Portis Inc.

The focus of Portis, Inc. is to protect your privacy by completely destroying hard drives that contain any proprietary information (PI), personal identifying information (PII), protected health information (PHI), and electronic protected health information (e-PHI). We also provide computer and related equipment recycling services.

QUESTION

How would you respond IF a merchant informed you that your credit / debit card information had been compromised due to a data breach when you made an everyday purchase such as:

• food (breakfast, lunch, or dinner)
• gas
• groceries

ANSWER

Would you have one of the expressions in these pictures?

What other thoughts might come to your mind?

Reality: Recently the U.S. Treasury Department has issued a major fine to Morgan Stanley for improper management of drives.

MATTERS OF CONCERN

What is your role? Are you the individual required to protect your customers’ personal information?

• Business Owner
• Corporate Partner
• IT Director
• Responsible Person

What value do you place on the destruction of confidential data on hard drives or SSDs? What value would you expect a business to put on protecting your personal information such as medical records, credit cards, social security numbers, etc.?

SOLUTION

Our Records Management Service involves the final disposition of recorded information maintained as evidence of business activities and transactions – hard drive data destruction. While there are many methods use for hard drive data destruction, for various reasons we do not:

• DoD Wipe 
• Sanitize 
• Overwrite Several Times

Instead we completely destroy data and the hard drives and SSDs that contain:

• Proprietary Information (PI)
• Personal Identifying Information (PII) 
• Protected Health Information (PHI)
• Electronic Protected Health Information (e-PHI)

Each customer receives a Certificate of Erasure & Destruction, that provides a picture, time of destruction, and serial number of each hard drive and SSD destroyed for audit purposes.

Our hard drive data destruction process is compliant with the most stringent government and industry standards including:

• DOD Up to Secret Classification
• GDPR (General Data Protection Regulation) 
• GLBA (Gramm-Leach-Bliley Act) 
• HIPAA (Health Information Portability and Accountability Act)
• NIST SP 800-88r1
• PCI DSS 3.2 (Payment Card Industry Data Security Standard)
• PIPEDA (Personal Information Protection and Electronic Document Act)    

We require a signed Confidential Data Destruction Agreement for this service. Upon request we provide a HIPAA Business Associate.

This service is provided as a one time service and as an annul contract.