value, buyback proceeds can offset or in some cases exceed the destruction cost. |
Small volumes are still worth quoting
If you have ten drives rather than a thousand, that is still a job we will price. Small batches are usually best handled as a single collection with a fixed job price rather than a per drive rate, and if you are already retiring the machines the drives came out of, it is normally cheaper to move the whole lot at once. Our guide to e-waste recycling costs in Sydney covers the wider pricing picture.
Tell us the drive count, the media types and the suburb and we will come back with a firm number, not a range.
Bulk and Project Destruction: Decommissions, Data Centres and MSPs
Most large drive destruction jobs are not standalone. They fall out of something else, and the destruction is the part with the compliance exposure attached. These are the project shapes we are asked for most often in Sydney.
Server room and data centre exits
Racks come down, drives come out, and every drive has to be accounted for against the rack it came from. We run the destruction inside the wider data centre decommissioning engagement so the reporting reconciles. The decommissioning checklist is the right place to start scoping.
Office relocations and refresh cycles
A fleet refresh produces a wave of laptops and desktops at once. Drives worth resale value can be erased and the devices sold, with everything else destroyed, and both outcomes appear on the same reporting pack. See IT asset disposal.
Managed service providers and IT resellers
If you hold client hardware, you carry your client's compliance obligation as well as your own. We can work under your brand with per client reporting so each of your clients receives evidence naming their own assets.
Regulated record disposal programmes
Scheduled destruction on a recurring cycle, with the same certificate format every time so your evidence file is consistent year on year. Common in health, legal and financial services. See law firm client data destruction and how hospitals dispose of IT.
Whichever shape your project takes, the drives are only part of it. Server recycling and computer recycling deal with the hardware the drives came out of, and the hidden data risk in retired IT hardware covers the devices people forget are storing anything at all.
Planning a decommission this quarter? Get the destruction scoped now and the reporting will be ready before the racks come down.
Our Four ISO Certifications and Where We Cover
ITC Solutions Australia Pty Ltd, trading as ITC Asset Management, holds four current ISO certifications issued by QAS International. They are the reason we can put specific claims in writing rather than general ones.
ISO/IEC 27001:2022
Information security management. Certificate AUP1338IT. This is the one that governs how your data bearing media is handled, stored, tracked and destroyed. See ISO 27001 and secure IT disposal.
ISO 14001:2015
Environmental management. Governs what happens to the shredded material and the certified downstream recovery that follows.
ISO 9001:2015
Quality management. Governs the consistency of the process, the documentation and the certificate you receive.
ISO 45001:2018
Occupational health and safety. Governs how our people work on your site during collection and on-site destruction.
Every stage of the job sits inside a certified management system. Certificates are available on request and are listed on our certifications page.
Sydney service areas
We collect from and destroy for businesses across Sydney and greater NSW, working out of Unit 25, 16 Loyalty Road, North Rocks NSW 2151.
Not listed? We still travel. Ask when you request a quote. Our Sydney CBD page covers city collections in more detail.
Certificates, coverage and process all confirmed in writing before we start. That is what certified is supposed to mean.
Hard Drive Destruction Questions, Answered
Hard drive shredding is the physical destruction of a drive by feeding it through an industrial shredder that reduces it to small metal particles. On a magnetic hard disk the platters that hold the data are broken into fragments too small to be reassembled or read. It is the most conclusive form of data destruction because the storage medium itself no longer exists in a usable form.
Once a platter or a flash package has been physically broken into fragments, there is no known recovery method that can reconstruct the data from those fragments. Unlike erasure, which relies on the drive electronics working correctly and the whole surface being reachable, physical destruction does not depend on the drive functioning at all. That is why it is the appropriate choice for failed drives, encrypted drives where the key handling is uncertain, and any media covered by a destroy rather than erase policy.
Yes, and we treat them differently. An SSD stores data as trapped charge in NAND flash cells rather than as magnetic domains, and its controller distributes writes across spare capacity you cannot address directly. That means a magnetic field has no effect at all and a single overwrite pass may leave data in cells the operating system never sees. SSD shredding is therefore run as its own stream: we separate solid state media before shredding and reduce it further than magnetic media. Our SSD data destruction guide covers this in depth.
Magnetic hard disks are shredded to particles of 25mm or smaller. Solid state media is reduced further, because the memory packages that hold the data are physically smaller than a hard disk platter. If your internal policy specifies a maximum particle size, tell us at scoping and we will confirm in writing what we can meet for each media type before accepting the job.
Yes. You can attend on-site destruction in person on the day, or attend destruction at our North Rocks facility by appointment. Where attending is not practical, we can arrange a secure video link recorded against your job reference. Witnessed destruction is offered on request rather than being an extra product.
Yes. On-site destruction suits organisations whose policy states that data bearing media must not leave the premises intact, and jobs where somebody needs to witness it happening. Facility based destruction suits larger volumes and mixed media, where the per drive cost is lower. Both routes produce the same serialised certificate. On-site versus off-site data destruction works through the trade-off in full.
You receive two documents. A serialised Certificate of Destruction listing every drive individually with the method, media type, date, location, named operator and job reference, and a Recycling Certificate covering the downstream recovery of the material. The first satisfies your privacy and audit obligations, the second supports environmental and sustainability reporting.
