On-site vs off-site hard drive shredding: which do you need?

Updated 6 November 2026 · By the IT Equipment Disposal team

Short answer: On-site shredding destroys drives at your premises in a mobile shredder, so data never leaves the building intact and you can witness it, but it costs more, typically £8 to £20 per drive plus a visit charge. Off-site shredding is cheaper, usually £3 to £10 per drive, and is suitable for most organisations provided drives travel in sealed containers with serial numbers recorded first.

How each option works

With on-site shredding, a vehicle fitted with an industrial shredder parks at your premises. Drives are scanned, fed into the shredder, and the fragments are taken away for recycling. You or a colleague can watch each drive go in and sign the record. Some providers bring a smaller portable shredder into the building for sites without vehicle access.

With off-site shredding, drives are scanned and recorded at your premises, sealed into locked containers or tamper-evident bags, and taken to a secure facility where they are shredded, usually within a few days. You receive a certificate of destruction listing each serial number afterwards.

Both methods end in the same place. The shredded fragments are sent for metals recovery, and the certificate becomes your evidence. The real differences are where the drive is destroyed, who can see it happen and how much it costs. Neither is automatically more secure than the other if it is done properly, which is why the choice should be driven by your policy and the sensitivity of the data rather than by habit.

Side-by-side comparison

	On-site shredding	Off-site shredding
Data leaves your site intact	No	Yes, in sealed containers
Can be witnessed	Yes, in person	Sometimes, by appointment or video
Typical cost per drive	£8 to £20 plus visit charge	£3 to £10
Best for batch size	Larger batches or high sensitivity	Any size
Particle size options	Depends on mobile unit	Usually wider range including fine SSD shredding
Evidence	Certificate with serial numbers, witnessed	Certificate with serial numbers
Disruption on the day	Vehicle parking and noise for a few hours	Short collection visit

When on-site is the right choice

Your data policy, a client contract or a regulator requires media to be destroyed before leaving site
The data is highly sensitive, such as patient records, legal files, payroll or security information
You need staff to witness destruction for your own records
You have a large backlog of loose drives, where the visit charge is spread over many units
Your insurer or auditor has asked for witnessed destruction

When off-site makes more sense

For most offices, schools and small businesses, off-site shredding with a documented chain of custody is a proportionate and well-accepted approach. The risk you are managing is the journey between your building and the shredder, and that is controlled by recording serial numbers before the drives leave, sealing containers, using secure vehicles and having the certificate match the list made on site.

Off-site facilities also tend to have heavier and more varied equipment, which can matter for SSDs and phones. If a mobile shredder only produces a coarse shred suitable for hard drives, flash media may be better destroyed off site to a finer particle size.

Do not forget SSDs and other media

Shredding to a size that destroys a hard drive platter may leave SSD memory chips whole. DIN 66399 defines security levels and particle sizes for different media types, with separate categories for magnetic and solid-state storage. Ask any provider what particle size they achieve for SSDs, phones and memory cards, not just for hard drives.

SSDs and NVMe drives
Phones and tablets, which may need to be shredded whole
USB sticks and memory cards
Backup tapes
Drives inside printers, copiers and network storage

Securing drives in transit

If you choose off-site shredding, the journey is the part to scrutinise. Ask how drives are packed, who holds the keys or seals, whether vehicles are locked and tracked, and whether drives go straight to the shredding facility or via a depot. The certificate you receive should match the serial number list made on your premises, item for item.

Serial numbers scanned on site before drives are packed
Locked bins or numbered tamper-evident bags, with seal numbers recorded
Direct transport to the facility, without overnight stops in unsecured vehicles
Seal numbers checked on arrival before the bins are opened
Certificate cross-referenced to your original list

If any of those steps is missing, the gap between your building and the shredder is undocumented, and that is exactly where an auditor will look.

A mixed approach

Many organisations do not need to choose one method for everything. A practical pattern is to use certified erasure for the bulk of working laptops and desktops so they can be reused, off-site shredding for faulty drives, and on-site shredding only for a small number of drives from the most sensitive systems, such as HR, finance or clinical servers. This keeps costs down while matching the level of protection to the risk.

Write the decision down in your data retention or disposal policy, so the next refresh follows the same rules without a fresh debate. A short table listing device types, data sensitivity and the required method is usually enough, and it gives your provider a clear brief each time you book.