Media Recovery and SAS 70 Compliance

Media Recovery has achieved SAS 70 compliance, verifying the security and thoroughness of every step of our servo track media certification and data eradication processes. Media Recovery is one of the only Datacenter products and services companies to have this status.
A copy of our SAS 70 Audit file is available upon request.

To learn more about the SAS 70 process, please read our FAQ section below:

FAQs: SAS 70 Audit Questions & Answers

What is a SAS 70 Audit?

Statement on Auditing Standards (SAS) 70, is an internationally recognized auditing standard developed by the American Institute of Certified Public Accountants (AICPA). A SAS 70 audit is widely recognized because it represents that a service or outsourcing organization has been through an in-depth audit of their control activities, which generally include controls over information technology and related processes. In today's global economy, service organizations or outsourcing providers must demonstrate that they have adequate controls and safeguards when they handle data belonging to their customers. In addition, the requirements of the Sarbanes-Oxley Act of 2002 and the Health Insurance Portability and Accountability Act of 1996 (HIPAA) make SAS 70 audit reports even more important to the process of reporting on effective internal controls at service organizations.

SAS 70 is the authoritative guidance that allows service organizations to disclose their control activities and processes to their customers and their customers' auditors in a uniform reporting format. A SAS 70 audit signifies that a service organization has had its control objectives and control activities examined by an independent accounting and auditing firm.

Why is this important to Datacenter Managers?

Anyone who is concerned about data security should be interested in our SAS 70 Audit. If you are part of a publicly traded company that must comply with Sarbanes-Oxley or HIPAA, this focus on security is further amplified. Many companies require SAS 70 compliance for their service providers and companies to which they outsource operations. When we provide data eradication services to a customer, whether it be in buying their used media or just eradicating and certifying their tapes, Media Recovery is a service provider and is subject to their SAS 70 requirements.

SAS 70 compliance provides you with reassurance that your tapes, and the data on them, are being handled by service professionals that have a clearly defined and secure process for data eradication. You should never settle for a service provider that does not have SAS 70 compliance.

What is a SAS 70 Type II Audit Report?

A formal report including the auditor's opinion (“Service Auditor's Report”) is issued to the service organization at the conclusion of a SAS 70 audit. One of the most effective ways a service organization can communicate information about its processes and controls is through a Service Auditor's Report. A Type II report not only includes the service organization's description of controls and processes, but also includes detailed testing of the service organization's controls by an independent auditor. For more history and details go to www.sas70.com.

What products and services does our SAS 70 Type II Audit cover?

The SAS 70 audit was conducted on our processing of servo tape media: 3590, 3590E, 9840, 9940, and LTO I/II/III products. The SAS 70 is specific to our data eradication processes which include activities at the customer's location, transportation to the Operations Center, and the processing that takes place in our Secure Operations Center in Dallas.

These processes apply to the following product and service offerings:

Tape Buyback Program
Media Recovery 100% Certified Tape (3590, 3590E, 9840, 9940, LTO I/II/III only)
Data Eradication and Tape Disposal Service

Who performed our SAS 70 Type II Audit?

Weaver and Tidwell, L.L.P is one of the largest certified public accounting firms in the nation, and is ranked the largest regional firm in the Southwest and among the Top 100 Accounting Firms in the nation. Weaver and Tidwell conducted our SAS 70 audit.

Contact Us

Please contact us for more information about our SAS 70 Compliance, 100% Certified Tape, and many other products and services. We look forward to helping you achieve maximum Datacenter optimization.

Media Recovery: Your Partner in Datacenter Optimization

Media Recovery has been designing effective Datacenter solutions for the unique needs of customers for over 30 years. With extensive knowledge, resources, and staff, we’re here to help you maintain your data security and conserve your operational resources. As your ongoing “special projects partner”, Media Recovery stands ready to provide you with effective solutions for all your Datacenter requirements.

Media Recovery provides an extensive array of Raised-Floor Environment Services to optimize your Datacenter, including: Datacenter Cleaning, Relocations and Consolidations, Tape Library Audits, Tape Removal and Re-slotting, Tape Library Reconfiguration, RFID Asset Tracking, and Asset Recovery.

Media Recovery also offers a wide array of Storage Media Services, including: Tape Buyback Program, Data Duplication and Format Conversion, Labeling and Initialization, Data Eradication and Tape Disposal, Tape Cleaning and Certification, and Disaster Recovery Services.