IT asset disposition (ITAD) glossary
Understand the language of IT asset retirement, data security and equipment recovery. Explore 84 clear definitions, each with a link to an ITAMG guide, tool or service for the next level of detail.
Browse the glossary
Search by a term, acronym or alternate name, or choose a topic below.
84 terms
7 terms
ITAD and asset management
The terms behind a controlled equipment retirement program.
IT asset
An IT asset is technology an organization owns, leases or manages to support its work. ITAD usually concerns physical assets such as computers, servers, storage and network equipment, including any data-bearing components they contain.
IT asset disposition (ITAD)
IT asset disposition is the controlled retirement and handling of IT equipment an organization no longer needs. It brings together inventory, data sanitization, logistics and decisions about reuse, resale, donation or recycling.
Also called: IT asset disposal; information technology asset disposition.
IT asset lifecycle
The IT asset lifecycle is the sequence of stages technology passes through, from acquisition and deployment to maintenance, retirement and final disposition. Lifecycle management coordinates decisions across those stages, including when to extend use and when to retire equipment.
Also called: IT asset lifecycle management; hardware lifecycle management.
IT asset management (ITAM)
IT asset management tracks and governs an organization's technology, costs, ownership and use throughout its lifecycle. IT asset disposition covers the retirement and disposal stage within that broader management process.
IT asset retirement
IT asset retirement removes equipment from active use after the organization approves its release. The equipment may then be redeployed, returned to a lessor, resold, donated or recycled, depending on ownership, condition and security requirements.
ITAD policy
An ITAD policy sets an organization's rules for retiring and disposing of IT assets. It assigns responsibilities and requirements for release approval, data sanitization, reuse, recycling, vendor selection and records.
ITAD vendor (ITAD provider)
An ITAD provider manages the retirement and disposition of IT equipment for other organizations. Its services may include collection, data sanitization, resale and recycling. Evaluate the provider's actual service scope and the facilities, methods and media covered by its certifications.
Also called: ITAD company.
7 terms
Selling and buyback
How retired equipment reaches its next owner and recovers value.
Data center liquidation
Data center liquidation sells surplus servers, storage, networking equipment and other assets to recover value. It is the commercial disposition of equipment and may form part of a larger decommissioning or consolidation project.
IT asset liquidation
IT asset liquidation converts surplus or retired equipment into cash through an agreed sales process. The scope may involve individual asset groups or a larger closure, refresh or consolidation, with ownership and data handling resolved before transfer.
IT asset recovery
IT asset recovery is the process of recovering financial or practical value from equipment an organization no longer needs. It can include resale, refurbishment, redeployment and parts recovery, with data sanitization completed before equipment is reused.
IT asset remarketing
IT asset remarketing prepares and sells used equipment into a secondary market. It can involve testing, grading, appropriate sanitization and matching equipment to buyers, with the aim of recovering value from hardware that remains useful.
IT equipment buyback
IT equipment buyback is a transaction in which a buyer purchases used or surplus IT hardware from its owner. The offer depends on the equipment and agreed terms, including condition, configuration, market demand and any project deductions.
Also called: IT asset buyback; sell used IT equipment; Sell used IT equipment.
Revenue-share buyback
Revenue-share buyback pays the equipment owner an agreed share of resale proceeds. The contract needs to define the calculation base, permitted deductions, reporting and payment timing so the owner can understand the amount retained.
Server buyback
Server buyback is the purchase of used servers from their owner for an agreed price. Processor configuration, memory, storage, condition and demand influence the offer, while the project terms define data sanitization, collection and settlement.
6 terms
Equipment value and depreciation
Separate accounting values from resale estimates and project proceeds.
Computer depreciation
Computer depreciation allocates the depreciable cost of computer equipment over its useful life for accounting purposes. The resulting book value is separate from the equipment's resale value, which depends on the market and the asset's condition.
Also called: IT asset depreciation; equipment depreciation.
Fair market value of IT equipment
Fair market value is an estimate of the price informed, willing parties would agree for equipment in an open market without being forced to transact. For used IT equipment, configuration, condition and current buyer demand affect that estimate.
Net book value
Net book value is the amount an asset is recorded as being worth in an organization's accounts. Under a cost-based model, it generally equals cost minus accumulated depreciation and impairment. It is separate from the amount a buyer might pay for the equipment.
