Skip to content 
NAID AAA
In brief
NAID AAA is a certification program for providers of information and data carrier destruction that was originally developed by the US National Association for Information Destruction (NAID). Certified companies are audited regularly, including unannounced, by independent auditors. When selecting a provider for IT decommissioning, NAID AAA is one of several possible proofs, especially in an international environment.
What is behind NAID AAA?
NAID is an industry association that merged with PRISM International in 2018 to form the association i-SIGMA. The name NAID lives on in the certification program "NAID AAA Certification". Among other things, it audits security measures, personnel screening, procedures for destruction or erasure and documentation. Certification is granted for specific services in each case, such as the physical destruction of paper or hard drives or data erasure. Unannounced audits by external auditors are characteristic.
Placement alongside other proofs
In Germany, the standard DIN 66399, which defines security levels and particle sizes, is the main reference for the destruction of data carriers. Further proofs are DIN EN 15713 for the destruction of confidential documents, ADISA from the United Kingdom, or management system certificates such as ISO/IEC 27001. Which proof is appropriate depends on your requirements and your market. More important than a single logo are the scope, the validity and the proof per device. Questions to check on this are contained in the guide Choosing an ITAD provider.
Second IT destroys data carriers in-house according to DIN 66399, certified for security level H-5, and is certified to ISO 9001, ISO 14001, ISO 45001 and ISO/IEC 27001.
Frequently asked questions about NAID AAA
What does NAID mean?
NAID stands for National Association for Information Destruction, an industry association originally based in the USA. Today it is part of the association i-SIGMA.
Is NAID AAA mandatory in Germany?
No. There is no legal obligation for a particular certification. In Germany, clients generally follow DIN 66399 for destruction.
How do I tell whether a certificate is valid?
Have the current certificate shown to you and pay attention to the expiry date and scope. Many programs additionally offer a public directory of certified companies.
What is the difference between NAID AAA and DIN 66399?
DIN 66399 is a standard. It defines security levels and particle sizes for the destruction of data carriers. NAID AAA is a certification program for service providers and audits, among other things, security measures, personnel screening, procedures and documentation.
Does NAID still exist?
The NAID association merged with PRISM International in 2018 to form the association i-SIGMA. The name lives on in the certification program "NAID AAA Certification". Certification is granted for specific services in each case, such as the destruction of hard drives or data erasure.
Data carrier destruction in-house according to DIN 66399.
Send us your device list. You will receive your offer in 48 hours on average.