CUI, classified, and SAP media destruction for defense contractors
Between NIST 800-171, CMMC, the NISPOM, and DoDM 5205.07, a defense contractor retires media under more rules than any other buyer. We bring NSA-listed equipment to your facility, your cleared personnel keep custody and supervise, and we work under your FSO's or PSO's conditions.
What the rules require
- NIST SP 800-171 and CMMC 2.0Requirement 3.8.3: sanitize or destroy system media containing CUI before disposal or reuse. With Phase 2 suspended, the senior official's affirmation in SPRS is the signature that vouches for it.
- NSA/CSS Policy Manual 9-12Classified magnetic media is degaussed on a listed degausser and then deformed; solid-state media is disintegrated to 2 mm. Reissued February 2026 with new rules for hybrid and HAMR drives.
- DoDM 5205.07Special Access Program material is destroyed on NSA/CSS-approved equipment by two SAP-briefed people who both sign an itemized certificate, with outside services permitted only under CA SAPCO approval.
- 32 CFR Part 117, the NISPOMYour cognizant security office's rules for classified material, including destruction records and the personnel who may perform it.
How we handle it
Your FSO or PSO sets the conditions and we meet them: NSA-listed machines inside your perimeter, the material in your custody, your cleared personnel supervising and witnessing throughout, and your briefed personnel handling SAP material. We do not hold a facility clearance and say so before you book; this arrangement does not require one.
CUI media is destroyed to NIST 800-88 Destroy with the chain-of-custody record a CMMC assessor expects. We recommend the 2 mm standard for CUI solid-state media because it removes the question. We have completed the CMMC Level 1 self-assessment and affirmed it in SPRS ourselves, so the vendor handling your CUI media is in the same program you are.
The certificate lists each item by serial, names the machine, and carries two technician IDs on every row. For SAP jobs your briefed personnel sign as the witnesses, and the log itemizes control and copy numbers.
“Mansfield Technologies did an absolutely professional job grinding up a solid state drive for me per NIST and NSA/CSS policy. I highly recommend this company. I am extremely happy with them. They have the right equipment and the right people to get the job done right. You can fully trust them when you are in a pinch.”
Working inside your perimeter
- Visit authorization. We send full names and citizenship for everyone on the crew as far ahead as your visit process requires, typically a week, and we carry government ID on the day.
- Electronics. Phones stay in the truck cab. No photography on your site. Serial numbers are captured on a dedicated device that never leaves the truck, or on your equipment if you prefer.
- Custody. Your cleared personnel keep custody and escort the media from storage to the truck; the machines never leave the truck, and the truck parks where you put it inside the perimeter.
- Inspection. You may inspect the truck and the equipment before, during, and after the work. The EPL listings for the degausser and disintegrator are on the equipment page by model number.
- Debris. Destroyed material from different media is mixed in the collection bins, as the 2026 manual calls for, so no single stream can be reconstructed.
- Record. Your witness signs the media log on the day, and the certificate is issued to your security office, not to the person who booked us.
Where we do it
Dayton, Springfield, Warren and Sterling Heights, Lima, Newark and Heath, Fort Wayne, Johnstown, Pittsburgh, State College, Cumberland and Rocket Center, Bloomington and Crane, Fort Meade and Annapolis Junction, Washington, and everywhere else we go.
Read next
Questions from defense contractors
Can you destroy SAP material?
Under your CA SAPCO's approval and your PSO's conditions, yes. The equipment is NSA-listed, your SAP-briefed personnel handle the material and sign with us, and the certificate itemizes by control and copy number.
Do you hold a facility clearance?
Not yet; we intend to obtain one and welcome a sponsoring contract. Classified destruction happens at your cleared facility with the material in your custody, under the continuous observation of your cleared personnel, who witness and sign. Our technicians are U.S. citizens with background checks, and many hold individual clearances through Guard or Reserve service. Your FSO confirms the arrangement before we come.
Can CUI ship to you instead?
Yes. CUI is unclassified and may travel by tracked carrier under 32 CFR 2002; Shred by Mail takes it with tamper-evident packaging. Classified media never ships.
What about GFE?
Unclassified government-furnished equipment can be destroyed once your contracting officer or property administrator gives written permission. Keep that authorization with the certificate.