Standards and regulations
The platform is built around the requirements of these standards. Here is how each one shows up in the product.
- NIST SP 800-88 Rev. 2 · IEEE 2883-2022
- Clear, Purge, and Destroy methods by media type; verification kept separate from validation.
- ISO/IEC 27001:2022
- Controls for information deletion, equipment disposal, and suppliers (7.10, 7.14, 8.10, 5.19–5.22), records (5.33), and logging (8.15).
- R2v3
- Serialized records per medium, verification sampling of at least 5%, and downstream vendor management.
- NAID AAA
- Video of destruction and staff background checks, storing only the result and its expiry.
- HIPAA 164.310(d)
- Records of the disposal and re-use of electronic media containing health information.
- GLBA Safeguards Rule and FTC Disposal Rule
- Destruction of customer information and consumer reports, with evidence per asset.
- CJIS Security Policy and IRS Pub. 1075
- US-only access, vetted staff, and documented sanitization of media with protected data.
- Basel Convention
- E-waste does not cross borders: no device leaves the US unsanitized and unverified.
- WCAG 2.1 AA
- The portal, the field app, and this site are designed and tested to be accessible.
Certified partners
The physical work is done by ITAD partners certified to R2v3, NAID AAA, or e-Stewards. The platform keeps their certifications and expiry dates, and does not assign orders to a partner whose certification has lapsed.
Neural ITAD is not a certification body. The platform produces the evidence these standards require; each organization's conformity is determined by its auditor.
Have equipment to retire?
Register your organization in the portal, request a pickup, and follow every device to its certificate.