Also called: carrying amount; NBV.
Net recovery value
Net recovery value is the amount remaining from equipment recovery after the applicable deductions and project costs. A useful comparison states which costs are included, whether figures are estimates or quotes, and which equipment the calculation covers.
Also called: net proceeds; net ITAD recovery.
Residual value
Residual value is the estimated amount recoverable from an asset at the end of its planned useful life, after relevant disposal costs. It is an input to depreciation calculations and does not establish today's buyback price.
Also called: salvage value; equipment residual value.
Straight-line depreciation
Straight-line depreciation spreads an asset's depreciable cost evenly over its useful life. Subtract the estimated residual value from the asset's cost, then divide by its useful life to calculate the depreciation charge for each period.
13 terms
Data destruction and erasure
Methods, policies and checks for removing access to stored data.
Clear (NIST sanitization)
Clear is a NIST sanitization category that protects against straightforward recovery through the storage interface available to an ordinary user. It addresses user-accessible storage locations and provides a different level of assurance from Purge or Destroy.
Also called: Clear sanitization; NIST Clear.
Cryptographic erasure
Cryptographic erasure makes encrypted data unreadable by securely eliminating the keys needed to decrypt it. The drive can remain reusable, but the method works only if the target data was encrypted and every relevant copy of the keys is handled correctly.
Also called: cryptographic erase; crypto erase; crypto-shredding.
Data destruction
Data destruction makes target information infeasible to recover through an appropriate logical or physical process. The method, verification and documentation depend on the storage media and the organization's security requirements.
Data destruction policy
A data destruction policy defines when data must be destroyed, which methods are permitted and how the outcome is documented. It should connect retention requirements, media types, responsibilities and verification to the organization's security requirements.
Data erasure (data wiping)
Data erasure sanitizes information while allowing suitable storage media to remain reusable. Depending on the device and requirements, it can involve overwriting, supported sanitize commands or cryptographic erasure. Ordinary file deletion alone does not establish a verified erasure result.
Data remanence
Data remanence is information that remains on storage media after data has been deleted or incompletely sanitized. It explains why removing files from view does not necessarily prevent their recovery.
Data sanitization
Data sanitization is a process that makes access to target data on storage media infeasible to the required level of assurance. NIST SP 800-88 groups sanitization into Clear, Purge and Destroy, with the method selected for the data and media involved.
Destroy (NIST sanitization)
Destroy is a NIST sanitization category that makes recovery of target data infeasible with advanced laboratory techniques and leaves the media unable to store data. The destruction technique must suit the media and the required assurance.
Also called: Destroy sanitization; NIST Destroy.
Purge (NIST sanitization)
Purge is a NIST sanitization category designed to make recovery of target data infeasible even with advanced laboratory techniques. A suitable purge technique depends on the media and implementation; some techniques allow the device to be reused.
Also called: Purge sanitization; NIST Purge.
Sanitization validation
Sanitization validation determines whether the sanitization outcome is acceptable for the information and media involved. It considers the selected technique and the verification evidence, including any exceptions, before approving the next disposition step.
Sanitization verification
Sanitization verification checks whether a sanitization operation completed as intended. It examines completion status, errors and other available evidence. The result then informs validation, the decision about whether the outcome is acceptable.
Secure erase
In storage hardware, Secure Erase is a drive-level function intended to sanitize stored data. The command and its effectiveness depend on the drive technology and implementation, so its reported completion must be checked against the required sanitization outcome.
Also called: SSD secure erase; drive sanitize command.
SSD sanitization
SSD sanitization makes target data on a solid-state drive infeasible to recover using a method suited to flash storage. Depending on the device and security requirement, options can include supported sanitize commands, cryptographic erasure or physical destruction.
7 terms
Physical destruction and shredding
Understand the method, the media and where processing takes place.
Degaussing
Degaussing uses a magnetic field to sanitize suitable magnetic storage media, such as certain hard drives and tapes. The equipment must be appropriate for the media's magnetic properties. Degaussing does not sanitize flash-based SSDs.
Hard drive crushing
Hard drive crushing physically deforms or punctures a drive as part of a destruction process. Whether the result meets a required security outcome depends on the media and procedure; damaging the enclosure alone does not prove that all stored data is unrecoverable.
