<\/p>\n
Technology & business analysis for Daily Business<\/em><\/p>\n Scotland\u2019s technology companies are moving rapidly from experimenting with artificial intelligence to putting it into day-to-day operations. That shift is getting plenty of boardroom attention. Much less glamorous questions \u2013 such as what happens to the phones, tablets and other endpoints a business no longer needs \u2013 can be easier to ignore.<\/p>\n That is a mistake. A retired smartphone is not simply old hardware. It can still contain company data, remain tied to corporate accounts or mobile-device-management systems, carry a meaningful resale value and create an audit gap if nobody can say where it went.<\/p>\n The latest Scottish Technology Industry Survey from ScotlandIS shows how quickly digital adoption is maturing. Almost all respondents now use AI in some form, full adoption has doubled to 18%, and only 2% report no AI use at all. The same survey shows companies planning broader deployment across product development, marketing, sales, data management and cyber security.<\/p>\n That makes good device governance more important, not less. More digital workflows mean more access tokens, customer information, internal messages, authenticator apps and cloud credentials moving through employee endpoints. A phone that has reached the end of its useful life may no longer be important to the employee, but it can still be important to the organisation.<\/p>\n The problem is not that every discarded handset will leak data. It is that informal disposal creates uncertainty. Was the device factory-reset? Was it removed from Apple Business Manager or Android Enterprise? Was the SIM or eSIM deactivated? Was a corporate Google or Microsoft account still signed in? Is there a record showing who authorised its disposal?<\/p>\n The Information Commissioner\u2019s Office is explicit that organisations should use and document secure disposal methods for electronic records and hardware, keep devices awaiting destruction secure, maintain logs and obtain evidence of secure disposal from third parties where appropriate. Its current disposal and deletion guidance frames poor disposal as a data-protection risk rather than a housekeeping issue.<\/p>\n For individual devices, the National Cyber Security Centre also advises owners to erase personal data before selling, donating or trading in phones and tablets. The underlying lesson for business is simple: resale and reuse are perfectly compatible with security, but only when wiping and chain-of-custody are treated as controlled processes rather than an afterthought.<\/p>\n Redundant phones are also small stranded assets. One handset is easy to dismiss; fifty or five hundred are not. Recent iPhones, Galaxy devices and Pixel phones can retain substantial residual value, particularly when they are collected soon after a planned refresh rather than left in storage for another year.<\/p>\n That creates an awkward corporate habit: companies can spend months negotiating handset contracts and upgrade budgets, then give little attention to the value of the outgoing estate. From a finance perspective, that is the wrong end of the process to become casual about.<\/p>\n A more disciplined approach is to inventory devices at refresh, record condition and storage, remove them from management systems, secure-wipe them, obtain competitive recovery prices and retain evidence of what happened next. Services offering business phone recycling and bulk device comparison can be useful here because they turn the disposal stage into a documented procurement exercise rather than an ad-hoc sale by individual employees.<\/p>\n There is an environmental reason to tighten the process as well. A working phone that can be refurbished and put back into use normally has more economic value than one that sits in a cupboard until it is obsolete. Reuse also keeps manufactured hardware in circulation longer and reduces the amount of electronic equipment reaching the waste stream.<\/p>\n For businesses already reporting on procurement, waste and carbon, documenting device reuse can provide a useful supporting record. It should not be exaggerated into a major climate initiative, but it is exactly the kind of practical, measurable circular-economy activity that is easier to defend than vague claims about being \u2018green\u2019.<\/p>\n None of this is complicated, which is precisely why it is easy to postpone. The interesting technology story in Scotland right now is AI adoption, and rightly so. But businesses becoming more sophisticated with AI while remaining casual about old endpoints would be a peculiar kind of progress.<\/p>\n The best device-disposal policy is boring: know what you own, know what data is on it, recover what value remains, and keep evidence of where it went. A business that can do that consistently is better placed to manage security, cash and environmental reporting \u2013 regardless of how quickly the next wave of technology arrives.<\/p>\n \t <\/div>\nAI is the headline, but device governance is still the plumbing<\/h2>\n
The security risk is mostly about process<\/h2>\n
There is a balance-sheet question too<\/h2>\n
ESG reporting makes the paper trail more useful<\/h2>\n
A simple policy beats a drawer full of good intentions<\/h2>\n
\n