see what they are certified as (R2 etc)...then look up those certifications to see what is required of them...it will list how their downstream people must handle the items they send to them. If you can comply with this, then answer their questions, if not, then you will have to move on or, if it is a lucrative opportunity, see what you will need to do to become compliant to work with them.
I have never had it happen...I have been asked if I have handled items to HIPPA standards for a hospital, but it didn't even get that far...they picked the company that already did their shredding to handle their hard drives...but I get everything else.
Bookmarks