Obtaining a Certificate of Destruction

Topic

This article describes the process for a Datto partner to obtain a Certificate of Destruction.

Environment

  • Datto ALTO
  • Datto SIRIS

Description

The device must be kept online and checking in so the removal of local data can be validated in order for the certificate of destruction to be signed

A Certificate of Destruction is a document that confirms that Datto has destroyed logical blocks of the data array on a Datto appliance and that it is not possible to restore them if the drives are ever compromised.

To request a Certificate of Destruction, you will need a registered and authorized Partner Portal account (login required).

You can request a Certificate of Destruction when:

  • You are re-purposing or re-provisioning a Datto device.
  • You are returning a Datto device and need confirmation in writing that we have destroyed the data it contained before you return it to Datto (for example, to comply with legal requirements such as HIPAA).
  • You have performed a Reverse RoundTrip and would like the data removed from the drive before returning it to Datto.
  • You want to return a Datto device that has data on it and need confirmation that once received, our Hardware and Logistics team has destroyed all data on the drives.

Procedure

Deleting local data on the Datto device will not affect data stored in the Datto Cloud. When filling out the request, under Location, be sure to select Local & Offsite if you also need the offsite data removed.

1. Using the Datto device GUI, delete the local or offsite data for which you are requesting the certificate. If you are unable to delete this data, contact Datto Technical Support.

To request a Certificate of Destruction, log into the Datto Partner Portal and navigate to Support ? Support Request Forms ? Certificate of Destruction.

Admin access privileges are required to access this functionality in the portal.

The portal will generate a Support ticket which will request the following information:

  • Device Serial
  • Are you returning this device?
  • ‘Local Only,' 'Local & Offsite,' or 'Offsite Only'
  • Agent or full path of data to be deleted
  • The date range of data to be destroyed

Complete all fields as fully as possible.

After you submit the ticket, Datto Technical Support will ensure that they can access the device drives and verify that they can see the data to be removed. After Datto has destroyed the data on the drives, Technical Support will confirm the destruction, as well as the removal of any replicated data from primary and secondary offsite storage locations. Datto will then send you a document that certifies that we have completed the process.