Secure Data Destruction and Data Sanitisation

Secure Data Destruction and Data Sanitisation

ISO 14001 · ICO Registered · Environment Agency Licensed Carrier · JOSCAR Registered · FSQS Registered

Certified, GDPR-compliant data destruction for businesses, public sector and regulated enterprises across England, Wales and Scotland. On-site or in our secure facility — your data never travels undocumented.

Data Destruction and Sanitisation2026-09-11T15:06:30+01:00

What is certified data destruction?

Certified data destruction is the secure, irreversible removal of data from hard drives, solid state drives and other redundant IT, verified with a certificate against each device serial number so you can prove compliance under UK GDPR. Secure hard drive destruction and shredding is carried out on site or at our Gloucester processing centre. It covers:

  • Hard drive shredding and HDD destruction – secure physical destruction of hard drives to BS EN 15713:2023

  • SSD shredding and flash media destruction – secure destruction of solid state drives, SSDs, memory cards and mobile storage

  • Certified data wiping – software erasure to NIST 800-88 standards, for hardware from which value is recovered

  • Server & data centre media – at scale, on-site or in our facility

Our data destruction methods

On-site mobile shredding

On-site hard drive shredding at your premises, so your data never leaves site. Our mobile unit destroys hard drives (HDDs) and solid state drives (SSDs) to BS EN 15713:2023, witnessed if you wish, and issues a certificate against each serial number before we leave. The service runs across England, Wales and Scotland, including on-site data destruction in London.

Certified data wiping (Certus)

Where hardware retains value, certified Certus erasure sanitises data to NIST 800-88 standards – recovering value without compromising security.

Off-site Shredding & sanitisation

Where on-site isn’t practical, devices travel under sealed chain of custody to our secure facility, which includes a BS EN 1143-1 rated strong room, for destruction to BS EN 15713:2023 and certification.

The 3-step secure destruction process

1.
Secure collection

GPS-tracked vehicles, BS 7858-screened teams, serial-level logging from the moment your IT leaves site.

2.
Destruction or wiping

Drives are segregated, then shredded or wiped to NIST 800-88, on-site or in our facility.

3.
Certification & reporting

A certificate of destruction for every device, with full reporting in the Surplex Portal.

Media destruction, whichever media it is

Data destruction and media destruction describe the same work. Buyers use both, and media destruction is often the wording that ends up in a procurement specification, so it is worth being plain about what it covers here.

Surplex UK Limited destroys storage media of every common type. Hard drives and solid state drives, backup tapes, memory cards and other flash media are shredded to BS EN 15713:2023, the Destroy method defined by NIST 800-88, and a certificate of destruction is issued for what was destroyed.

Tape media destruction works the same way as drives. Tapes can be shredded on site with the mobile unit so nothing leaves the building, or collected under GPS-tracked transport and processed at the Gloucester processing centre. Electronic media destruction of any of these types can be witnessed if you want to see it done.

Why trust us with your data?

  • BS EN 1143-1 strong room: secure, rated storage for media awaiting destruction.
  • Collection from home workers: we recover devices from distributed and hybrid teams, not just your offices.

  • Single-provider accountability: no subcontractors, no undocumented transfers.

  • GPS-tracked, vetted logistics: a complete, unbroken chain of custody.

A complete, audit-ready trail

  • Certificate of destruction for every device
  • Serial-level reporting
  • Time-stamped chain-of-custody records
  • Secure, GPS-tracked transport documentation
  • WEEE evidence notes
  • ESG and carbon data, all available in your portal

How we destroy data, and to which standards

  • Surplex UK Limited destroys confidential material to BS EN 15713:2023, the current British and European code of practice for secure destruction, which covers how material is collected, transported, destroyed and evidenced.
  • Hard drives and solid-state media are shredded mechanically, the Destroy method defined in NIST 800-88, the US guideline for media sanitisation.
  • Where value is recovered from hardware, data is erased with Certus certified software to the NIST 800-88 Purge standard, which produces a report against each device serial number.
  • Media awaiting destruction is held in a BS EN 1143-1 rated strong room, the standard that classifies secure storage units by their resistance to attack.
  • Collection and destruction staff are screened to BS 7858, the British Standard for screening individuals working in a secure environment.

Who we work with, and the licences we hold

  • Surplex UK Limited works with organisations of every size, from single-site businesses to multi-site enterprises, and across the public sector including schools and colleges, NHS trusts and local councils.
  • Registered with the Information Commissioner’s Office.
  • Environment Agency licensed waste carrier, covering hazardous waste.
  • Certified to ISO 14001:2015 for environmental management.
  • JOSCAR-registered for defence and aerospace supply chains.
  • FSQS-registered for the supplier qualification system used across UK financial services.

Most collections are free

For most companies, IT disposal is a cost. With Surplex UK Limited, it doesn’t have to be. Our open-book value-offset model sets the value recovered from your redundant equipment against the cost of collection, certified data destruction and recycling. Most customers find their collection is free on that arithmetic, and on higher-value estates the balance can fall in your favour.

