ERI Becomes First Recycler of Electronics to Achieve SOC 2 Type I Compliance and NAID AAA Certification

NEW YORK--(BUSINESS WIRE)--ERI, the nation’s largest fully integrated IT and electronics asset disposition provider and cybersecurity-focused hardware destruction company, is now the first e-waste recycler in the industry to achieve both SOC 2 Type I certification and NAID AAA Certification for all of its facilities.

Last month, ERI successfully completed the Service Organization Control (SOC) 2 Type I audit and has received its compliance certification. SOC 2 compliance certification is recognized globally for its rigor in the review of organizations’ systems and controls. It affirms that ERI’s practices, policies, procedures and operations meet the SOC 2 standards for security and data protection.

ERI has for more than six years also been recognized by the International Secure Information Governance & Management Association (i-SIGMA) as a fully NAID AAA certified organization. NAID AAA certification verifies secure data destruction companies’ compliance with all known data protection laws through scheduled and surprise audits by trained, accredited security professionals, fulfilling customers’ regulatory due diligence obligations.

SOC 2 independent audits are also conducted to review companies’ effective implementation of employee controls and training, IT systems and risk management control, product discipline, and vendor selection. ERI’s SOC 2 examinations for Type I compliance testing were conducted in accordance with standards from the American Institute of Certified Public Accountants (AICPA). Type I testing confirms that a company’s systems and controls meet SOC 2 audit standards.

“We are proud to be the first organization in our industry to be both SOC 2 Type 1 and NAID AAA certified,” said John Shegerian, ERI’s Chairman and CEO. “Being uniquely dual-certified at the highest standards for data security further reinforces our ongoing commitment to data protection and the responsible recycling of all electronic devices. This achievement also demonstrates that we are willing and able to provide independent testing and audit results that demonstrate how our systems and controls for handling data-bearing devices can be fully trusted.”

ERI is the largest fully integrated IT and electronics asset disposition provider and cybersecurity-focused hardware destruction company in the United States. ERI is certified at the highest level by all leading environmental and data security oversight organizations to de-manufacture, recycle, and refurbish every type of electronic device in an environmentally responsible manner. It is the first and only company in its industry to achieve SOC 2 certification for security and data protection. ERI has the capacity to process more than a billion pounds of electronic waste annually at its eight certified locations, serving every zip code in the United States. ERI’s mission is to protect people, the planet and privacy. For more information about e-waste recycling and ERI, call 1-800-ERI-DIRECT or visit https://eridirect.com.