What your company usually asks of a supplier
- A confidentiality agreement signed before any media is received.
- Every stage of the case documented and traceable from start to finish.
- Documentation that supports an internal or third-party audit.
- Formal invoicing, including to the head office abroad and in foreign currency.
- Clarity on what happens to the media when the work ends.
- Answers to its supplier security questionnaire and a visit to the laboratory.
- An assurance that its data is not processed by external artificial intelligence services.
How we manage a business case
We manage business cases following the PMI project management standard and adapt the level of documentation to the size and urgency of each case. Every stage leaves a document.
1. Intake
We receive the media your company sends and record an intake report listing each item: make, model, serial number and the condition it arrives in.
2. Technical evaluation
We diagnose the failure of each item and establish what can be recovered and with what risks.
3. Technical report and quote
We deliver the technical evaluation report (failure, proposed scope and identified risks) together with the quote.
4. Acceptance and work plan
Once your company accepts the quote, we open the recovery project with a work plan: scope, stages and the person responsible for the case.
5. Execution, follow-up and delivery
The person responsible for the case reports progress to your team; if the scope changes, we agree it in writing before continuing. We deliver the data with a file inventory and a delivery report.
6. Closure
When your team confirms the data is complete, we close with the final technical report and the media return record, and archive the case file for five years.
Case documentation for your audit
Accepted quote
The quote accepted by your company: who authorised the work and on what terms.
Confidentiality agreement
We review your company NDA alongside ours and agree on the final text between both parties.
Intake report
Inventory of the media received: make, model, serial number and condition.
Technical evaluation report
The failure found, the proposed scope of work and the identified risks.
Work plan
Scope, stages and the person responsible for the case, based on the accepted quote.
Progress reports
Follow-up of the work and written approval of any change in scope.
Final technical report
What was recovered, what could not be recovered and why.
Inventory of recovered files
The list of what was delivered, so your team can check it.
Delivery report
What was delivered, on what media and to whom.
Return record
Where each item you sent us went when the case closed.
On request
Additional controls your company can ask for in the case file. They are agreed when quoting and their time is included in the case plan.
Formal custody log
A log of who receives, handles and delivers each item, when and why, from intake to return.
Integrity verification with hash
SHA-256 hash of the delivered data, so your team can confirm it was not altered.
Erasure certificate
Erasure of our working copies in line with NIST SP 800-88, Clear level, with a certificate for each item.
In an emergency we deliver the data first and the documentation afterwards.
Services most requested by this profile
Frequently asked questions
Do you sign our company confidentiality agreement?
Yes. We review your company confidentiality agreement alongside ours and, if any adjustment is needed, agree on the final text between both parties. If your company has no template of its own, we propose ours.
What documentation do you deliver when the case closes?
A case file with the accepted quote, the confidentiality agreement, the intake report, the technical evaluation report, the work plan, the progress reports, the final technical report, the inventory of recovered files, the delivery report and the media return record.
Is that documentation suitable for a third-party audit?
It is designed for that: it traces the case from the intake of the media to their return, with the case number on every document. We keep the case file for five years.
Can you provide integrity verification with a hash?
Yes, on request. We provide the SHA-256 hash of the recovered data so your team can confirm it was not altered. It is agreed when quoting and, in an emergency, it can be delivered after the data.
Are you ISO/IEC 27001 certified?
We are not certified, but we use ISO/IEC 27001 as a guide: we treat each client's information as an asset to be protected, with a process documented from start to finish. We answer your company supplier assessment questionnaire and, if needed, arrange a visit to our laboratory.
What do you do with the data after delivering it?
We keep our working copies for a few weeks after delivery, until your team confirms the data is complete. If any discrepancy arises, we also keep the media you sent us so we can examine it again. On request, when the case closes we erase our copies in line with NIST SP 800-88, Clear level, and give you the certificate.
Do you use artificial intelligence with our data?
No. Our clients' information is never processed by external artificial intelligence services.
Do you follow a project management methodology?
Yes. Business cases are managed following the PMI (Project Management Institute) project management standard: a person responsible for the case, a work plan based on the accepted quote, progress reports, written approval of scope changes and a documented closure. The level of documentation is adapted to the size and urgency of each case.
Do you answer supplier assessment questionnaires and accept visits?
Yes. We answer the security or supplier assessment questionnaire your company uses and, if your approval process requires it, we arrange a visit to our laboratory.
Can you invoice our head office abroad?
Yes. We can issue the invoice abroad and receive payment in foreign currency, adapting to the administrative procedure of the corporate group.
Does your company need to approve us as a supplier?
Tell us what happened and we will explain how we would approach your case.
We answer in English by email and WhatsApp. Phone calls are answered in Spanish.