Hard drive shredding
Hard drive shredding cuts drives into fragments as a physical destruction method. The process and resulting fragments must suit the media and the required security outcome, with records identifying what was processed.
Off-site data destruction
Off-site data destruction takes place at a separate processing facility after media is collected. Secure transport, documented custody, controlled storage and evidence of processing are important parts of the service.
On-site data destruction
On-site data destruction takes place at the customer's premises. It allows an organization to specify where media is processed and how the work is witnessed and recorded, while the method and verification requirements still depend on the media.
SSD destruction
SSD destruction makes a solid-state drive's data-bearing components unusable through an appropriate physical process. It is an option when reuse is unsuitable or destruction is required; the process must address the flash-memory components that contain the data.
Tape destruction
Tape destruction physically renders data-bearing tape unusable so its recorded information cannot be recovered to the required standard. The process must suit the tape media, and the inventory and outcome should be documented.
11 terms
Decommissioning and hardware refresh
Plan what leaves service, what moves and what happens next.
Colocation exit
A colocation exit removes an organization's equipment and services from a third-party data center. It coordinates release requirements, access, equipment removal and contractual handback, alongside the disposition of any retired assets.
Data center consolidation
Data center consolidation combines workloads or equipment from several environments into fewer locations or systems. The project creates decisions about which assets will move, remain in service, be resold or be recycled.
Data center decommissioning
Data center decommissioning retires equipment or infrastructure from an operating environment. It coordinates dependency checks, shutdown, inventory, data handling, removal and final asset disposition as part of a closure, migration or consolidation.
Data center relocation
Data center relocation moves IT equipment and supporting operations to another site. It requires planning for dependencies, downtime, transport, installation and validation, with a separate disposition plan for equipment that will not move.
End of life (EOL)
End of life is the point at which a product reaches the end of a defined lifecycle. Vendors use the term differently, so check whether an EOL notice means the end of sales, updates, support or another milestone before making a retirement decision.
Also called: end-of-life hardware; server end of life.
End of service life (EOSL)
End of service life is a vendor-defined point after which the manufacturer no longer offers specified support or maintenance for a hardware product. Equipment may still function, so organizations must assess support options, risk and replacement plans.
Also called: hardware end of service life.
End of support (EOS)
End of support is the date a vendor stops providing the support covered by a product's lifecycle policy. Software may keep running after that date, while updates or technical assistance cease unless a separate support arrangement applies.
Also called: software end of support.
Hardware refresh
A hardware refresh replaces or upgrades an organization's IT equipment to meet performance, support or security needs. Planning a refresh includes deciding which outgoing assets can be redeployed, sold, donated or recycled.
IT decommissioning
IT decommissioning retires technology from active use and closes out the associated operational responsibilities. For physical equipment, it can include access removal, disconnection, data handling, inventory updates and transfer to an approved reuse or disposal route.
Lease return management
Lease return management prepares leased equipment for return under the lease agreement. It coordinates inventory, required condition, data sanitization, packaging, shipping and evidence of return so the organization can meet its obligations.
Server decommissioning
Server decommissioning removes a server from service through a controlled process. It includes checking dependencies and retention needs, recording the asset, addressing stored data, disconnecting equipment and approving its next destination.
9 terms
Recycling and reuse
Keep useful equipment in service and manage the materials that remain.
Asset redeployment
Asset redeployment puts equipment back into use elsewhere within the same organization. It can extend useful life when the hardware meets the new user's needs and the required data, configuration and ownership checks are complete.
Circular economy in IT
A circular economy keeps products and materials in use through maintenance, repair, reuse and recovery. For IT equipment, this means assessing useful-life extension and reuse before processing the remaining materials through recycling.
Computer donation
Computer donation transfers usable equipment to another organization or individual without a sale. Business donations require checks on ownership, condition, data sanitization and the recipient's ability to use the equipment.
Computer refurbishment
Computer refurbishment prepares used equipment for another period of use through assessment, testing, cleaning and any necessary repair or parts replacement. Data sanitization is a separate requirement when the equipment contains information from a previous user.
Downstream vendor
A downstream vendor receives equipment, components or materials from another processor for further handling. In ITAD and electronics recycling, evaluating downstream vendors helps establish where material goes and how data, environmental and safety requirements are managed.
