Data Security & Downstream Overview
• All processing is completed in a high-security, limited access, ISO 4001, R2 processing facility with regular audits and employee background checks.
We provide complementary recycling for end-of-life devices with certified ISO 14001, e-Steward® and R2 downstream recyclers.
• We maintain a zero e-Waste export policy.
• Direct access to Environmental Impact reporting for water, air, energy, and waste on all bulk Upcycle shipments.
• We deliver model specific data wipe varification reports for all devices.
Data Clearing Process Overview
1) Station Driven Data Wiping Process
Stations are set up to manage the entire process:
i. All devices will run through a series of four (4) stations:
1. Data Sanitization
2. Quality Control and Quality Assurance
3. Functional Testing
4. Portal Serial Tracking
ii. Recycling Location (Non Functioning Devices) – Devices that cannot be wiped for any reason during the process outlined below are immediately removed from processing and placed in the “Recycling Location,” separate from the stations for working devices. All these devices will be sent to one of our e-Steward®, R2 and ISO 14001 certified partner recyclers to be shredded. The recycling process includes secure and certified data destruction in accordance with Department of Defense (DoD) standard 5220.22-M and complies with HIPAA, Gramm-Leach-Bliley, and other privacy protection laws.
i. Station One – Data Sanitization – Every device designated for Upcycling (reuse) is put through a data sanitization process; any device that cannot be wiped is sent to the aforementioned recycling location. This data sanitization process is primarily facilitated with Original Equipment Manufacturer (OEM) tools and clearing processes. For older devices, in cases which OEM tools may not be available, we utilize Pervacio, FutureDial, and Greystone software solutions, which are third-party data wiping tools.
ii. Station Two – Quality Control and Quality Assurance – All devices go through the same QC and QA process irrespective of tools used in the data sanitization process. We verify with a 100% QC inspection, followed by another 100% QA inspection. After two 100% inspections we do additional AQL sampling to ensure that all customer content is removed from the device.
iii. Station Three – Functional Testing – Devices are first rechecked for data removal. Once passed this check, devices are organized by make and model and subsequently tested for functionality.
iv. Station Four – Portal Log-in & Serial Tracking – The portal provides verification of data destruction for each device. At this station, devices are scanned by serial number (IMEI), rechecked for data removal a third time, and logged into a client specific portal account. After all the device information and data wipe verifi cation is logged into the portal, Causes International will provide the client with detailed, device specific reporting. This reporting is available online through secure login, and is downloadable in Excel and CSV formats.
3) Reporting – At any point during the process clients can track the progress of their order and look at reports of previous orders through their company’s personalized web portal.
4) Cyber Security Protection – Causes International’s processing provider maintains Cyber Security insurance that indentifies our end user clients in the event that there is a failure in our system and a device is not properly sanitized. It should be noted that this has never occurred, however this does provide a legal remedy in such a ‘worst-case’ scenario. The policy covers $2M per incident. We have never had a claim on over 10M devices processed.
Processing and Recycling Certifications and Partnerships
ISO 14001 Environmental Certification
Independent third party validation of environmental stewardship, ensuring documented procedures for proper environmental decisioning and chain of custody.
R2 Environmental Certification
Every certified R2 recycler is rigorously audited by an independent third party auditor that evaluates each recycler in more than 50 areas of operational and environmental performance, covering data security, environmental practices, e-waste disposal, and remarketing and reuse.
Exclusive use of e-Stewards® Certified End-of-Life Recyclers for e-Waste
According to the EPA, Both R2 and eStewards® certifi cation programs share common elements that ensure responsible recycling of used electronics, advance best management practices and offer a way to assess the environmental, worker health, and security practices of entities managing used electronics. Specifically, these certifi cation programs are based on strong environmental standards which maximize reuse and recycling, minimize exposure to human health or the environment, ensure safe management of materials by downstream handlers, and require destruction of all data on used electronics. Additionally, eStewards through Basel Action Network puts greater emphasis on restrictions to overseas exports of e-waste.
3 Degrees Partnership – Strategic partnership supporting our renewable energy credit i nitiatives (REC)
EPA Green Power Partner – EPA recognition of CES’ 100% offset of energy consumption through purchase of REC’s
Waste Wise Program Participant – EPA partnership that recognizes our commitment to waste reduction
Sustainable Forestry Initiative (SFI) – Recognizes our packaging partners commitment to responsible forestry initiatives
Forest Stewardship Council (FSC) – FSC provides a credible link between responsible production and consumption of forest products