Secure IT Disposal for New Zealand Businesses
Retired computers and drives can still hold client files, payroll information and saved credentials. Exodesk provides secure IT disposal for New Zealand businesses through an agreed process for collection, data sanitisation or destruction, reuse or recycling, and disposal records.
The quote confirms the equipment, data treatment, responsibilities and returned records. We can help with a one-off clear-out or with disposal as part of your regular hardware refresh.
Supporting New Zealand businesses since 1989
What does secure IT disposal cover?
Secure IT disposal is the controlled retirement of business devices and storage: treating the data on them with a method suited to the media, recording what happened to each item, and sending the hardware for reuse or recycling. Suppliers also call this IT asset disposal, or ITAD.
The job starts with an equipment list and an agreed route for each item. Exodesk lists the equipment, arranges collection or handover, erases devices where that is suitable and returns the records. A specialist partner handles physical destruction and recycling, and the quote names who performs each stage.
Exodesk has supported New Zealand businesses since 1989. Today, our Christchurch and Dunedin teams support businesses nationwide, with collection and handover arrangements confirmed for each location.
What Exodesk covers in secure IT disposal
Each item gets an agreed route from the moment it leaves service to the record that closes it.
Listing and collection
An equipment list, including separately identified drives, with collection or handover arrangements and custody recorded.
Erasure or destruction
A sanitisation or destruction method matched to the storage, its sensitivity and whether the equipment will be reused.
Reuse, recycling and records
Reuse or recycling through our partner, with results you can link to each item in your asset register.
Secure IT disposal closes the record kept by IT asset management. Deciding when equipment should be replaced is hardware lifecycle planning, a separate question. Controlling sensitive data during daily use is data loss prevention, and household recycling and paper destruction sit outside this service.
Equipment we can help retire
Laptops, desktops, servers, loose drives, phones, tablets, external storage, backup media, printers and network equipment can all hold business information. Storage and treatment vary by model, so we confirm accepted equipment and collection arrangements before booking.
Before collection, confirm that records you still need have been transferred and checked, that the equipment is authorised for disposal and that any lease or return conditions are understood. Retiring a device does not mean its business records can be deleted; our data retention policy guide covers that decision.
Identify damaged batteries and equipment that will not start, and keep items in a controlled area until the agreed handover. Agree the sequence for accounts, certificates, licences and management registrations so retirement does not disrupt retained records or the disposal process.
Choosing erasure or physical destruction
The method is matched to the media, the sensitivity of the information and whether the equipment will be reused. NIST SP 800-88 Revision 2, published in September 2025, describes clear, purge and destroy methods with different recovery resistance and reuse implications.
- Deleting and formatting. Deleted files and quickly formatted drives may remain recoverable, depending on the storage and other controls.
- Resets. A reset is not automatically a verified erase. Microsoft notes that the Windows reset data-erasure function is aimed at consumers and does not meet government and industry data erasure standards.
- Solid state and encrypted drives. A generic secure-erase command, or encryption being enabled, is not enough assurance on its own. The method is checked for suitability and its completion validated.
- Magnetic media. Degaussing applies to suitable magnetic media with a matched field. It is not used on solid state drives and is not the same as physical shredding.
- Failed drives. Drives that cannot be treated successfully are held for an alternative method, such as physical destruction, rather than treated as finished.
Records and responsibilities
Equipment that remains usable gets an erasure or sanitisation record, and destroyed media gets a destruction record. Each record identifies the device, any separately handled drives and how they map to the device, the method, tool, outcome, date, responsible party and final destination.
A certificate records work; its title alone does not prove the outcome. Verification is part of the method, and the results are reconciled against the items collected before the job is closed. Custody is recorded through every stage, not only on a final certificate.
Government information or contracts may carry specific New Zealand Information Security Manual requirements, which must be agreed before collection. Supplying a government agency does not automatically apply every media control to every device in a business, and our partner arrangements are confirmed in the quote.
How a secure IT disposal job runs
Every secure IT disposal job follows the same four steps, whether it is a backlog clear-out or a regular refresh.
List and authorise
Record the equipment and any separately identified drives. Confirm ownership, retained information and the agreed destination.
Arrange the handover
Agree collection, custody records and handling responsibilities, and reconcile what is handed over against the list.
