On-site drive shredding and recycler handover for tier-2 hospitals and banks
TL;DR Shreddesk drives a shredder van to hospitals, cooperative banks and NBFC branches in tier-2 cities. It destroys hard drives and SSDs in front of the client, records every serial number on video and hands the scrap to a registered recycler. Clients pay per drive for proof they can show an auditor.
India recorded about 13.97 lakh tonnes of e-waste in FY2024-25, up from 12.54 lakh tonnes the year before[2]. Any organisation that used 1,000 or more listed electronic items in a year is a bulk consumer and must hand its e-waste only to a registered producer, refurbisher or recycler[1].
But the rules care about where the hardware goes, not what's on it. A hospital's old servers carry patient records and a bank's old desktops carry account data. Once those drives leave the building, the client is trusting a chain of trucks and warehouses and hoping for the best.
Recyclers in big cities offer certified wiping and per-asset certificates[2]. Smaller towns get fewer options and longer trips.
What it does, in regulatory terms: data destruction on the client's premises, then handover to a CPCB-registered recycler. Shreddesk does not recycle or extract metals. It acts for the client under the E-Waste Rules[1] and as a data processor under the DPDP Act.
A van with a drive shredder and degausser parks at the client's site. Staff scan each drive's serial number, film it going into the shredder and give the client a certificate listing every serial, the method and the date, following NIST media-sanitisation guidance[5]. The shredded scrap and any leftover equipment go to a partner recycler, whose receipt gets attached to the same record. Each city runs on booked monthly routes, which keeps the cost per stop low.
The seed pitched on-site plasma-arc recycling to recover metals, and I reframed it. Plasma arc is a heavy industrial process and the 2022 rules want recycling at registered facilities[1], so doing it in a client's car park is a non-starter. The bit that genuinely needs to happen on site is destroying the data.
The payer is the client's IT or compliance head at a hospital chain, diagnostic lab group, cooperative bank or NBFC. They already pay for e-waste pickup. On-site services exist in metros, and one vendor advertises pan-India on-site shredding with destruction certificates[4], though its price isn't clear. Expect to quote per drive with a minimum per visit, and test the level in the sprint.
The DPDP Rules were notified on 13 November 2025, and most duties, including erasure and security safeguards, kick in 18 months later, around May 2027[3]. Data fiduciaries will want proof that old drives were destroyed. E-waste volumes keep rising[2], and the bulk consumer duty has applied since April 2023[1].
There's no public figure for India's data-destruction market. The narrowest signal is that ITAD recyclers now build services around per-asset destruction certificates[2], and on-site vendors list banks among their clients[4]. The world generated 62 million tonnes of e-waste in 2022 and only 22.3% was documented as properly recycled[6], but that's adjacent and not your market.
Registered e-waste recyclers offer end-to-end disposal with chain-of-custody records and certificates from their own plants[2]. On-site data-destruction vendors advertise on-site shredding and degaussing across India[4]. Large recyclers offer collection too.
The gap is regular, affordable on-site service in tier-2 cities, where volumes per client are small and a single visit rarely pays unless the route is shared.
| Difficulty | Moderate (45/100) |
| Starting capital | ₹55–95 L |
| Time to launch | 5–8 months |
You buy the machine, you don't build it. The hard parts are route density and trust. A van only pays if it fills a day of stops, so you need enough clients per city, and banks and hospitals will audit you before they let your staff anywhere near their servers.
Yes, partly. You destroy data but don't recycle, so the recycling registration sits with your partner.
Building this outside India? The categories above usually have a local equivalent, so check with your own regulator.
Don't trust AI to confirm that a drive was actually destroyed. The video, the physical shredding and a signed record are what prove it.
Want to work out the AI layer for Shreddesk? Talk to Yash →
I think this is sound for a founder with IT-services or security operations experience in a cluster of tier-2 cities. If you dream of building a recycling plant then this isn't it. Prove first that ten clients in one city will book quarterly visits at a per-drive price that fills a van for at least two days a month.
Plan for roughly ₹55–95 L, mostly the van, shredder, degausser and the first sales team.
You need a registered recycler partner under the E-Waste Rules, a processing contract with each client under the DPDP Rules, and possibly SPCB consent for shredding on site.
Yes, the service is common in some markets already. Check your local e-waste and data protection laws, and which destruction standard clients expect.
The free Shreddesk validation kit has the line-by-line capital breakdown, the effort scoring, the e-waste and data-protection checklist, a 14-day validation sprint with pass/fail targets, a 90-day launch plan, 10 interview questions for IT and compliance heads, and 5 assumptions to test. Download the kit →
Thinking about building Shreddesk or something close to it? The make-or-break work is packing enough clients onto each route and passing a bank's vendor audit, and I'm glad to help you plan for both. If you need a hand, you know where to find me. Talk to Yash →
For illustration only. Names are fictional and ideas hypothetical; sourced facts are real but may be out of date. Nothing here is legal, financial or professional advice, and Yash Khatri is not personally liable for any use of it. Read the full disclaimer.