Asking what data destruction costs per device assumes the work is per device. It is not. Nearly all of it is per batch and per exception, which is why a quote for 200 machines is not twice a quote for 100, and why the figure you are really paying for is evidence rather than erasure.
TL;DR
- Per device is the wrong unit. The cost is a collection, a batch process, and a per-unit charge for the exceptions.
- For a working encrypted laptop the erasure itself is close to free, in-house, in seconds.
- What you pay for is the evidence: a document tying a serial to a method and a date, issued by somebody other than you.
- Drives that will not power on are the genuine per-unit cost, because they need physical destruction.
- Check whether your disposal quote already includes destruction, because buying both for the same devices is duplicate spend.
- Encryption at deployment is the cheapest thing you can do about end-of-life data, and it costs nothing.
Why per device is the wrong unit
Think about where a vendor’s time actually goes. A van and a driver to collect, whether the pallet holds 40 machines or 90. A technician setting up a batch run, which takes about as long for a hundred drives as for sixty. Then a per-serial record for each one, which is genuinely per device but is a few minutes of software time rather than labour.
And then the exceptions, which are the only part that scales cleanly per unit, because each failed drive has to be handled individually and physically.
So a per-device figure is an average of three unrelated costs, and it moves sharply with batch size. Quoted per device, 20 machines look expensive and 300 look cheap, while the vendor’s actual effort has barely changed in the first case and changed a lot in the second.
The three things you are paying for
| The erasure | Near zero for encrypted working drives | Destroying the key clears the contents in seconds regardless of capacity |
| The evidence | The real cost, and it is a service level | A tamper-resistant record per serial, issued by a third party, is a different product from a batch certificate |
| The exceptions | Genuinely per unit | A drive that will not power on needs physical destruction. Every batch has some |
Companies that buy a service and only needed the first row are overpaying. Companies that clear devices in-house and needed the second row have a gap they will discover at an awkward moment, usually during a customer security review.
What it costs to do it yourself
For a working device that was encrypted from deployment, close to nothing. Destroying the encryption key renders the contents unreadable in seconds whatever the drive size, and the machine can then be reset for reissue.
The prerequisite is encryption at the start of life, not at the end. A device encrypted on day one is trivial to clear. One that was never encrypted needs a full overwrite, which is slow on a large drive and unreliable on solid-state media because wear levelling can leave blocks the overwrite never reaches.
Which makes the single most cost-effective action in this whole area a deployment setting rather than a purchase. It converts a slow, uncertain job into a fast, certain one for every device you will ever retire.
A worked example
A company asked three vendors what data destruction would cost per device for 46 machines. The three answers differed by a factor of four and the procurement lead assumed somebody was overcharging.
They were quoting different products. One had priced a batch certificate. One had priced a per-serial certificate with a per-drive record. One had included collection from three sites and the physical destruction of any failed drives. All three were reasonable prices for the thing each had quoted, and nobody had specified which thing was wanted.
The second finding mattered more. The company’s existing disposal arrangement already included data destruction for devices leaving the business, so for 38 of the 46 machines it had been about to buy the same service twice. The remaining 8 were being kept and genuinely needed their own evidence.
Getting a comparable quote
What to do:
- Check your existing disposal contract first, since destruction is usually already in it for devices leaving the business.
- Say whether you need a per-serial certificate or a batch certificate, because they are different products at different prices.
- Give a serial manifest with model, age and whether each drive powers on, rather than a device count.
- List the failed drives separately, since those are the only genuinely per-unit line.
- Ask whether collection is included and from how many locations.
- Ask for the quote as a batch fee plus a per-exception fee rather than a single per-device figure.
The last point changes the conversation. A vendor willing to split the quote that way is telling you how the work is actually structured, and the split is what lets you compare three quotes that would otherwise be three different averages.
Blancco is the best-known certified erasure option where you are keeping or reselling the hardware yourself and need your own tamper-resistant reports at the point of erasure. It publishes no price and quotes on request. Where hardware is leaving the business, the certified disposal specialists wipe as part of a wider service and issue the certificate, and those are compared in our IT asset disposition comparison.
Final thoughts
There is no useful per-device price for data destruction, and asking for one produces quotes that cannot be compared because each vendor averages three different costs over a different batch size.
Ask for a batch fee, a per-exception fee and a stated certificate type instead. Check your disposal contract before buying anything, since you may already have it. And enforce encryption at deployment, which makes the erasure itself close to free for every device you will ever retire and is the one decision here that costs nothing at all.
Frequently asked questions
What does data destruction cost per device?
There is no useful per-device figure, because the work is not per device. Most of the cost is a collection and a batch process, both of which barely change between sixty drives and a hundred, plus a per-serial record that is minutes of software time. Only the exceptions, meaning drives that will not power on and need physical destruction, scale cleanly per unit. Quoted per device, a small batch looks expensive and a large one looks cheap while the vendor’s effort has hardly moved.
Is it cheaper to wipe devices in-house?
For working devices that were encrypted at deployment, yes, and by a wide margin, because destroying the encryption key clears the contents in seconds regardless of drive size. What you cannot easily produce in-house is independent evidence that a third party will accept, so the decision rests on whether anybody will ask you to prove it rather than on whether you can do it. You also cannot clear a drive that will not power on, and every batch contains a few.
What are you actually paying a data destruction vendor for?
Three separate things, and only the first is technical. The erasure itself, which for an encrypted working laptop is close to free. The evidence, meaning a tamper-resistant record tying a specific serial to a specific method on a specific date and issued by somebody other than you, which is the real cost and is a service level you choose. And the handling of exceptions, meaning drives that have failed and cannot be addressed by any software method.
Does a disposal quote already include data destruction?
Usually, for devices that are leaving the business, which is why buying a separate erasure service for the same machines is duplicate spend. Check the existing contract before approaching anybody, and be clear about which devices you are keeping. The genuine case for a separate certified erasure product is hardware you intend to retain or resell yourself, where you need your own reports produced at the point of erasure rather than a disposal certificate afterwards.
Why do destruction quotes differ so much?
Because vendors quote different products against the same request. One prices a batch certificate, another a per-serial certificate with a record for each drive, and a third includes collection from several sites and the physical destruction of failed drives. All three can be reasonable prices for what each has quoted. Supply a serial manifest with model, age and whether each drive powers on, state the certificate type you need, and ask for a batch fee plus a per-exception fee.
What is the cheapest way to reduce end-of-life data cost?
Enforce full disk encryption at deployment rather than thinking about destruction at the end of a device’s life. A machine encrypted on its first day can be cleared in seconds by destroying the key, while one that was never encrypted needs a full overwrite that is slow on large drives and unreliable on solid-state media because wear levelling can leave blocks untouched. It costs nothing, it applies to every device you will ever retire, and it is a deployment setting rather than a purchase.
