Almost every business has one: the storage room, cellar or cupboard where retired laptops, desktops and phones quietly pile up. Nobody wants to throw them away, but nobody dares to either, because those devices are full of company data. Here is what your options actually are, and the one step you must never skip.
Why 'just storing them' is the worst option
Retired devices lose resale value every month they sit in storage, business laptops typically lose most of their residual value within two to three years. Meanwhile the risk doesn't shrink: every stored drive still contains emails, contracts, customer records and passwords, protected by nothing more than a door.
Under the GDPR, personal data on those drives is still your responsibility, whether the laptop is in daily use or in a box. Storage is not a strategy, it just postpones the decision while the value melts and the risk stays.
Option 1: Resale, turn retired hardware into budget
Well-maintained business laptops from the last three to five years hold real market value. Through remarketing, an ITAD partner can inspect, grade and resell them, and return part of that value to you. For many companies this offsets a large share, sometimes all, of the disposal cost.
The non-negotiable condition: every data carrier must be professionally erased and verified before the device changes hands. A 'factory reset' is not enough, more on that below.
Option 2: Donation, the same laptop, twice the impact
A three-year-old business laptop is a perfectly good student laptop. Through GreenByte's pledge programme, refurbished devices go to students who lack access to essential technology, with up to 1,000 laptops and tablets per year as our goal, and on-site visits to 15 schools across Flanders, Wallonia and Brussels.
Donation follows exactly the same security route as resale: registration by serial number, certified data destruction, then refurbishment. Your CSR report gets a concrete, verifiable story, not a vague intention.
Option 3: Recycling, for what's truly at end-of-life
Devices that are broken, obsolete or uneconomical to repair should be dismantled and recycled responsibly, so metals and materials re-enter the supply chain instead of a landfill. A good partner recycles only what genuinely can't be reused, reuse always beats recycling on environmental impact.
The step you can never skip: certified data destruction
Deleting files, emptying the recycle bin, even reformatting a drive, none of it destroys data. With free tools, anyone can recover 'deleted' files from a formatted disk. Before any device leaves your organisation, every data carrier needs certified erasure (verified overwriting of the entire drive) or physical destruction for drives that fail verification.
Just as important is the paper trail: an intake list of every serial number, a destruction certificate per data carrier, and a final report showing what was reused, recycled or destroyed. That documentation is what turns 'we got rid of the old laptops' into demonstrable GDPR compliance.
What this looks like in practice
A typical GreenByte project: we collect your devices on site anywhere in Belgium or France in sealed containers, register every device by serial number, destroy all data with certified tools, then route each device to resale, donation or recycling. You receive the full documentation, and where there's residual value, it comes back to you.
Frequently asked questions
Is a factory reset enough before selling old company laptops?
No. A factory reset or reformat removes the index to your files, not the files themselves, forensic tools recover them easily. Business devices need certified data erasure that overwrites the entire drive and is verified afterwards, or physical destruction of the data carrier.
Can we get money back for old business laptops?
Often, yes. Business laptops up to roughly five years old usually hold resale value. After certified data destruction and refurbishment, that value can offset part or all of your disposal cost. Request a quote with your device list to get a concrete number.
What proof do we receive that the data is really gone?
A serious ITAD partner documents everything: an intake list of registered serial numbers, a certificate of destruction stating the method used per data carrier, and a final report showing each device's end destination. Keep these with your GDPR records.
How many devices do we need for a pickup?
At GreenByte, collection starts from a single pallet up to a complete office clear-out, across Belgium and France, Monday to Saturday from 07:00 to 20:00.
Rather talk it through?