Security & custody

Your device.
Our evidence trail.

Six commitments that shape how we receive, redact, certify, and return every tablet. Written for legal, IT security, and physical security teams that need to defend the choice in writing.

Plain-English promises
  • Your device never leaves the United States
  • Your device never touches our network
  • We never image, copy, or retain your data
  • Every hand-off is logged with a timestamped actor
  • Every redacted device ships with photographic proof
  • Every certificate is independently verifiable
01 — Pillar

Air-gapped redaction

Every redaction is mechanical and physical. We do not flash firmware, push software, or attach devices to a network during work. A redacted unit cannot ever be re-enabled by an OS update or a profile change because the silicon is gone.

02 — Pillar

Photo evidence per device

Every device is photographed at intake, before redaction, after redaction, and at packing. Photos are tied to the device's serial number and the technician who handled it. The evidence packet ships with the device and is archived for the life of the program.

03 — Pillar

Signed Certificate of Redaction

Each device receives a serial-numbered certificate listing the device, its serial / IMEI, the components removed, the technician, and the date. The certificate carries a QR code linking to an independently verifiable record.

04 — Pillar

Background-checked technicians

Every person who touches your devices is identified, vetted, and logged. No subcontracting, no offshore work, no anonymous benches. Actor identity is recorded on every chain-of-custody event.

05 — Pillar

US-only chain of custody

Devices are received, redacted, certified, and shipped from our Alexandria, VA facility. They never leave the country, they never leave our hands. Every receipt, hand-off, state change, and ship event is logged with a timestamp and an actor.

06 — Pillar

No data retention

We do not image, back up, or extract user data. If a device arrives configured, we wipe it before work and re-wipe after. We are not a forensic vendor; we are a redaction vendor, and we want the smallest possible data footprint.

Handling timeline

Eight checkpoints. Every one is logged.

01Receipt

Devices logged at intake — serial, IMEI, model, condition photo, sealed box tag.

02Queue

Stored in a locked, access-controlled cage. Only authenticated technicians can pull.

03Bench

Tagged work tray. Tools are ESD-safe. A single device on the bench at a time.

04Redaction

Mechanical removal at the board level. No firmware, no software, no network.

05Verify

Functional test of remaining systems. Photo of the redacted unit, sealed.

06Certify

Serialized PDF cert minted; bound to the device record and the technician.

07Pack

Device packed with cert, original accessories (if requested), sealed for return.

08Ship

Trackable carrier of your choice. Chain-of-custody log exported on request.

Every cert is verifiable.

Scan the QR on any Certificate of Redaction to confirm it was issued by CBR Labs, who signed it, and what was removed.