Vendor selection in this category tends to happen informally. Someone needs equipment removed, a colleague recommends a company, a quote arrives, the work gets done, and a relationship forms without anyone reviewing terms. It works until something goes wrong, at which point the absence of a written agreement becomes the central problem rather than a technicality.
The risk is asymmetric in a way that is easy to overlook. The commercial value of the engagement is usually small, often a few thousand dollars, while the liability attached to the material can be very large. A contract sized to the invoice rather than to the exposure is the wrong shape.
A properly structured it asset disposition agreement is not a lengthy document, but it needs to address a specific set of points that generic service terms do not cover. What follows is the substance worth insisting on, whether you are running a formal procurement or simply asking a supplier to put their commitments in writing.
Defining the Standard Rather Than the Outcome
Vague obligations are the most common weakness. A clause committing the vendor to dispose of equipment responsibly is close to unenforceable, because responsibly has no agreed meaning.
Name the destruction standard explicitly, including the particle size required for each media type. Solid state media and magnetic media have different requirements, and a contract that treats them identically has not been written by anyone who understands the difference.
Specify whether sanitization or physical destruction applies, and under what conditions each is permitted. If drives may be wiped and resold, define the verification required and who bears the risk if verification proves inadequate.
State the timeframe between collection and processing. Media sitting in a vendor’s warehouse for six weeks is exposure you are carrying without knowing it. Contracts commonly specify processing within a defined number of business days.
Define where processing occurs. If material may move between facilities or across borders, that should be stated rather than discovered later.
Documentation Requirements Stated in Advance
The reporting you receive is determined almost entirely by what you asked for before the work began.
Require certificates listing individual serial numbers rather than aggregate quantities. This is the difference between a document that satisfies an auditor and one that does not, and vendors who do not track at this level will tell you so at contracting rather than after.
Require the certificate to state the method, the standard applied, the date, the facility, and the operator. Each of those fields becomes relevant in a different kind of investigation.
Set a delivery timeframe for documentation. Certificates that arrive months later, or only when chased, undermine the entire control.
Require materials recovery reporting if you have environmental disclosure obligations. Diversion rates and recovered weights come from the vendor, and asking for them at the start costs nothing while asking afterwards may not be possible.
Specify record retention on the vendor side, so their records remain available for as long as yours need to be.
Custody, Access, and Subcontracting
Chain of custody deserves explicit treatment because it is where most disputes originate.
Define the handover point and require signed manifests at each transfer. Custody should pass at a documented moment, not ambiguously somewhere between your loading dock and their vehicle.
Address transport conditions: locked containers, vetted personnel, direct routing without intermediate stops. Vendors serious about security already do these things and will not object to writing them down.
Require disclosure of subcontractors and downstream processors, with the right to audit them. Almost every operator uses downstream partners for certain material streams, which is normal. What is not acceptable is an operator who cannot tell you who they are.
Include a right to inspect the facility and to witness destruction on reasonable notice. Whether or not you ever exercise it, its presence changes behaviour.
Liability, Insurance, and What Happens After a Failure
This is the section most standard service agreements handle badly, usually by capping liability at the value of the services rendered.
That cap is the problem. If a breach results from improperly handled media, the loss bears no relationship to the disposal fee. Negotiate a liability position that reflects the actual exposure, or at minimum ensure the cap does not apply to data-related failures.
Require evidence of insurance covering data liability specifically, not merely general commercial coverage, and require notice if that coverage lapses.
Include a breach notification obligation with a defined timeframe, so that a loss on the vendor’s side reaches you quickly enough to meet your own regulatory reporting deadlines.
Address indemnity for third-party claims arising from the vendor’s handling of material.
Commercial Terms Worth Getting Right
The financial structure matters less than the security terms but still repays attention.
Define how resale value is calculated and shared. Revenue-share arrangements are common and reasonable, but the basis for valuation should be documented rather than left to the vendor’s discretion.
Require itemized settlement reporting so that recovered value can be checked against the equipment sent.
Clarify who bears the cost of material with negative processing value, which is typically older display equipment, so that an unexpected charge does not appear on the invoice.
Set the term and the exit provisions, including the return of any records and the completion of in-flight processing if the relationship ends.
Keeping the Agreement Alive
A contract that is signed and filed decays. Verification of vendor certifications should be repeated annually, and the agreement should require the vendor to notify you if any certification lapses or if their downstream partners change materially.
Reconciling certificates against your own removal records on each engagement is what keeps the arrangement honest, and it takes minutes.
None of this needs to be adversarial. Competent vendors generally welcome specific terms, because specificity distinguishes them from competitors who compete only on price. The operators who resist are precisely the ones the terms exist to protect you against.
