Security & Compliance
Your data is handled under audited controls from intake to destruction. Here's exactly how.
Certified Secure Data Recovery
Every recovery runs inside a documented security program: controlled facilities, background-checked staff, encrypted handling and certified destruction.
Learn moreSOC 2 Type II
Independent auditors test how our controls operate over time, not just how they're written.
Learn moreHIPAA Compliance
We handle protected health information the way covered entities must: under a Business Associate Agreement.
Learn moreDefense-in-Depth Network
Recovery systems sit in an isolated network, separated from the internet and from each other.
Learn moreHigh-Security Data Recovery
Recovery for classified-adjacent, legal, financial and executive data — with stricter handling on request.
Learn moreVirtual Security Tour
See the cleanroom, the secure intake area and the isolated lab without leaving your desk.
Learn moreCertifications
SOC 2 Type IIIndependently audited controls
HIPAABusiness Associate Agreements
ISO Class 5 cleanroomParticle-controlled lab
Chain of custodyEvery device, every step
Defense in depth
Chain of custody
- Intake. Your device is photographed, serial-numbered and sealed in a tamper-evident bag. You get a case number and an intake record.
- Storage. Devices wait in a locked, access-logged vault, never on an open bench.
- Recovery. Only the assigned engineer can sign the device out. Every handoff is recorded with name, time and purpose.
- Verification. Recovered data is hashed so you can confirm nothing changed between our lab and your hands.
- Return. Data ships on a new encrypted drive by tracked, signature-required courier, or by secure download.
- Destruction. Once you confirm receipt, working copies are wiped to NIST 800-88 and you receive a certificate of destruction.