Buying and Retiring Computers, Tablets, and POS Hardware
Equipment does not fail on a schedule you choose. A simple lifecycle habit means fewer emergencies, no surprise bills, and no customer data walking out the door on an old laptop.
1. Decide on a refresh cycle
There is no single right number, and it varies by device and how hard you use it. As a starting point many small businesses plan to review laptops and desktops at about four to five years, tablets and phones sooner if batteries swell or software support ends, and point-of-sale terminals according to the vendor's support dates. Then adjust:
- Check when the operating system stops getting security updates. That date matters more than age.
- Check the maker's support or end-of-life page for POS terminals, card readers, and printers. Payment processors may require supported equipment.
- Replace early if a machine slows your staff down every day. Lost time costs more than most people estimate.
2. Buy with the end in mind
- Prefer business-grade models with a warranty you can extend. Compare standard warranty length and what it covers (parts, labor, on-site, accidental damage).
- Buy a few identical machines rather than many different ones. Spares and setup get easier.
- Keep the receipt, serial number, and warranty terms together in one place.
- Choose drives that support built-in encryption and turn it on from day one. Encrypted drives are much easier to retire safely.
3. Keep an asset list
A spreadsheet is enough. One row per item, with these columns:
- Asset tag number (a sticker on the device).
- Type, make, model, and serial number.
- Who uses it and where it lives.
- Purchase date, price, and vendor.
- Warranty end date.
- Planned replacement date.
- Status: in use, spare, retired, wiped, disposed. Add the date and method of disposal.
Sort by warranty end date every quarter. It becomes your budget for the next year.
4. Wipe before you resell, donate, or recycle
NIST Special Publication 800-88, Guidelines for Media Sanitization, is the standard most people point to. Revision 2 was published in September 2025. It describes three levels of sanitization:
- Clear. Overwrites or resets data using standard commands so it cannot be recovered with ordinary tools. Fine for gear that stays in your business.
- Purge. Uses stronger, device-specific methods (for example a cryptographic erase or a built-in secure erase command) so data cannot be recovered even with lab techniques.
- Destroy. Physically destroys the media so it cannot be used again.
Pick the level based on how sensitive the data was. Customer records, payment data, and employee files point toward purge or destroy when the device leaves your control.
5. Retirement steps
- Back up anything you still need and confirm the backup opens.
- Sign out of every account, and remove the device from management and cloud accounts. Turn off activation locks and find-my-device features.
- If the drive is encrypted, a cryptographic erase (destroying the key) plus a factory reset is a common purge method. Check the maker's instructions for the exact steps.
- For drives that cannot be wiped, or that are failed, remove them and physically destroy them.
- Do not trust a simple "delete" or quick format. Those leave data behind.
- Record the method, date, and serial number in the asset list. Keep a note of who did it.
- Send the equipment to a certified electronics recycler, or donate or sell it after the wipe. Check the EPA's guidance and your state's e-waste rules, which vary.