Not on its own, for two reasons. It does nothing at all to solid state media, because there is no magnetic field to disturb. And on a magnetic disk it leaves you with a drive that looks exactly as it did before, so there is no visual evidence for an auditor and nothing to reconcile against a serial number. We shred instead, or shred afterwards. The background sits on does degaussing work on SSDs and what is degaussing.
Erase when the drive is healthy, the model is current enough to hold resale value, and your policy permits reuse. Shred when the drive has failed, is out of warranty and worth little, holds regulated or highly sensitive data, or when your policy simply says destroy. Many jobs are a mix of both. Erasure versus destruction sets out the decision, and can you recover data after wiping covers where erasure falls short.
Pricing is per drive or as a fixed job price, and moves on volume, media mix, whether destruction happens at your site or ours, whether drives are loose or still mounted in machines, and access at your location. We quote per job rather than publishing a rate card, because a single rate would be wrong for most jobs. Where devices carry resale value, buyback proceeds can offset the cost.
Small batches are welcome and are usually priced as a single collection with a fixed job price rather than a per drive rate. If you are also retiring the machines the drives came out of, it is generally cheaper to move the whole lot in one collection.
Hard disks in 3.5 inch and 2.5 inch formats, SSDs including M.2 and NVMe, server and SAN drives, USB drives and memory cards, LTO and DAT backup tapes, photocopier and multifunction printer drives, and mobile phones and tablets. Solid state and magnetic media are separated and routed to the correct treatment.
We confirm a collection window with you when we quote, based on volume, location and whether the job is on site or at our facility. Tell us your deadline at scoping. If it is tied to a lease end, an audit date or a decommissioning schedule, say so and we will work back from it.
The shredded material is sorted into recoverable streams, principally ferrous and aluminium metal, rare earth magnet material and circuit board, and passed to certified downstream processors for recovery under our ISO 14001:2015 environmental management system. Remaining material is processed in line with the AS/NZS 5377 standard. The recovery is certified back to you.
Australian Privacy Principle 11.2 under the Privacy Act 1988 (Cth) requires personal information to be destroyed or de-identified when no longer needed for a permitted purpose. The notifiable data breaches scheme requires notification where a breach is likely to cause serious harm. APRA CPS 234 applies to regulated financial entities. NSW public offices are additionally bound by the State Records Act 1998. Handling of the material after destruction is governed in NSW by the Protection of the Environment Operations Act 1997.
Four current ISO certifications issued by QAS International: ISO/IEC 27001:2022 for information security, certificate AUP1338IT, ISO 9001:2015 for quality, ISO 14001:2015 for environmental management, and ISO 45001:2018 for occupational health and safety. Copies are available on request and are listed on our certifications page.
We collect across Sydney metro and greater NSW from our North Rocks base, including the CBD, North Sydney, Parramatta, Macquarie Park, Norwest, Alexandria, Silverwater, Liverpool, Penrith, Sutherland Shire, Wollongong and the Hunter. If your suburb is not listed, ask when you request a quote.
Yes. Bulk destruction usually sits inside a wider data centre decommissioning or IT asset disposal project, with drives reconciled against the racks or machines they came from. The decommissioning checklist is the right starting point for scoping.
Hard drive disposal describes what happens to the drive as a physical asset: it leaves your building, gets collected, and ends up recycled, resold or scrapped. Hard drive destruction describes what happens to the data on it. The two are not interchangeable, and the gap between them is where most incidents start, because a drive can be disposed of perfectly responsibly and still leave the building readable. Safe hard drive disposal means the destruction step happens first, is evidenced in writing, and only then does the material move into recycling under a documented chain of custody. ITC does both inside one job and certifies both separately.
Physical destruction under a documented chain of custody, witnessed if your policy calls for it, and certified at serial level afterwards. Software erasure is a legitimate method for healthy drives you intend to reuse or resell, but it depends on the drive electronics responding correctly and on every region of the media being reachable. Shredding depends on neither. HDD destruction breaks up the platter that carries the magnetic recording; SSD destruction breaks up the flash packages that carry the charge. Drilling a hole through a drive, hitting it with a hammer or leaving it in a locked cupboard are not destruction methods, because none of them reliably destroy the whole recording surface and none of them produce evidence you can hand to an auditor.
ITC works from Unit 25, 16 Loyalty Road, North Rocks NSW 2151 and collects across Sydney metro and greater NSW, so hard drive shredding can happen at your address or at ours. If you are searching for a provider near you, distance matters less than two other things: whether the provider destroys the media itself or hands it to a subcontractor, and whether the certificate names every drive by serial number rather than counting cartons. We destroy in house, on your site or at our facility, and the certificate is serialised either way. Call 1300 048 226 or request a quote and tell us your suburb.
The Sydney market splits three ways: document shredding companies that added drives as a sideline, recyclers that offer destruction as an add-on to a collection, and ITAD providers such as ITC where data bearing media is the core of the work. The practical test is what sits behind the quote. Does the provider own and operate a commercial hard drive shredder rather than booking one in. Does it hold current ISO/IEC 27001:2022 certification for information security, not just a general quality mark. Does the certificate list serial numbers. Does it also certify where the shredded material ends up. Our list of questions to ask a data destruction company is the same list we would want asked of us.
Have a question that is not answered here? Call 1300 048 226 or contact our team and we will answer it directly.
Destroy the Drives. Keep the Evidence.
ISO certified hard drive destruction across Sydney, on your site or at our North Rocks facility. Every drive captured individually, every job certified twice, and a written scope before anything moves.