R2v3 Certification Explained: What It Covers and How to Check a Vendor

If you have ever asked an IT asset disposition provider how they handle old equipment responsibly, you have probably heard the phrase "we are R2 certified." It is a useful claim, but only if you know what it covers. R2v3 is the current version of a standard for responsible reuse and recycling of used electronics. This guide explains who maintains it, how certification works, what the different appendices mean, and how to confirm that the facility handling your equipment is certified for the work it is actually doing for you.

This is general information to help you ask better questions. It is not a substitute for reading the standard itself or for advice from your legal and compliance teams.

What R2 is and who stands behind it

R2 is maintained by SERI (Sustainable Electronics Recycling International), a US-based non-profit that SERI describes as the housing body and an ANSI-accredited standards development organization for the R2 Standard. According to SERI's FAQ, the standard traces back to 2005, when the US Environmental Protection Agency convened a multi-stakeholder process to create a voluntary, market-based way to promote best practices in electronics recycling.

SERI describes R2 as covering the full reverse supply chain for used electronics, from first use through end of life, and as combining environmental, health and safety, quality and data security requirements in one package.

What changed with R2v3

SERI states that its Board of Directors formally adopted R2v3 in June 2020, and that it has been approved as an American National Standard by ANSI. SERI's FAQ adds that facilities began obtaining R2v3 certification as early as 2021 and had until June 30, 2023 to transition, after which R2v3 is the current and only active version. A SERI retrospective reports that 711 facilities moved from the earlier R2:2013 version to R2v3 during the three-year transition, and that 274 new facilities were added in the same period.

For a business buying services, the practical effect is simple: a certificate that refers to the 2013 version should no longer be treated as current. Ask which version the certificate is issued under.

How the certification itself works

Certification is not issued by SERI directly to each facility. SERI explains that it certifies the Certification Bodies, and those bodies audit and certify the facilities. SERI states that neither it nor the R2 program has an approver role in facility-level certification decisions, which it says preserves objectivity.

Two other points from SERI's materials matter to buyers:

  • Certification involves downstream controls. SERI's guidance says an R2 facility using downstream vendors must qualify and manage them under Appendix A; when the facility does not perform an operation itself, it may outsource that operation to a downstream vendor qualified through Appendix A.
  • It is an audited program, not a self-declaration. Facilities are independently audited. Your job is to make sure the certificate you are shown is genuine, current and relevant to your equipment.

Core requirements and the appendices

R2v3 has a set of core requirements that apply to every certified facility, plus appendices (SERI calls them process requirements) that apply to facilities performing particular operations. SERI's Appendix Applicability Guidance (Version 2, October 2020) describes six appendices, A through F; verify the current certificate scope against the current R2 materials.

Appendix Topic When it matters to you
A Downstream Recycling Chain The facility sends materials onward to other vendors. It covers how those downstream vendors are qualified and managed. SERI says every facility that is not the final process in the recycling chain must be certified to Appendix A.
B Data Sanitization The facility performs logical data sanitization, as ITAD and mobile repair operations do. It also covers an enhanced level of physical sanitization with extra tracking, verification and quality controls.
C Test and Repair The facility tests, repairs or refurbishes devices for reuse and confirms a defined level of functionality. Relevant to resale and trade-in programs.
D Specialty Electronics Reuse Highly specialized commercial or industrial equipment that is hard to test fully. SERI gives network telecom equipment and medical devices as examples.
E Materials Recovery Destructive dismantling or separation to recover materials. SERI notes that dedicated self-contained hard drive shredders and similar equipment used for data destruction are not what triggers Appendix E.
F Brokering Transactions where equipment moves directly from the supplier to a downstream vendor without passing through the certified facility.

SERI also points out that an R2 facility must be certified for all the process requirements it undertakes, and that when it does not perform one itself, it may outsource that operation to a downstream vendor qualified under Appendix A.

Matching the appendix to your project

SERI's own buyer guidance maps common business needs to appendices. Paraphrased:

  • Data destruction with serial-level tracking: look for facilities certified to Appendix B, which SERI says provides enhanced data destruction processes that can track down to serial-number level.
  • Returns, warranty and trade-ins: SERI suggests Appendices B and C, because devices need logical sanitization and legitimate testing.
  • ITAD and remarketing: SERI recommends Appendix C for confidence that the risks of maximizing returns are minimized.
  • High-volume recycling with little resale value: SERI says facilities certified to Appendix E process recycling in house, including dismantling, separation and recovery, while others rely on a downstream network.
  • Telecom, medical or commercial specialty equipment: look for Appendix D.

The lesson is that "R2 certified" is a starting point. Whether a facility is certified for the specific process you need is a second question.

R2 and e-Stewards

R2 is not the only recognized program. e-Stewards, which describes itself as created and managed by the Basel Action Network (BAN), a Seattle-based non-profit, was established in 2007 and has certified processors in North and South America, Europe and Asia. The two programs are separate, with different owners and different requirements. Some buyers accept either; some contracts name one. If a customer, regulator or contract specifies a program, follow that wording and confirm it with the provider in writing. This article does not rank the programs against each other.

How to check a provider

Use this short list when a provider tells you they hold R2v3 certification:

  1. Ask for the certificate and read the scope. Check the facility name and address, the version (R2v3), the certification body, the expiry date and the appendices listed.
  2. Confirm the site that will handle your equipment. Certification applies to facilities, so make sure the address on the certificate is where your equipment will be processed, not just the company's head office.
  3. Cross-check with SERI. SERI publishes a list of R2 certified facilities on its website. Compare what the provider shows you with what is listed.
  4. Match appendices to the job. Data sanitization work points to Appendix B, resale to Appendix C, and so on, using the table above.
  5. Ask about downstream vendors. Request the list of vendors that receive material and confirm how they are qualified.
  6. Get the output in writing. Ask for serial-level reporting and a certificate of sanitization or destruction. Our guide to hard drive shredding vs degaussing lists the details such a record should contain.

What certification does not do

A certificate shows that an independent audit found a facility meeting the R2 standard. It does not replace your contract. It does not guarantee a particular price or resale outcome, and it does not decide legal obligations that apply to your own data and your own jurisdiction. Treat it as one strong input alongside references, a clear service agreement, insurance questions and the reporting you will receive.

If you are comparing several providers, our ITAD provider checklist and ITAD vendor comparison pages show how to score them side by side, and ITAD compliance standards gives wider context on the frameworks involved.

Frequently asked questions

Is R2v3 the same as ITAD certification? Not exactly. "ITAD certification" is a loose phrase rather than the name of one program. R2v3 is a standard for responsible reuse and recycling of used electronics, and ITAD work falls within what it covers, mainly through the data sanitization and test-and-repair appendices. Other programs, such as e-Stewards, also exist, so ask a provider which one it means.

Can a facility be R2 certified but not allowed to sanitize data logically? Per SERI's guidance, Appendix B is the process requirement for logical data sanitization. A facility certified without it should not be your choice for logical wiping that you intend to rely on. Check the scope on the certificate.

Do I still need my own data-wiping policy? Yes. Your own policy defines what must be sanitized and how it is verified. Certification helps you check the provider's process against it.

Sources