Hard drives listed on a laptop asset scan before shredding.

What is a certificate of destruction for hard drives?

By Andy Pedley, Director. Updated October 12, 2026.Andy runs Secure Transportation Ltd, which has been trading since 1996 and works from Church Crookham, Fleet, Hampshire.

A certificate of destruction for hard drives is the record that proves your drives were destroyed. A proper one gives the date, place and method, and lists the make, model and serial number of every drive, so you can check it against your asset register. Ours is issued the same day, before we leave an on-site job.

When
Where
Hard drives listed on a laptop asset scan before shredding.

Why the serial numbers are the point

The most common weakness is a certificate that states a quantity and nothing else. "Forty drives destroyed" can't be checked against anything. If you have an asset register, a certificate that lists every serial number lets you tick each drive off, and an auditor can do the same.

That's why we scan the make, model and serial number of every drive with a handheld barcode scanner before it goes into the shredder, and why those numbers are on the certificate. It's also the difference between data destruction and throwing drives in a skip.

Some suppliers call it certified data destruction. Whatever it's called, the test is the same. Can you trace it back to your own list?

What a good certificate contains

  • Certificate reference | What it shows: One unique reference for the job | Why it matters: Ties the certificate to the serial list and the invoice
  • Date and place | What it shows: When and where the media was destroyed | Why it matters: The record of the event
  • Client | What it shows: Whose data it covers | Why it matters: Names the owner of the data
  • Media destroyed | What it shows: Type and quantity | Why it matters: The quantity must match your asset list
  • Method | What it shows: For example, shredded on site at H-3 with a 40mm strip cut (DIN 66399). Degaussed media is recorded the same way | Why it matters: States how, and to what specification
  • Serial schedule | What it shows: Every drive by make, model and serial | Why it matters: The serials are the proof
  • Chain of custody | What it shows: Drives scanned as they went into the shredder. Off site drives moved in sealed conditions | Why it matters: Shows control from release to destruction
  • Witness | What it shows: Client staff signed the list, if they watched | Why it matters: Optional. On site shredding can be witnessed
  • Waste carrier | What it shows: Registration details. Ours: upper tier, CBDU551195 | Why it matters: Shows the carrier is registered
  • Issued by | What it shows: A named person | Why it matters: Someone takes responsibility for the record
  • Date issued | What it shows: Same day as the destruction | Why it matters: Stops a certificate drifting away from the job

Our free Sample Certificate of Destruction walks through each entry with an invented client and invented serial numbers, and finishes with a twelve point checklist for checking any certificate you're given. It isn't a legal form. It's an example of what a good record looks like.

How to check a certificate against your register

Take the serial list from the certificate and your own asset register and match them, line by line. A drive in your register but not on the certificate is a question for your supplier before the job is closed. So is one on the certificate but not in your register.

Our IT Asset Register and Serial Reconciliation Sheet does the matching for you. It's an Excel sheet that compares the two lists and shows a single result: reconciled, or exceptions to resolve. Serials are matched exactly, ignoring spaces and capitals, so check for typing errors before you raise a query.

What sits around the certificate

The certificate is one document in a set. On a proper job you'd expect the asset list, the chain of custody, the certificate itself and, if the equipment went on for recycling, the waste paperwork and the WEEE certification. Our On-Site Shredding Evidencing Pack shows the full set, from the cover sheet to the shred verification.

Jobs where this mattered

  • April 2022, a data centre in Slough. We decommissioned eight racks and scanned and shredded a few hundred enterprise hard drives. The certificate was issued, and the equipment went through ITAD with full WEEE certification.
  • August 2022, Surrey. 300 hard drives and tapes were audited and destroyed with the client watching.
  • November 2021, a London data centre. Over 500 hard drives shredded in the back of a van, scanned in first, with a certificate at the end.

Certificate of destruction questions

It's the signed record that data bearing media was destroyed. It says what was destroyed, how, where and when, and it should list the serial numbers. Ours also names the waste carrier registration, CBDU551195.

A unique reference, the date and place, the client, the quantity, the method, a serial schedule listing every drive, the chain of custody, who issued it, and the date issued. The table above shows each entry and why it's there.

Usually that the destruction came with a certificate like this one. Ask what the certificate lists, how the serial numbers were captured, and what standard the destruction met. Ours is H-3 on the DIN 66399 scale, a 40mm strip cut from an HSM Powerline StoreEx HDS 150.

For on-site shredding, before we leave. We issue it the same day as the destruction.

There isn't one standard form. It's evidence, and auditors, procurement teams and InfoSec teams ask for it. A certificate with no serial list proves little, so ask for one with the list.

Yes. We destroy tapes, optical media, USB sticks, solid state drives, phones and tablets as well as hard drives, and the certificate records the media type and quantity. We scan the drives out of computers and list them.

Yes. On site shredding can be witnessed, and on one job the client's own client came to watch. You can sign the serial list as a witness.

Raise it before you close the job. Use the reconciliation sheet to find the exceptions, then ask your supplier to explain each one in writing.

Related guides

We reply to every enquiry. Your details are used only to answer it. Privacy notice

Thank you, your enquiry has been sent

We have your details. Someone from the team will read it and come back to you by phone or email.

We reply to every enquiry. Your details are used only to answer it. Privacy notice

Thank you, your enquiry has been sent

We have your details. Someone from the team will read it and come back to you by phone or email.

CallGet a quote