Nabel Solutions

Serial Xtractor™

Automated chain of custody for ITAD.

Scan. Xtract. Destroy. Every serial read in under a second, onto a record that can't be quietly changed.

Ten seconds a device becomes under one. The audit evidence writes itself.

For ITAD providers, shredder manufacturers and data centers.

Drives passing a scanning station. Each is captured, its serial number picked out from the part number, model and service tag on its label, and logged before the next arrives. PART NO.0B31234-01MODELDX-4000-SATASERVICE TAG7QW2R1SERIAL9XG4K2TB70NMSERIALRECORDEDPART NO.0A77918-04MODELDX-2000-SATASERVICE TAGK4M8P2SERIALRT6P1WQ4ZC88SERIALRECORDEDPART NO.0C40655-12MODELNV-1000-M2SERVICE TAGB9XT35SERIALLM2V7HD5KX31SERIALRECORDEDPART NO.0B31234-01MODELDX-4000-SATASERVICE TAG7QW2R1SERIAL9XG4K2TB70NMSERIALRECORDED
Xtraction
< 1 second
With a target list
100% accurate
Connectivity
Online or offline
Chain of custody
Immutable record

The problem

"What we thought would take us a few hours took all day!"

  • Media is accounted for by hand at two moments — out of the rack, and at the mouth of the shredder.
  • Everything in between is unwitnessed. Handled, moved, staged, transported, and none of it leaves a trace.
  • Nothing gets shredded until every device is accounted for, so the paperwork sets the pace of the job.

Xtractor identifies the serial. One device, one serial, less than a second.

The middle of the job is dark

Two moments are recorded. Everything between them is trust, and trust is what an auditor is there to test.

One discrepancy costs the day

A device on the client's list that's missing from yours means back to square one.

Overtime, or the job you turned down

10 seconds a device - paid for in today's overtime, and the work you couldn't fit into the schedule.

It makes a good operation look amateur

Your client sees a handheld scanner, a spreadsheet, and a team against the clock.

Why we built it

There has to be a better way

~10 sec
per device with bar code/competitor scanners
~360
devices an hour at that rate
By eye
the serial picked off a crowded label by a technician

We've spent decades handling sensitive information and chasing phantom breaches. We know what a chain of custody has to survive.

Handheld scanners. Serials read by eye. Spreadsheets. Corrections typed in at the end. 10 seconds a device — without fumbling and damaged labels.

So we built Serial Xtractor™

< 1 sec
serial number xtracted
Up to 3,600
devices an hour, same station
100%
identified against a target list

With a target list, a match records itself. Immediately. 10x devices throughput, in the same hour, with the same technician.

It's still wrong that chain of custody for ITAD operations comes down to a handheld barcode scanner and a spreadsheet. We set out to end this slow manual process.

Timings and prices are collected from openly published figures for comparable ITAD scanning systems. Our own timings are measured against a variety of device types from capture to serial number identification.

Per job

What it costs you on a real job

A job runs between 300 and 1,000 devices depending on the client. Here is the same job, done both ways.

Job sizeBy handWith a target listWithout a listTime recovered
300 devices30 min to 50 min5 min15 min25 min to 45 min
500 devices50 min to 1h 238 min25 min42 min to 1h 15
1,000 devices1h 40 to 2h 4717 min50 min1h 23 to 2h 30

By hand is six seconds a device at best and ten at typical. With a target list — which your client almost always supplies — a match confirms in one second, and that is the whole cycle. Without a list the serial is still extracted in one second; the operator review window is yours to configure, and three seconds is what the table assumes.

For a mobile operator working to a client's site window, hours are the constraint that decides how many jobs fit in a week.

What rests on the record

A system your client's auditor can trust. Not just a record.

NIST SP 800-88. R2v3, e-Stewards, ADISA, ISO 27001, NAID AAA.

  • A wrong serial leaves a destroyed asset unaccounted for, and a surviving one recorded as gone
  • Best case is a panicked review of IT Asset Management Platform and Certificates of Destruction
  • Worst case is the regulatory fine, the scrutiny, and the contract you don't keep

Every scan writes to an immutable record

Append-only. A record is written once and never rewritten, so it cannot be quietly corrected after the event — and an alteration shows rather than hides.

That is the difference between a chain of custody and a spreadsheet.

Xtractor is not a certification. It produces the per-device evidence those standards demand, automatically.

What a failure costs

$4.99M
Global average cost of a data breach in 2026, up 12% year on year
$11.5M
The United States average — more than twice the global figure
258 days
To identify and contain a breach originating with a business partner

That last figure is the one worth sitting with. To your client, an ITAD vendor is the business partner in that statistic — and it tied for the longest lifecycle in the study.

IBM Cost of a Data Breach Report 2026, published 29 July 2026, covering 602 organizations breached between March 2025 and February 2026.

Work it out

What your current process costs you

Put in your own volume and time estimate. For recording only - handling and destruction take what they take.

5.6
Hours a week, currently
0.6
Hours a week with Xtractor
5.0
Hours saved, every week

Xtractor is calculated at a flat one second per device against a target list. Measured times are under that.

The plan

Scan. Xtract. Destroy.

10x your throughput

  1. Scan

    Present the device and capture the image.

  2. Xtract

    The serial is identified, checked against your target list, and written to the manifest. Under a second. No interaction.

  3. Destroy

    Every asset accounted for and cross checked, all while the shredder gets started. One click and the certificate is generated when the job is done.

The fail-safe

Automated - Not unsupervised

The serial shows on screen before it writes. Your operator gets a configurable timeframe to review. Say nothing and it writes itself.

  • Against a target list, an exact match writes immediately
  • Anything unexpected or duplicated waits for technician review
  • Every scan keeps its image and its xtraction
  • Written to an immutable record.

The certificate

The record that matters

Compliant evidence of destruction is what your client needs.

Generated in a single click, with your brand.

  • Device serial, model and type
  • Destruction method, date and time
  • Totals by category
  • An image of every asset
  • Your branding, not ours

What changes

The job that took all day takes a couple of hours

Same team, same equipment, same client.

  • Job running later than anticipatedFinished, and onto the next job
  • A discrepancy that means back to square oneAsset manifests match, searchable, auditable, immutable
  • One job per day, turning work downOn to the next job with hours to spare
  • A scanner and a spreadsheetA process your auditor would recommend

Where it stands today

In beta with live customers, and open for business.

We are taking on new ITAD and data center operations now, and talking to equipment manufacturers and ITAD ERP vendors about building this in.

Early customers shape what gets built next.

Get in touch

We're on a mission to bring automation to ITAD

Interested in hearing more, or got something you'd like to talk through? Get in touch.