+91 973 973 2048 connect@privace.in Mon to Sat, 9 AM to 8 PM Pan-India · Head office Andheri East, Mumbai
For Compliance & Audit Reviewers

What an Auditor Actually Needs to See Before Approving an ITAD Vendor.

Not a sales pitch. A straight answer to the question you're actually asking: can this vendor's paperwork survive a real review?

Compliance documentation review desk
The Actual Question

Most ITAD Vendor Reviews Ask the Wrong Question First.

The question that usually gets asked is “are you authorized?” That's the easy one: most vendors in this market can say yes. The question that actually determines whether a vendor survives a real audit is different: can you produce a device-level record connecting a specific asset in our inventory to a specific, dated destruction event? Most vendors cannot. This page is what we'd want to see if we were reviewing us.

What We Provide, Without Being Asked Twice

Five Things a Vendor Risk File Actually Needs.

Authorization Documentation

Greenlife's MPCB Consent to Operate: the actual document, not a claim. Site-specific, category-specific, with a checkable validity date through September 2028.

ISO Certificates

Current ISO/IEC 27001:2022, 9001:2015, 14001:2015, and 45001:2018 certificates, correctly attributed to the entity that holds them.

Per-Drive Erasure Reports Serial number, method and result for every wiped drive, not a bulk weight.

This is what lets you reconcile a certificate against your own asset register.

Chain-of-Custody Trail

Pickup and movement records connecting your premises to the processing facility, closing the gap where devices most commonly go unaccounted for.

Certificate of Destruction

Issued after destruction, not at pickup, referencing the erasure reports, or the serial list where one was recorded: the artifact you produce when someone asks six months later.

Correct Entity Attribution

We state plainly that certifications are held by Greenlife, our parent company, not by PrivAce directly. A mismatch here is exactly what a careful reviewer checks for first.

FAQ

Questions Reviewers Actually Ask

Greenlife's MPCB Consent to Operate, current ISO/IEC 27001:2022, 9001:2015, 14001:2015, and 45001:2018 certificates, and a sample Certificate of Destruction format. All available on request for your vendor risk file.
Both. Every job produces a Certificate of Destruction for the batch. Wiped drives also get per-drive erasure reports with serial numbers, and a serial-level annexure is added when your audit needs to reconcile against your asset register.
Greenlife Ewaste Recycling Pvt. Ltd., our parent company, holds all ISO and MPCB credentials. We disclose this plainly rather than implying PrivAce holds them directly, because a reviewer checking a certificate against the operating entity is exactly the kind of gap an audit finds.
Yes, this can be arranged during assessment for organisations with stricter internal policy or client-flow-down requirements.
Per your organisation's own statutory and contractual retention schedule. We recommend filing them alongside your other compliance documentation, cross-referenced to your asset register, not in an individual's inbox.

Download the PrivAce Technologies Corporate Profile

Sixteen pages covering who we are, all fifteen services, the documents you receive, our certifications, the Waluj MIDC facility, the industries we serve and pan-India coverage. Built for procurement and vendor risk files.

Download PDF

Request the Documentation Pack

Authorization document, ISO certificates, and a sample Certificate of Destruction: sent for your vendor risk file, no sales call required first.

Certified and government-authorised processing through our parent company, Greenlife Ewaste Recycling Pvt. Ltd. View all certifications →

WhatsAppTalk to an expert