E-waste
E-waste is discarded electrical or electronic equipment and its components. In business IT, it includes computers, servers, storage devices and other hardware that enters a waste stream. Assessing reuse and resale options can keep useful equipment out of that stream.
Also called: electronic waste; electronic scrap; e-scrap.
Electronics recycling
Electronics recycling recovers materials from electrical and electronic equipment that has reached its recycling stage. Business computer and IT equipment recycling are applications of that process, with data-bearing media handled under the required sanitization controls.
Also called: IT equipment recycling; IT asset recycling; computer recycling.
Focus Materials
Focus Materials are categories of material that the R2 Standard identifies as needing additional care because of potential environmental, health or safety harm. Examples include mercury, certain batteries, circuit boards and CRT glass.
Server recycling
Server recycling recovers materials from servers and components that are no longer suitable for reuse. Data-bearing media must be identified and sanitized or destroyed as required before the equipment proceeds through recycling.
10 terms
Inventory, custody and reporting
Connect the equipment you release with the records you receive.
Asset reconciliation
Asset reconciliation compares records from different stages of an ITAD project to confirm that equipment is accounted for. Differences between the release inventory, received inventory and processing results must be investigated and resolved.
Certificate of data destruction
A certificate of data destruction records the provider's stated completion of data destruction for identified media. It should connect the assets, method, date and result to the underlying processing records. It supports an audit trail but does not, by itself, prove every legal requirement was met.
Certificate of recycling
A certificate of recycling records a provider's receipt and processing of equipment or materials covered by a recycling job. It should identify the work performed and link to the relevant inventory or quantities. It is separate from the recycler's independent certification.
Certificate of sanitization
A certificate of sanitization records the sanitization performed on identified media and its outcome. It can document a reusable-media method as well as destruction, so the stated method, device identifiers and verification details matter more than the document's title.
Chain of custody in ITAD
Chain of custody in ITAD is the documented record of who possesses or handles each retired asset, where it moves and when custody changes. Device identifiers connect collection, transport, processing and final disposition records.
Data-bearing device
A data-bearing device contains storage that can retain information. Alongside computers and drives, this can include equipment such as printers, network appliances and embedded systems, so an ITAD inventory must identify storage beyond obvious hard drives.
Disposal inventory report
A disposal inventory report records the equipment processed during an ITAD job and the reported outcome for each asset. Typical fields include asset identifiers, configuration, condition and services performed, with links to supporting certificates where applicable.
IT asset inventory
An IT asset inventory is a record of the technology an organization owns or manages. For an ITAD project, it identifies equipment by details such as manufacturer, model, serial number, location and condition so the assets released can be checked against those received and processed.
IT asset tracking
IT asset tracking follows equipment's identity, location, custody and status over time. In an ITAD project, tracking connects each released device with its collection, receipt, processing and final disposition records.
Reverse logistics in ITAD
Reverse logistics in ITAD moves equipment from its users toward a return, reuse, resale or recycling destination. It includes collection, packaging, transport and receiving controls, with additional safeguards where assets contain data.
10 terms
Certifications and standards
Distinguish provider certifications, standards organizations and technical guidance.
ADISA certification
ADISA Certification offers schemes that assess IT asset disposition providers' data-protection and risk-management practices. Buyers should check the particular scheme, certified facility, activities and current status rather than treating every ADISA certificate as equivalent.
DoD 5220.22-M
DoD 5220.22-M is a legacy US security-manual reference commonly associated with multi-pass data-overwriting routines. It should not be treated as a current, universal sanitization instruction for every storage device, particularly flash-based media.
e-Stewards certification
e-Stewards Certification is an independent certification program for responsible electronics processing. It addresses data protection, environmental and worker safeguards, and controls on hazardous electronic waste, including restrictions on where it may be exported.
IEEE 2883
IEEE 2883 is a standard for sanitizing storage. It sets out methods and technology-specific requirements for eliminating recorded data from logical and physical storage, complementing an organization's wider media sanitization program.
NAID AAA certification
NAID AAA Certification is i-SIGMA's audit program for information-destruction providers. Certification scope identifies the approved operations, such as physical media destruction or electronic media erasure, together with the relevant facility, service and media coverage.
