ADISA

What does ADISA audit?

ADISA works in two fields. The ADISA standard for IT asset disposal assesses service providers: how are logistics, site, data erasure, destruction and documentation organized? Certified companies are audited regularly, and unannounced inspections are also carried out. The current version of the standard is recognized by the British data protection authority, the ICO, as a certification scheme under the UK GDPR.

In addition, ADISA tests erasure software and erasure methods in so-called Product Claims Tests. In these, a laboratory attempts to recover data from erased data carriers with increasing effort.

Context for companies in Germany

In Germany, ADISA is less widespread. Here companies mostly rely on ISO/IEC 27001 for information security, on DIN 66399 for destruction and on certified erasure software. Internationally known programs such as R2, e-Stewards or NAID AAA each set different priorities, for example in recycling or destruction. Which documentation you should require when choosing a service provider is shown in the checklist Choosing an ITAD provider. Second IT is certified, among others, to ISO/IEC 27001, ISO 9001, ISO 14001 and ISO 45001, destroys according to DIN 66399 (H-5) and is a Blancco ITAD Gold Partner.

Frequently asked questions about ADISA

What does ADISA stand for?

ADISA stands for Asset Disposal and Information Security Alliance. The organization was founded in 2010 in the United Kingdom and certifies service providers for the secure processing of retired IT.

Is ADISA certification mandatory in Germany?

No. ADISA is a voluntary proof. In Germany, tenders more often require ISO/IEC 27001, DIN 66399 and erasure certificates for each device.

What is an ADISA Product Claims Test?

A laboratory test that checks whether an erasure product delivers what the manufacturer promises. The laboratory tries to recover data from erased data carriers.

What is the difference between ADISA and ISO/IEC 27001?

ISO/IEC 27001 is an international standard for information security management systems and applies to every industry. ADISA specifically audits service providers that process retired IT and tests erasure products. The two proofs therefore set different priorities.

Is ADISA recognized by authorities?

The current version of the ADISA standard is recognized by the British data protection authority, the ICO, as a certification scheme under the UK GDPR. This applies to the United Kingdom. For Germany, ADISA is a voluntary additional proof.