Complete and check the work
Carry out the agreed data treatment. Hold failed or incomplete items for an alternative method rather than treating them as finished.
Reconcile and close
Match the returned results to the items collected, then mark assets as retired with the outcome attached and their history kept.
The Privacy Act requires reasonable safeguards for personal information and retention only for lawful purposes. If information is exposed, assess whether the breach has caused, or is likely to cause, serious harm; the Privacy Commissioner’s breach assessment guidance explains when to notify. The fine of up to $10,000 applies to failing, without reasonable excuse, to notify the Commissioner, and it is not a cap on every consequence of a breach.
What affects the cost of secure IT disposal?
Cost depends on location, quantities, equipment types, condition and the data treatment required. The quote separates each part so you can see what you are paying for.
- Collection. Location, access and volume, with any minimum charge stated.
- Data treatment. Erasure, physical destruction for failed or sensitive drives, and the reporting required.
- Recycling. Processing of the remaining hardware through our partner.
- Resale value. Whether any value from working equipment is returned, offset or retained, agreed in the quote.
GST treatment and minimum charges are clear in the quote. Ongoing disposal can be folded into managed IT services so retired equipment has an owner and a scheduled route.
Secure IT disposal questions
What is secure IT disposal?
Secure IT disposal is the controlled retirement of business devices and storage: treating the data on them, recording what happened to each item, and sending the hardware for reuse or recycling. It is also called IT asset disposal, or ITAD. Your business remains responsible for authorising disposal and confirming that the agreed work is completed and recorded. Retain the records so the outcome can be checked later.
Is a factory reset enough before selling or donating a laptop?
Do not rely on a reset alone as proof that business data has been sanitised. The required method depends on the device, the storage and the intended destination. Check the method and its completed result before the device is released.
Should we wipe drives or physically destroy them?
Choose according to the storage, information sensitivity, equipment condition and agreed requirements. Reuse may be suitable after successful sanitisation. Drives that cannot be treated successfully need a controlled alternative before the job is closed.
What records should we receive?
Ask for results that identify the device and any separately handled storage, the work completed, the date, the responsible provider and the destination. A destruction record suits destroyed media, while successfully erased equipment needs the corresponding erasure record.
Which devices hold data that needs treating?
Laptops, desktops, servers, loose drives, phones, tablets, USB sticks, external drives and backup media can all hold recoverable data. Some printers and copiers store scanned images, and network equipment can hold configurations and credentials. Storage varies by model, so check each item.
How much does secure IT disposal cost?
It depends on quantities, location, equipment condition and the treatment required. The quote identifies collection, data treatment, reporting and recycling charges, including GST treatment and any minimum charge. Any resale-value arrangement is agreed separately.
Can we use a recycler or drop-off point?
Possibly, once the data has been treated appropriately and the equipment is accepted. A recycling receipt alone does not establish what happened to the data. Agree who handles each stage and keep the relevant records.
What does the Privacy Act require?
Use reasonable safeguards for personal information and keep it only for lawful purposes. Before disposing of a device, preserve records you still need and address the data remaining on it. If a breach occurs, assess whether it is likely to cause serious harm and whether notification is required.
Does a magnet erase a hard drive?
A household magnet is not a reliable way to erase a drive. Degaussing uses equipment matched to suitable magnetic media and does not apply to solid state drives. Use a method suited to the storage and record the result.
Where does Exodesk provide secure IT disposal?
Exodesk has supported New Zealand businesses since 1989, and our Christchurch and Dunedin teams support businesses nationwide. Collection, handover and partner arrangements are confirmed for your location. Tell us where the equipment is and roughly how much there is.
Discuss your equipment clear-out
Tell us your location, roughly how much equipment you have and whether it includes loose drives, failed devices or leased machines. We will confirm what can be accepted and scope the next step. Please leave passwords and client information out of the enquiry.
Book secure IT disposal
Tell us your business name, location, the equipment types and approximate quantities, and we will be in touch to arrange a time that suits.
Prefer to talk?
Christchurch
Level 1, 85 Riccarton Road
Christchurch 8011
03 343 3124
Dunedin
Level 3, Bartons Building
2 Stafford Street, Dunedin 9016
03 479 2941