What is certified data destruction?
Certified data destruction is the secure, irreversible removal of data from hard drives, solid state drives and other redundant IT, verified with a certificate against each device serial number so you can prove compliance under UK GDPR. Secure hard drive destruction and shredding is carried out on site or at our Gloucester processing centre. It covers:
Our data destruction methods
The 3-step secure destruction process
Data erasure, data wiping and data sanitisation
Data erasure services, data wiping services and data sanitisation services describe the same outcome under different names, and which one you need depends on whether the hardware is being kept. Where equipment still holds value, drives are erased with Certus certified software to the Purge method defined by NIST 800-88, and the drive stays usable. Where it does not, the drive is shredded to BS EN 15713:2023, which is the Destroy method in the same standard. Both leave you with a certificate against the serial number.
On-site data erasure and on-site shredding are both offered, so nothing has to leave the building before the data is gone. Hard drive shredding, data tape destruction and secure data erase are all carried out by our own BS 7858 vetted staff with no subcontractors, across England, Wales and Scotland.
If you are comparing data destruction companies, the question worth asking is which of the two methods is being proposed for your estate and why. A supplier that erases where it can recovers value you would otherwise pay to destroy, which is why most customers find their collection is free, with no minimum quantity and any remaining logistics and processing fee quoted upfront.
Surplex UK Limited provides data destruction services for organisations across England, Wales and Scotland. Each service is delivered by our own BS 7858 vetted staff, using shredding to BS EN 15713:2023 or Certus certified erasure to NIST 800-88, depending on whether the hardware is being kept.
Data destruction specialists is the other term buyers use for this, and it is worth being plain about where the specialism sits. Destroying a drive is easy. Producing the evidence that it happened, against a serial number, on a date, by a named and vetted person, is the part an auditor asks about.
One drive out of a single returned laptop gets the same certificate as a pallet of them.
Media destruction, whichever media it is
Data destruction and media destruction describe the same work. Buyers use both, and media destruction is often the wording that ends up in a procurement specification, so it is worth being plain about what it covers here.
Surplex UK Limited destroys storage media of every common type. Hard drives and solid state drives, backup tapes, memory cards and other flash media are shredded to BS EN 15713:2023, the Destroy method defined by NIST 800-88, and a certificate of destruction is issued for what was destroyed.
Tape media destruction works the same way as drives. Tapes can be shredded on site with the mobile unit so nothing leaves the building, or collected under GPS-tracked transport and processed at the Gloucester processing centre. Electronic media destruction of any of these types can be witnessed if you want to see it done.
Why trust us with your data?
A complete, audit-ready trail
How we destroy data, and to which standards
Who we work with, and the licences we hold
Most collections are free
For most companies, IT disposal is a cost. With Surplex UK Limited, it doesn’t have to be. Our open-book value-offset model sets the value recovered from your redundant equipment against the cost of collection, certified data destruction and recycling. Most customers find their collection is free on that arithmetic, and on higher-value estates the balance can fall in your favour.
- Most customers find their collection is free, and there is no minimum quantity.
- Where the recovered value does not cover the work, a small logistics and processing fee is payable, quoted and agreed upfront.
- Technical and managed projects are fully quoted and managed by us, with complete end-to-end reporting.
We will always review your inventory and confirm any costs with you before collection, with no hidden fees.
Your certificates, filed automatically
Every destruction and erasure record lands in the Surplex Portal. Certificates, serial-level reports and ESG data are available 24/7 and ready for audit. The portal launched in 2025 and replaced waiting for paperwork by email.
Trusted in the sectors where compliance can’t slip
Surplex UK Limited works with organisations across sectors where a disposal mistake is public and costly, from defence and central government to the NHS. See how we handle it in yours.
Frequently asked questions
Surplex UK Limited holds data-bearing media in a strong room built to BS EN 1143-1, the standard that classifies secure storage units by their resistance to attack.
It is an attack-tested, insurance-grade vault designed to withstand professional mechanical and thermal tools, where many recyclers store drives in open warehouse cages. The media cannot be reached between arrival and final destruction.
Surplex UK Limited produces a full audit trail for every collection, available at any time in the Surplex Portal.
- WEEE waste transfer notes, the legal proof of compliant disposal
- A certificate of destruction against each device serial number
- Asset inventory reports carrying make, model, serial number and specification
- Scope 3 carbon and landfill-diversion figures for your ESG reporting
NIST 800-88 is the recognised guideline for media sanitisation, and it requires a defined process of overwriting, verifying and documenting rather than a single pass.
Standard wiping can leave recoverable traces behind. Surplex UK Limited works to NIST 800-88 and evidences it against each device serial number, which is what turns a claim into assurance.
Surplex UK Limited uses its own vetted drivers rather than third-party couriers, and provides foam-lined secure transit cases at the door.
Remote collections are where a chain of custody usually breaks. This keeps it unbroken from the employee’s desk to the processing centre.
Yes. Surplex UK Limited brings a mobile shredder to your facility, so your team can watch hard drives, solid-state media and tapes destroyed to 6mm particles before anything leaves the premises.
This is the usual route where an auditor requires visual verification.
Most customers find their collection is free, and there is no minimum quantity. Surplex UK Limited works on an open-book value-offset model, so the value recovered from your redundant hardware is set against the cost of collection, destruction and recycling, and you are shown both figures. Where the recovered value does not cover the work, a small logistics and processing fee is payable, quoted and agreed upfront before anything leaves your site. Destruction to NIST 800-88 and BS EN 15713:2023 is included either way.
Very likely. Surplex UK Limited collects and destroys hard drives across England, Wales and Scotland, with dedicated pages for London, Birmingham, Manchester, Cardiff and the Thames Valley. On-site shredding brings the mobile unit to your premises, so proximity to one of our sites matters less than it would with a drop-off service. There is no minimum quantity, so a single drive is booked the same way as a pallet.
On-site destruction means the mobile unit shreds the drives at your premises and the data never leaves the building. Off-site means the media travels under GPS-tracked transport to our Gloucester processing centre and is destroyed there. Both are carried out to BS EN 15713:2023 and both produce a certificate of destruction against each device serial number. On-site is usually chosen where a policy forbids data leaving the site, or where someone wants to witness it.
Yes. Solid state drives, memory cards and other flash media are shredded mechanically, the Destroy method defined by NIST 800-88. This matters because degaussing only affects magnetic media and has no effect on an SSD, so a magnetic method alone leaves solid state data intact. Surplex UK Limited shreds both, and where value is recovered from hardware, data is erased with Certus certified software to the NIST 800-88 Purge method instead.
Destruction is carried out to BS EN 15713:2023, which sets maximum particle sizes by material category, and NCSC guidance on secure sanitisation describes destructive sanitisation as reducing media to particles of 6mm or less. We confirm the category and the size that applies to your media before the collection, so the specification is agreed rather than assumed.
NIST 800-88 defines both as media sanitisation methods. Purge covers software erasure such as Certus, used where hardware is kept so its value can be recovered. Destroy covers mechanical shredding to BS EN 15713:2023, used where the media itself is physically destroyed. Which one applies depends on whether the hardware is being kept for value recovery or not, not on how sensitive the data is.
