Request a service

What to send

A photograph or a spreadsheet of your asset list. Make, model, condition, and quantity per line. We respond with a written MYR quote in per engagement SLA.

What you get back

Pickup against signed manifest. NIST SP 800-88 Rev. 1 Purge / IEEE 2883-2022 firmware Sanitize matched to media classification. Per-asset Certificate of Destruction with eleven required fields. MYR settlement against your purchase order with line-item per-asset invoicing your finance team understands. Reuse-First refurb economics applied — typically 1.5-3× the residual value of destruction-first OEM trade-in counterfactuals.

What we will not do

We will not name your organisation in any case study or marketing material without your explicit written consent. We will not resell your surplus into your own market without consent (cross-border routing under NDA where market depth requires it). We will not subcontract destruction to a vendor we have not vetted to NAID-grade Protocol. We will not issue bulk-job certificates that fail regulator audit.

Engagement timeline from first contact to settlement

Day 1-3: scoping call, asset list reconciliation, regulator stack confirmation. Day 3-5: written MYR quote with line-item detail, SOW drafted with service levels and indemnity terms, NDA executed. Day 5-10: pickup scheduled with chain-of-custody manifest pre-prepared, GPS-tracked vehicles confirmed. Day 10-20: pickup + sanitisation in-flight with NIST/IEEE method matched per media. Day 20-25: per-asset Certificate of Destruction issued; refurb-eligible units route through trader-channel network. Day 25-30: MYR settlement against PO with line-item invoicing. Programme engagements run on quarterly business review cadence.

Standards your engagement is written to

Universal: NIST SP 800-88 Rev. 1, IEEE 2883-2022, DoD 5220.22-M (where contractually specified), NAID-grade Protocol. Region-specific: NIST 800-88 · PDPA Malaysia · BNM RMiT · NACSA · IEEE 2883-2022 · NAID-grade. BFSI engagements add ; personal-data processing under PDPA Malaysia. Per-asset Certificate of Destruction is admissible against all simultaneously — one document covers every framework an auditor in Malaysia is likely to ask about. Sample certificate available on NDA.

Confidentiality, NDA and data residency

NDA is standard for every engagement — Maxicom standard NDA executed at SOW signing, customer NDA accepted where mutually agreeable. Data residency: sanitisation happens in-jurisdiction; data-bearing assets do not cross borders before sanitisation completes and certificates issue. Cross-border resale (post-sanitisation) routes through our trader-channel network where local market depth is thin, but the asset at that point is data-free. For sovereign-data-residency engagements, even post-sanitisation cross-border movement is restricted by contract; we route within-jurisdiction only. Engagement records stored in our compliance vault under controlled access for the regulator-required retention period.