Compliance
The certifications your compliance team needs to see.
Every disposal project we undertake is governed by a strict framework of industry certifications, legal obligations, and internal audit processes. Here is what that means for your organisation.
Our Certifications
Independently verified. Fully documented.
Information Security Management
ISO 27001 is the international standard for information security management systems. Our certification confirms that we operate a documented, audited framework for protecting sensitive data throughout every stage of the disposal process — from collection through to final destruction.
Why it matters to you
Demonstrates to your information security team that data is handled under a formally controlled system, not ad hoc procedures.
Waste Electrical and Electronic Equipment Regulations
We are registered with the Environment Agency as an approved authorised treatment facility (AATF) under the WEEE Regulations 2013. This means we are legally authorised to accept, process, and recycle waste electrical and electronic equipment on behalf of UK businesses.
Why it matters to you
Businesses that transfer WEEE to an unapproved facility can face regulatory penalties. Using Datasafe Recycling ensures your disposal is fully compliant with UK environmental law.
Asset Disposal and Information Security Alliance
ADISA certification is awarded to IT asset disposal companies that pass rigorous independent audits of their data sanitisation and destruction processes. Our ADISA approval confirms that our data destruction methods meet the standard required for handling personal and commercially sensitive data.
Why it matters to you
ADISA approval is increasingly required by public sector bodies, financial institutions, and healthcare organisations as a condition of procurement.
Information Commissioner's Office
As a data processor handling personal data on behalf of our clients, we are registered with the Information Commissioner's Office and operate in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Why it matters to you
Confirms that engaging Datasafe Recycling as a data processor is consistent with your own UK GDPR obligations as a data controller.
What You Receive
A complete audit trail for every job
Every disposal project generates a compliance pack that your team can retain for regulatory reporting, internal audit, or due diligence purposes.
Certificate of Data Destruction
Issued per device, listing the make, model, and serial number of each item destroyed. Confirms the destruction method used and the date of destruction.
Asset Register
A full itemised list of every device collected, cross-referenced with your own asset records where provided. Confirms chain of custody from collection to processing.
Recycling Confirmation
Confirms that all non-destroyed equipment has been processed through our WEEE-compliant recycling stream and that zero material has been sent to landfill.
Collection Receipt
Issued at the point of collection, signed by our operative and your nominated representative. Records the quantity and type of equipment transferred.
Legal Framework
The legislation we operate under
UK GDPR & Data Protection Act 2018
Governs how personal data must be handled, processed, and destroyed. Our processes are designed to ensure that personal data on disposed devices is rendered permanently irrecoverable.
WEEE Regulations 2013
UK legislation implementing the EU WEEE Directive, requiring that waste electrical and electronic equipment is collected and treated by authorised facilities. We are a registered AATF.
Environmental Protection Act 1990
Establishes the duty of care for businesses producing controlled waste. Transferring IT equipment to Datasafe Recycling fulfils your duty of care obligations under this Act.
Computer Misuse Act 1990
Makes it an offence to allow unauthorised access to computer systems. Proper data destruction before disposal is a practical requirement for compliance with this Act.
Need compliance documentation for a project?
Contact us and we will provide the relevant certificates and supporting documentation for your records.