  • Most customers find their collection is free, and there is no minimum quantity.
  • Where the recovered value does not cover the work, a small logistics and processing fee is payable, quoted and agreed upfront.
  • Technical and managed projects are fully quoted and managed by us, with complete end-to-end reporting.

We will always review your inventory and confirm any costs with you before collection, with no hidden fees.

Your certificates, filed automatically

Every destruction and erasure record lands in the Surplex Portal. Certificates, serial-level reports and ESG data are available 24/7 and ready for audit. The portal launched in 2025 and replaced waiting for paperwork by email.

  • Certificates that file themselves
  • Serial-level destruction records
  • Exportable compliance and ESG reporting
The Surplex Portal showing tracked IT assets and their current value

Destroy your data with certainty and proof.

Book a secure collection, or talk to a data-destruction specialist

Frequently asked questions

What is the significance of the BS EN 1143-1 Strong Room?2026-08-22T09:30:50+01:00

Surplex UK Limited holds data-bearing media in a strong room built to BS EN 1143-1, the standard that classifies secure storage units by their resistance to attack.

It is an attack-tested, insurance-grade vault designed to withstand professional mechanical and thermal tools, where many recyclers store drives in open warehouse cages. The media cannot be reached between arrival and final destruction.

What documentation and compliance reporting will we receive?2026-08-22T09:30:52+01:00

Surplex UK Limited produces a full audit trail for every collection, available at any time in the Surplex Portal.

  • WEEE waste transfer notes, the legal proof of compliant disposal
  • A certificate of destruction against each device serial number
  • Asset inventory reports carrying make, model, serial number and specification
  • Scope 3 carbon and landfill-diversion figures for your ESG reporting
What is the difference between NIST 800-88 and standard data wiping?2026-08-22T09:31:09+01:00

NIST 800-88 is the recognised guideline for media sanitisation, and it requires a defined process of overwriting, verifying and documenting rather than a single pass.

Standard wiping can leave recoverable traces behind. Surplex UK Limited works to NIST 800-88 and evidences it against each device serial number, which is what turns a claim into assurance.

How do you secure data collected from remote or WFH employees?2026-08-22T09:31:10+01:00

Surplex UK Limited uses its own vetted drivers rather than third-party couriers, and provides foam-lined secure transit cases at the door.

Remote collections are where a chain of custody usually breaks. This keeps it unbroken from the employee’s desk to the processing centre.

Can we witness the destruction of our data?2026-08-22T09:31:11+01:00

Yes. Surplex UK Limited brings a mobile shredder to your facility, so your team can watch hard drives, solid-state media and tapes destroyed to 6mm particles before anything leaves the premises.

This is the usual route where an auditor requires visual verification.

Is there a charge for secure data destruction?2026-08-25T16:25:34+01:00

Most customers find their collection is free, and there is no minimum quantity. Surplex UK Limited works on an open-book value-offset model, so the value recovered from your redundant hardware is set against the cost of collection, destruction and recycling, and you are shown both figures. Where the recovered value does not cover the work, a small logistics and processing fee is payable, quoted and agreed upfront before anything leaves your site. Destruction to NIST 800-88 and BS EN 15713:2023 is included either way.

Do you offer hard drive shredding near me?2026-09-08T08:21:44+01:00

Very likely. Surplex UK Limited collects and destroys hard drives across England, Wales and Scotland, with dedicated pages for London, Birmingham, Manchester, Cardiff and the Thames Valley. On-site shredding brings the mobile unit to your premises, so proximity to one of our sites matters less than it would with a drop-off service. There is no minimum quantity, so a single drive is booked the same way as a pallet.

What is the difference between on-site and off-site hard drive destruction?2026-09-08T08:21:45+01:00

On-site destruction means the mobile unit shreds the drives at your premises and the data never leaves the building. Off-site means the media travels under GPS-tracked transport to our Gloucester processing centre and is destroyed there. Both are carried out to BS EN 15713:2023 and both produce a certificate of destruction against each device serial number. On-site is usually chosen where a policy forbids data leaving the site, or where someone wants to witness it.

Can you destroy solid state drives as well as hard drives?2026-09-08T08:21:45+01:00

Yes. Solid state drives, memory cards and other flash media are shredded mechanically, the Destroy method defined by NIST 800-88. This matters because degaussing only affects magnetic media and has no effect on an SSD, so a magnetic method alone leaves solid state data intact. Surplex UK Limited shreds both, and where value is recovered from hardware, data is erased with Certus certified software to the NIST 800-88 Purge method instead.

What size are the shredded particles?2026-09-08T08:21:46+01:00

Destruction is carried out to BS EN 15713:2023, which sets maximum particle sizes by material category, and NCSC guidance on secure sanitisation describes destructive sanitisation as reducing media to particles of 6mm or less. We confirm the category and the size that applies to your media before the collection, so the specification is agreed rather than assumed.

Go to Top