Data recovery company with high confidentiality

[williamlpr]

My company has a Western Digital HD that makes clicking noises. It won't boot, and in another computer it is not in device manager. The HD has many customer credit card numbers and legal documents on it, so confidentiality is very important to us.

Is there a professional and reputable recovery company that not only guarantees confidentiality, but also has a written guarantee not to view the contents of the HD whatsoever? We need a company that has a cleanroom, and doesn't outsource HDs that need a cleanroom.

[Doomer]

i365

[harddrivespecialist]

Ontrack

They will provide charges for each requirement you need.

[BlackST]

Badly asked question. I CAN'T ENSURE I won't come in contact with sensitive data, but I can subscribe a NDA. In DR confidentiality is a premise, not a consequence. And there's a difference between professionality and paranoia. Who doesn't trust, can always do it by himself. Period...

[drc]

How can the DR professional verify that your data is intact and functional without viewing the contents of the drive to some extent?

[Cleanroom]

Most reputable DR companies will have terms and conditions that state that data is confidential. Tho, these companies also may need to test files for integrity which may mean they need to open some of the files. Most will not really look at the data inside, just make sure the files work correctly.

If you do not want them to test data you can specify that on your paperwork and take the data as is without data integrity testing.

Another option is going to a DR company that has a forensic department and you can get a Chain of Custody of who is working on the drive and who has access to the data. This is important if this data may end up in a court case.

[BlackST]

Of course every option will cost more $.

[cryoborgofthevenus]

For some file types (Office, etc) we can verify the integrity without opening/reading the files' content (so not by testing it one by one), however for other files, I don't know how, especially with special programs with databases.

But i think, DR company can ask the customer to send a trusted person from client's company to check the data in-house before payment is made. Of course "just for HIS eyes only", and the person may not copy anything at all until full payment is made

[harddrivespecialist]

Regardless of the points we have provided, one that posted this question won't even respond to our remarks.
Why? This person is paranoic enough to be afraid that we wiil track him tru his posts.

I am sure all of you has noticed that stupid questions won't be followed by its owner.

[HeadCrash]

I bet his company has illegal stuff in it. You want clean room? Get a vacuum cleaner and clean the room yourself.

[BlackST]

We should simply don't answer or say PM ME. Legal or illegal stuff is not important.

[prodata]

it is possible if it is an encrypted HD... ( encryption with Password )...

[harddrivespecialist]

How am I going to prove that I have recovered your data if i can't even tell what was on your drive?

This is bullshit!

No reasonable client will ask you for such crap.

All that we can offer is not to disclose info on your drive to a public. That is all. PERIOD*!


*"blackst"

[harddrivespecialist]

it is possible if it is an encrypted HD... ( encryption with Password )...

We can't open passworded files......

can we????

[cryoborgofthevenus]

Yes, IMHO it's illegal to do so. user must come and put the password himself.

[guru]

i365 lol

[guru]

We deal with a lot of confidential stuff. NDA is a requirement for a legal stance. Also Data Protection act.

Other than that I don't think recovery engineers care for the data (whats inside).. If you watch SCRUBS everyday, everyhour of your life for 10 years you have probably LOST ALL INTEREST IN THE ACTUAL LINES OF THE SHOW

[BlackST]

What's 'scrubs' ? Really.

[scratchy]

If there is any doubt, williamlpr will need to contact his merchant banker to find out the procedures required by them.

Since the onset of PCI DSS compliance, the process involves quite a bit of security testing, security management systems and 1st, 2nd and 3rd party approvals. We went through this approval by one of the major banks before doing a job for a customer who kept this type of information on their hard disk. In the UK, we all have to be PCI DSS Compliant to take credit/debit cards anyway.

The banks are really serious about this and insist that their merchants take steps to ensure card holder integrity - especially when shipping card holder information to third parties.

<itch>

[hddguy]

But what happens when you are checking the data integrity of photos and you find indecent and highly illegal images? You are looking at this data under a confidentially agreement with customer, but morally the right thing to do is report this.

Anybody come across this problem?