Features / Standards
NAID AAA software
Secure data destruction certification. Certification for companies that destroy data-bearing media: secure operations, screened staff and verified destruction.
Who it’s for
Data destruction providers, ITAD firms and recyclers that handle customer data.
Edition notes. Based on public descriptions of the program (screened staff, secured areas, surveillance, verified destruction, unannounced audits). Check the current certification requirements with i-SIGMA.
What you still need
The official standard from i-SIGMA (NAID) (isigmaonline.org (i-SIGMA)), and — if you want a certificate — an accredited certification body to audit you. Total ISO helps you build, run and evidence the system; it doesn’t grant certification.
What Total ISO gives you for NAID AAA
Each requirement area below maps to a screen in the app. Your “Requirements” page shows what’s in place and what’s still to do. Coverage for NAID AAA: key areas — the shared management-system structure plus the main specific areas, not every detail of the standard.
Employee screening
People with access to data-bearing material are screened.
In the app: Staff screening
Secured areas and access control
Secure the areas where data-bearing material is held and control who enters. Record checks as inspections with category “Security”.
In the app: Facility inspections
Surveillance and security systems
Evidence of surveillance and security systems. File under “Security systems”.
In the app: Documents
Destruction procedures
Documented procedures for handling and destroying data-bearing media. File under “Procedures”.
In the app: Documents
Destruction records and chain of custody
A record for each destruction job, with method, verification and result.
In the app: Data sanitization log
Insurance
Evidence of required insurance. File under “Insurance”.
In the app: Documents
Security incidents
Record and investigate security incidents.
In the app: Incidents
Training
People are trained on data handling.
In the app: Training matrix
Internal audit and audit readiness
Audit your operations; certification audits include unannounced visits.
In the app: Internal audits
Corrective action
Investigate and correct problems.
In the app: Corrective actions
Working to more than one standard?
Most requirements overlap, so you enter things once. One risk register, one set of documents, one audit programme, one corrective-action process — shared by every standard you choose. Your plan includes one standard; each extra is a simple monthly add-on (see pricing) — $40/month for NAID AAA when it isn’t your included one. Try them all free during the trial.
Mapping follows NAID AAA (current program) as publicly described. Clause numbers appear only where we are confident of them. Standards are revised periodically; check which edition your certification body audits against. ISO is a registered mark of the International Organization for Standardization. Total ISO is not affiliated with or endorsed by i-SIGMA (NAID).