01 / THE PROBLEMWhy retired devices stall in a distributed company
The company had more than 20,000 employees spread across 600+ locations, and a large share of them worked remotely. Hardware went out without trouble. Getting it back was the hard part. Three problems kept recurring:
- Asset retrieval. Every hardware upgrade, role change, and termination left a device to recover, and IT teams were chasing them one by one across a workforce with no central drop-off point.
- Data security. A retired laptop sitting in an employee’s home office is still a computer full of company data. Until it came back and was destroyed, it was an open exposure and a compliance risk.
- Compliance and logistics. Late returns raised recycling-compliance and audit questions, and coordinating them consumed IT time that should have gone elsewhere.
None of this is unusual. It is what happens whenever the people who hold the devices are farther from IT than the devices are from the trash. The Remote Laptop Problem episode of the Crunch covers the pattern in 30 seconds; the fix is to make the return path start at the employee’s door.
02 / THE PROGRAMWhat CyberCrunch deployed
CyberCrunch set the company up on its Mail Back program. Instead of asking employees to find a box, a label, and an address, CyberCrunch ships a prepaid, pre-labeled return kit directly to the employee. The employee packs the device and sends it back from home or from any company office. On arrival, CyberCrunch destroys the data, recycles the hardware through certified downstream channels, and documents the order.
Three things about the rollout mattered as much as the kits:
- No setup red tape. There was no onboarding project and no delay before the first kits shipped.
- A dedicated live representative from day one. The client’s IT team worked with one person who knew the program: no ticket queues, no call centers, no bots.
- Every order visible in one place. Kits, returns, and certificates are tracked through the CyberCrunch portal, so IT can see what is outstanding and what is closed.
03 / THE RESULTSWhat the program delivers at enterprise scale
CyberCrunch reports these results for the program:
| Measure | Result | What it means |
|---|---|---|
| Orders | About 1,600 a year | Kits shipped directly to employees made returns routine at enterprise scale. |
| Certified destruction | 100% of orders | A certificate of recycling and destruction for every order, with compliance documentation and serialized tracking. |
| Material recycled | More than 30,000 lbs a year | Every order tracked through the CyberCrunch portal with chain-of-custody visibility. |
| Internal headcount | None added | The program scaled nationally with predictable, all-inclusive pricing per kit. |
The bottom line: a company-wide logistics problem became a turnkey, compliant program. Employees ship, CyberCrunch destroys and recycles, and IT gets a serialized audit trail for every data-bearing device.
04 / WHY IT WORKEDThree design choices that made returns routine
The kit goes to the device, not the device to IT. Most retrieval programs fail on friction: an employee who has to source packaging, print a label, and find a carrier will put it off, and every week of delay is another week of exposure. A prepaid kit at the door removes each of those steps.
Documentation is per order, not per pallet. A certificate for every order, tracked by serial number, is what lets IT close each asset record. It is also what an auditor samples: pick a retired serial from the inventory, find its certificate. Count-only paperwork can’t answer that question. The Certificate Checker shows which fields a certificate needs under NIST SP 800-88 Rev. 2.
One accountable contact. A program that touches HR, IT, and every office needs someone who knows its history. A named representative replaced the ticket queue, and that is a large part of why the program didn’t need new headcount.
05 / YOUR PROGRAMRunning device returns for a distributed workforce
The same model works at any size. If you are setting up remote returns, these are the steps that keep them from stalling:
- Trigger kits from events, not reminders. Tie a kit to each offboarding, role change, and refresh wave so it ships automatically. The Offboarding Gap Diagnostic scores how well your departures already do this.
- Plan the lock release. A device still locked by MDM, Apple Activation Lock, or a BIOS password can only be destroyed, not reused. For remote returns, release each one in your management console once its kit is confirmed received, not while it is still the employee’s daily driver. The locked-devices brief walks through each lock.
- Track what is outstanding. Keep a list of kits sent and not yet returned, and follow up on the oldest first.
- Reconcile certificates to the inventory. Match each certificate to its serial in your asset records, and keep the file with your retention schedule.
- Decide what is worth remarketing. Newer devices that come back in good condition can offset costs through the Value-Share program instead of going straight to recycling.
Mail Back is available immediately anywhere in the continental U.S., with no contracts and no setup fees. It also closes the loop on a Windows 11 refresh: self-installing sites in a staging and deployment program receive a kit with the new hardware to send the old device back.
CyberCrunch Short · 0:30
600 locations. Every laptop back.
A Fortune 500 company with 600+ locations had laptops stuck in home offices everywhere. CyberCrunch Mail Back ships a prepaid kit to each employee, tracks every return, destroys the data and certifies every order: about 1,600 orders a year with no added headcount.
Read the 30-second script
A Fortune 500 company. 600+ locations. And laptops stuck in home offices everywhere. Meet CyberCrunch Mail Back. We ship a prepaid kit straight to each employee. They pack the device and send it back, fully tracked. Then we destroy the data and certify every order. Now: about 1,600 orders a year. With no added headcount. Every device back. Every order certified.
06 / FAQMail Back FAQ
How does a Mail Back program work?
CyberCrunch ships a prepaid, pre-labeled return kit directly to the employee who has the device. The employee packs it and sends it back from home or any office. On arrival the device is scanned in, its data is destroyed, the hardware is recycled, and the organization receives a certificate of recycling and destruction for the order, tracked through the CyberCrunch portal.
What documentation do you get for each returned device?
In this program, every order produced a certificate of recycling and destruction, with serialized tracking and chain-of-custody visibility in the CyberCrunch portal. Serial numbers are what let IT reconcile each certificate against its asset inventory, which is the record auditors sample. The Certificate Checker grades a certificate against the fields NIST SP 800-88 Rev. 2 lists.
Does a Mail Back program need a contract or setup project?
Not with CyberCrunch. Mail Back is available immediately anywhere in the continental U.S., with no contracts and no setup fees, and pricing is all-inclusive per kit. In this case there was no onboarding delay, and a dedicated live representative supported the program from day one.
What should happen before a returned device is processed?
Sign out of personal accounts, back up anything personal, and pack the device powered off with its charger if IT asks for it. On the IT side, a device still locked by MDM, a BIOS password, or Apple Activation Lock can only be destroyed, not reused, so release each lock in the management console once the kit is confirmed received. The locked-devices brief covers each lock.
Is Mail Back only for offboarding?
No. In this program kits went out for hardware upgrades and role changes as well as terminations. The same kits work for small or distributed offices with no IT staff on site, for refresh waves where self-installing sites ship old equipment back, and for one-off returns from any address in the continental U.S.
MAIL BACK
Get the devices back without chasing them
Prepaid, pre-labeled kits shipped to any employee in the continental U.S., certified data destruction and recycling on arrival, and a certificate for every order, from a provider certified to NAID AAA, R2v3, RIOS, and PA DEP. No contracts, no setup fees.
Results are as reported by CyberCrunch for this client program, published October 27, 2026; the client is not named. Figures describe this program and are not a guarantee of results elsewhere. CyberCrunch credential statements reflect certificates held at the time of publication.