Data Center Decommissioning: A Step-by-Step Guide

A data center or server room decommission is one of the riskiest projects a facilities or IT team runs. Every rack holds data, heavy equipment and assets that have to be accounted for, and one drive that leaves the building unrecorded can turn a hardware refresh into a breach investigation. Without a plan, the project also leaves pallets of servers, switches and battery-backed power gear that California law keeps out of landfills.

Modern Waste Solutions has operated since 1999 from its Sacramento facility, providing electronics recycling, secure data destruction and IT asset disposition for organizations throughout California. This guide treats data center decommissioning as a phased project: inventory and audit, data destruction, power-down and de-racking, chain-of-custody tracking, recycling and reporting, so that no equipment or data goes missing on the way.

Data center decommissioning is the controlled retirement of a data center, server room or IT closet. The team powers down and removes servers, storage, networking and power infrastructure, destroys the data those systems hold and routes every asset to reuse or recycling with a documented trail. The project carries data security, chain-of-custody and environmental compliance risk all at once.

A decommission is usually one milestone inside a wider IT asset disposition (ITAD) program, which governs how a business retires hardware over its whole life. Running the project in phases keeps each risk accounted for. The table below is the roadmap, and the sections after it explain each phase.

Planning happens before the first cable is pulled. It establishes what you have, who is responsible and what must be kept. Walk the room and build an asset register with the details you will need to prove the work later:

• Every asset by make, model and serial number, including servers, storage arrays, switches, routers and the racks themselves.
• Every data-bearing device, flagged explicitly: hard drives, SSDs and backup tapes, plus less obvious ones such as RAID controllers with cache and networking gear that stores configuration.
• Dependencies and shutdown order: which systems are still live, what they connect to and which must be migrated before power-down.
• Ownership, whether owned, leased or third-party, so equipment that has to be returned is not recycled by mistake.

If an asset is not on the register at the start, you cannot prove where it went at the end.

Once assets are cataloged, every data-bearing device must be sanitized or destroyed before it leaves your control. The recognized framework is NIST SP 800-88, which sorts media sanitization into three methods: Clear (overwriting through normal read and write commands), Purge (techniques such as cryptographic erase) and Destroy (physical shredding or disintegration). The right method depends on how sensitive the data is and whether the drive will be reused.

Destruction can happen on-site, witnessed at your facility before anything is transported, or at a secure processing facility, with the same documentation either way. It has to cover all media, not only the server drives, and it has to produce a certificate of destruction tied to serial numbers. Modern Waste Solutions provides secure data destruction with serialized reporting, including on-site hard drive shredding when drives must not leave the building.

With the data handled, the physical teardown starts. Follow a sequenced runbook instead of pulling breakers: shut systems down in dependency order, confirm that no live workloads remain and de-energize circuits safely.

Power infrastructure needs extra care. UPS systems and their battery strings store a lot of energy and usually contain lead-acid or lithium cells, which California regulates as universal or hazardous waste. Isolate them and handle them separately from IT hardware. Modern Waste Solutions handles data center and UPS decommissioning in the same project, so the batteries go through battery recycling with their own records. During de-racking, handle heavy equipment with proper lifting practice and protect components from electrostatic discharge.

From the moment a device is removed from a rack, it should be tracked by serial number through transportation, data destruction and recycling, with each handoff logged. Months later, that log tells you exactly what happened to any single drive.

Regulators and auditors start from a simple rule: the business that generates the material is responsible for it from the moment it is discarded until it reaches an authorized destination. A serialized chain-of-custody log is how you show you met that responsibility.

Once data is destroyed and assets are staged, hardware goes to its final disposition: resale or reuse where value remains and recycling for everything else. In California, electronics and batteries fall under the Department of Toxic Substances Control (DTSC) hazardous and universal waste rules, and the U.S. EPA's sustainable materials management guidance favors reuse and recovery over disposal. Modern Waste Solutions operates under ISO 9001, ISO 14001 and ISO 45001, so downstream processing is documented.

The project closes with reporting. A complete data center decommissioning produces a certificate of data destruction, a certificate of recycling and an asset disposition report that ties every serial number to its outcome. That package is what auditors, finance and any later inquiry will ask for, and it is what a hauler that only removes equipment cannot give you.

How long does a data center decommission take?

It depends on the number of racks, the destruction method and the downtime available for migration and shutdown. A single server room can move quickly, while a large facility with staged workloads is planned around approved outage windows. The timeline is set during planning.

Should hard drives be destroyed on-site or off-site?

Both work. On-site destruction lets your team watch before any media leaves the building and is often chosen for the most sensitive data. Off-site destruction at a secure facility suits larger volumes. Either way you should receive a certificate of destruction tied to serial numbers.

What happens to UPS batteries during decommissioning?

Lead-acid and lithium UPS batteries are universal or hazardous waste in California and cannot go in the trash or a landfill. They are isolated during power-down and sent to battery recycling, separate from the IT hardware. Our guide to lead-acid and UPS battery recycling covers storage and pickup.

What documentation do we receive at the end?

A chain-of-custody log, a certificate of data destruction, a certificate of recycling and an asset disposition report. Together they show that data was destroyed and equipment was recycled lawfully.

Is decommissioning part of ITAD?

Yes. A decommission is one milestone within an IT asset disposition program. Our IT asset disposition guide explains how the full lifecycle fits together.

A data center decommission stays manageable when it runs as a phased project instead of a scramble at the end of a lease. Inventory first, destroy data before anything moves, power down and de-rack safely, track every asset by serial number, recycle through authorized channels and finish with reporting you can hand to an auditor. If your California organization is retiring a server room or data center, request a quote from Modern Waste Solutions and we will plan the project around your equipment, data sensitivity and downtime windows.

• NIST SP 800-88 Rev. 2, Guidelines for Media Sanitization: csrc.nist.gov/pubs/sp/800/88/r2/final
• U.S. EPA, Sustainable Materials Management: epa.gov/smm
• California DTSC: dtsc.ca.gov