NIST SP 800-88
NIST SP 800-88 is media sanitization guidance published by the US National Institute of Standards and Technology. It helps organizations establish sanitization programs and select controls for stored data. Revision 2 replaced Revision 1 in September 2025. NIST does not certify destruction providers against it.
R2 Equipment Categorization (REC)
R2 Equipment Categorization is the reference framework used with R2v3 to describe the condition and processing status of equipment, components and materials. It helps facilities apply consistent categories or map their own categories to the R2 framework.
Also called: R2 equipment categories.
R2v3 certification
R2v3 Certification demonstrates that a facility has been independently audited against applicable requirements of the Responsible Recycling Standard. The standard addresses areas such as data security, environmental management and downstream controls, with process requirements matched to the facility's activities.
RIOS certification
RIOS, the Recycling Industry Operating Standard, is a management system standard for quality, environmental performance, and worker health and safety. RIOS certification assesses a recycler's management system. It is distinct from R2v3's electronics-processing requirements and NAID AAA's information-destruction certification.
SERI
SERI, Sustainable Electronics Recycling International, is the nonprofit organization that administers the R2 Standard for responsible electronics reuse and recycling. It develops and maintains the standard; SERI itself is not a separate certification that an ITAD provider holds.
4 terms
RFPs and service agreements
Define the work, compare providers and document commitments.
ITAD request for proposal (RFP)
An ITAD request for proposal asks providers to explain how they would deliver an organization's asset disposition requirements. It defines the scope, inventory, security controls, reporting, pricing and evaluation criteria needed to compare responses.
Also called: IT asset disposition RFP; IT asset disposal RFP.
Master service agreement (MSA)
A master service agreement sets the general contractual terms for an ongoing supplier relationship. In ITAD, individual project scopes or work orders can sit beneath it and specify the equipment, services, responsibilities and commercial details for each job.
Also called: ITAD master service agreement.
Service level agreement (SLA)
A service level agreement records measurable service commitments between a customer and provider. For ITAD, these may cover collection, reporting, response times, evidence delivery and the process for handling a missed commitment.
Also called: ITAD service levels.
Statement of work (SOW)
A statement of work describes the services and deliverables for a particular project. An ITAD statement of work can specify assets, locations, responsibilities, schedule, data handling, reporting and the criteria used to accept completed work.
Also called: ITAD scope of work.
No terms match your search. Try a shorter phrase or clear the search to browse all 84 terms.
Common questions
ITAD terms: common questions
What is the difference between data destruction and data erasure?
Data destruction is a broad term for making information infeasible to recover through a suitable logical or physical process. Data erasure is the reusable-media option: it can use overwriting, supported sanitize commands or cryptographic erasure. Physical destruction makes the media unusable.
Does degaussing work on SSDs?
No. Degaussing acts on magnetic storage, while SSDs store data in flash memory. Depending on the device and security requirements, an SSD may be sanitized with a supported command or cryptographic erasure, or physically destroyed. It does not always need to be shredded.
Which standard should data sanitization follow, NIST 800-88 or DoD 5220.22-M?
Use the current standard required by your organization's policy, contracts and applicable obligations. NIST SP 800-88 Revision 2 provides current media sanitization guidance and refers to technical standards such as IEEE 2883. DoD 5220.22-M is a legacy reference; a multi-pass overwrite routine is not a universal solution for modern storage.
What certifications should an ITAD vendor have?
Check certifications against the services you need. NAID AAA covers specified information-destruction operations; R2v3 and e-Stewards address responsible electronics processing; RIOS covers a recycler's management system. Verify the current certificate, facility, methods, media and any subcontracted work. A certification name alone does not establish the scope of your project.
More From ITAMG
Put the terms into practice
Explore ITAMG services for retiring equipment, protecting stored data and recovering value.
Data Destruction
On-site and off-site destruction to NIST 800‑88, with serialized certificates.
Learn moreIT Asset Disposition
Secure, certified ITAD for enterprise hardware retirement, with full chain of custody.
Learn moreData Center Decommissioning
Full-scale decommissioning with secure removal and documented custody.
Learn moreSell Used IT Equipment
Recover value from retired servers, storage, and networking hardware.
Learn moreComputer Recycling
R2v3-certified recycling for hardware past resale, with documented downstream tracking.
Learn moreDefinition references
Technical and certification terminology was checked against these primary sources.