From your floor to final disposition
A Chain of Custody You Can Prove
When an auditor asks where a retired laptop went, "our vendor took it" is not an answer. BoxQ documents every step: who handled each device, where it traveled, what its serial number was, and how the data on it was destroyed.
Every Step, Accounted For
Most custody gaps happen at handoffs: a subcontracted driver, a pallet left overnight, a warehouse nobody tracks. Ours has none, because the same company carries your equipment from the moment it is unplugged until the certificate is signed.
- 1
You unplug
Your team unplugs anything connected to a wall. That is the only step on your side; everything after it is ours.
- 2
We schedule the pickup
We set a date around your operations and confirm what is coming, so the crew arrives with the right truck and equipment.
- 3
Removal by our own employees
BoxQ employees remove the equipment from your floor. No subcontractors, no day labor, no handoffs to people you have never met.
- 4
Palletized and loaded
Equipment is palletized, wrapped, and loaded by the same crew, so nothing sits unattended on a loading dock.
- 5
GPS-tracked transport
Every load travels to our Georgetown, MA facility on a GPS-tracked BoxQ truck, straight from your building.
- 6
Serialized inventory
Each item is logged by category, make, model, serial number, and asset tag, so the record matches what left your building.
- 7
Data destruction
Removable drives are shredded on our own shredder. Phones, tablets, and other devices with built-in storage are wiped to NIST 800-88 standards.
- 8
Certificate for the lot
A Certificate of Destruction and Disposition closes out the lot, signed by BoxQ and tied to the inventory report.
- 9
Responsible downstream processing
Materials go on to Colt Recycling for final processing, so the chain continues past our facility.
Ownership and Liability, in Writing
Upon receipt, retired equipment becomes the legal property of BoxQ, and BoxQ assumes liability for it from the delivery date through final disposition. BoxQ is fully insured. Your organization is not left holding responsibility for devices it no longer controls.
That responsibility is stated on the Certificate of Destruction and Disposition itself, so it travels with your records instead of living in a contract nobody can find.
Data Destruction, Matched to the Device
Removable hard drives and SSDs are physically shredded on BoxQ's own hard drive shredder at our Georgetown facility. BoxQ does not shred on site. Devices with storage that cannot be removed, such as phones and tablets, are wiped to NIST 800-88 standards. Equipment that still has resale value can be wiped and remarketed instead of shredded.
What Your Documents Show
Here is what BoxQ can document for you. Two records work together: an itemized inventory of what left your building, and a certificate that closes out the lot.
Serialized inventory report
- One line per item: category, make, model, serial number, and asset tag
- Counts for each category, such as computers, monitors, laptops, and loose hard drives
- A note where a device carries no serial or no asset tag, instead of a silent gap
- The lot number that ties the report to its certificate
Certificate of Destruction and Disposition
- Your organization and the lot number
- The date and the location equipment was collected from
- The number of units covered
- How the data was destroyed: physical shredding or wiping
- Signed by BoxQ, which assumes liability from the delivery date
Serialized Inventory
· Lot 3103
Customer
Sample Company
100 Any Street
Anytown, MA 00000
- Ship via
- BoxQ
- Lot no.
- 3103
- Units
- 76
| Make | Model | Serial | Asset tag |
|---|---|---|---|
| Computers: 4 total units | |||
| HP | ProLiant DL380 | SGH2•••••• | 10447 |
| Lenovo | ThinkCentre M73 | 1S10•••••••••••••••• | 10969 |
| Monitors: 7 total units | |||
| Dell | P2319H | 4RG•••• | 11830 |
| ViewSonic | VX2233wm | R3Q0•••••••• | no asset tag |
| Laptops: 15 total units | |||
| Lenovo | ThinkPad X230 | 1S23•••••••••••• | 9901 |
| Dell | Chromebook | 497•••• | no asset tag |
| Network equipment: 15 total units | |||
| Crestron | TSW-760 | 208•••• | no asset tag |
| Netgear | FS108P | 3BN1••••••••• | no asset tag |
| Loose hard drives: 7 total units | |||
| HGST | Z7K500-500 | Y9J•••• | — |
| Seagate | ST500LM021 | W62•••• | — |
| Pulled hard drives: 15 total units | |||
| Samsung | MZNLN128 | S3R7•••••••••• | — |
| Hitachi | Z7K320-320 | 63J•••• | — |
| Phones and tablets: 5 total units | |||
| Apple | iPad Air 2 | SDMP••••••••• | — |
Also in this lot: Printers (1) and miscellaneous devices (7). Make, model, and serial number recording (optional) for each item in this lot.
Hard drive shredding / data destruction (optional): 27 units: 7 loose drives and 15 pulled drives shredded, 5 tablets wiped to NIST 800-88 standards.
Certificate of Destruction and Disposition
Customer: Sample Company
Lot # 3103
TO WHOM IT MAY CONCERN:
BoxQ hereby certifies that the products delivered (detailed in the attached inventory) to our location have been destroyed and disposed of in accordance with EPA/Federal guidelines and Massachusetts state law.
BoxQ assumes all liabilities for this product from the delivery date to the disposal of said equipment.
Location: 100 Any Street, Anytown, MA 00000
Description: 76 units
All items, upon receipt, become the legal property of BoxQ, and BoxQ assumes sole responsibility for destruction and disposition within standard and usual practices.
President, BoxQ
Georgetown, MA 01833
Records Built for Compliance Reviews
Hospitals, banks, schools, and public agencies all answer to someone about retired devices. BoxQ does not certify or audit your compliance; our records give your compliance team the evidence it needs to show how equipment and data were handled.
Documentation built for the standards your auditors work under
Serialized inventories and Certificates of Destruction give your team the records these frameworks ask for.
Cybersecurity standards
- ISO/IEC 27001
- SOC 1
- SOC 2
- PCI-DSS
- NIST 800-53
- NIST 800-171
- TISAX
- CMMC
- ISO/IEC 22301
Policy standards
- GDPR
- HIPAA
- CCPA
- ISO/IEC 27701
- APEC
- HDS
See how this applies to healthcare, financial services, government and defense, education, and corporate teams.
We operate in full alignment with industry-leading disposition standards. To ensure fully auditable responsible recycling, we partner with Colt Recycling—an R2v3 and ISO 9001/14001/45001 certified facility—for all downstream processing.
Need a Chain of Custody You Can Show an Auditor?
Tell us what you are retiring and where it is. We reply within one business day. Once it is unplugged, we handle everything after.