Insurance IT asset disposition that protects policyholder information.
Every adjuster laptop carries policyholder files. Coretek 360 retires claims, underwriting, and call center hardware that held PII, policyholder information, and claims data, wiped or shredded to NIST 800-88 and documented serial by serial.
ITAD for carriers and agencies, built for GLBA and NAIC data security laws.
Every device holding PII, policyholder information, claims data, or financial records is destroyed to NIST 800-88 and documented per serial. Your compliance and privacy officers get disposal evidence for GLBA and the NAIC data security law your states have adopted.
Data Risk Review
We identify every device that held PII, policyholder information, claims data, financial records, or confidential client information: adjuster laptops, call center PCs, agency office hardware, document scanners, and the servers behind them.
- Policyholder information and claims data mapped
- Offices, call centers, and data centers
- Nothing with client data missed
Secure Collection
Hardware is collected in tracked vehicles under documented chain of custody, with every serial number logged at pickup so your third-party risk team can trace each asset.
- Tracked vehicles
- Serial numbers logged at pickup
- Chain of custody documented throughout
Data Sanitization
Every drive that held PII, policyholder information, or claims data is wiped to NIST 800-88 and verified, or shredded, supporting the disposal provisions of GLBA and state insurance data security laws. Shredding is done in house by Coretek 360. It is not yet covered by our R2v3 certificate, and we are actively working to add it.
- Wiped to NIST 800-88 and verified
- Shredded when media must not survive
- A certificate for every serial number
Remarketing & Recycling
Adjuster laptops, call center PCs, and servers with life left in them are refurbished and resold through our sales channels, only after their drives are sanitized, with the value returned to you. Everything else goes to R2v3 certified downstream processors, as a RIOS Certified Recycler.
- Working hardware refurbished and resold
- Value returned to you
- R2v3 certified downstream recycling
Audit Ready Reporting
A final serialized report with a certificate of data destruction for every serial number gives your compliance officer and vendor oversight team proof of disposal for state examinations and your own information security program.
- Every serial number accounted for
- Certificates of data destruction
- Evidence for state examinations
Frequently asked questions.
Direct answers on the rules you answer to, the hardware we take, and the records you keep.
How does device disposal fit GLBA and the NAIC data security law?
GLBA and the state insurance data security laws based on the NAIC model both carry disposal provisions that carriers and agencies must satisfy. Coretek 360 supports them by making sure every drive that held PII, policyholder information, or claims data is wiped to NIST 800-88 and verified, or shredded, and documented per serial number for your compliance and privacy officers.
Can you retire adjuster laptops and call center PCs?
Insurance carriers and agencies retire hardware such as adjuster laptops, call center PCs, agency office hardware, document scanners, the servers behind them, and more. Coretek 360 identifies every device that held PII, policyholder information, claims data, or financial records before sanitization, so each one is accounted for by serial number.
What proof of disposal can we show in a state examination?
Proof of disposal for a state examination comes from Coretek 360 as two documents. A certificate of data destruction per serial number records the drive serial number, the NIST 800-88 method used, and the date. A serialized asset report records custody, make and model, sanitization method, and final disposition, resale or recycling, for every asset your vendor oversight team needs to trace.
Can our third-party risk team trace each device after pickup?
Third-party risk and vendor oversight teams can trace each insurance asset from the moment it is picked up. Coretek 360 collects hardware in tracked vehicles under documented chain of custody and logs every serial number at pickup. Laptops, PCs, and servers with life left in them are resold only after their drives are sanitized.
Last reviewed on .
More for insurance.
Destroying policyholder information, ITAD for financial services, and the certifications behind it.
Data Destruction
Drives wiped to NIST 800-88 or shredded, with a certificate for each.
Learn more about Data DestructionCertifications
R2v3, RIOS, NIST 800-88, and HIPAA, and what each one covers.
Learn more about CertificationsProtect policyholder information.
Retire hardware with Coretek 360 and a certificate of data destruction for every drive.