The Laptop Graveyard Audit: Turning Your Cupboard of Dead Kit Into a Real Plan

Every UK small business has one. Usually it's the stationery cupboard by the kitchen, or a shelf in the comms room, or the boot of whoever volunteered to 'sort the IT out'. Inside: three laptops with cracked hinges, a couple of machines bought in a panic during the 2020 scramble, a MacBook with a battery so swollen the trackpad has lifted, a router nobody can identify, and a bag of chargers that fit nothing you still own.

That cupboard isn't really a hardware problem. It's an unmade decision, and unmade decisions get more expensive the longer they sit there. You're paying for warranty nobody claims on, licences attached to machines that haven't booted since 2022, and a data-protection question you've never actually answered.

Here's a way through it that doesn't involve a sales call.

Step one: admit it isn't an asset register

If your list of equipment lives in someone's head, it's not an asset register, it's a rumour. The point of this exercise isn't tidiness. It's being able to answer three questions: what do we own, what still works, and what's still sitting on the disk?

Step two: the 20-minute inventory

Go to the cupboard with a spreadsheet and a label maker. For each item, capture:

• Make, model and serial number
• Who last used it (or 'unknown', which is itself a finding)
• Rough purchase date, from the invoice or a serial-number lookup
• Warranty end date
• Spec: processor, RAM, storage
• Condition: screen, hinges, battery, ports
• Does it still hold business data? Yes / no / don't know

'Don't know' is the most common answer and the most important one. Treat every 'don't know' as a yes until proven otherwise.

A machine that can't run Windows 11 without tinkering — broadly, anything without TPM 2.0 and an 8th-generation Intel chip or newer, or a Mac old enough to be out of security updates — is already past its useful life for business use. Windows 10 fell out of support in October 2025, so if anything in that cupboard was your fallback plan, it's now a liability rather than a spare.

The repair-versus-replace maths

Two numbers. That's all this is.

Number one: cost per remaining year. A £300 refurbished business laptop with three years of life left costs you £100 a year. A new £800 machine with five years costs £160 a year. Cheap isn't always cheaper, but old usually gets more expensive once labour is counted.

Number two: the 40% rule. If the repair quote is more than roughly 40% of what a comparable refurbished unit would cost, replace it. A £70 SSD swap on a machine that's otherwise sound is money well spent. A £260 screen-and-hinge job on a six-year-old laptop is a donation to the repair shop's pension fund.

Three repairs are still worth doing in 2026: an SSD upgrade, a RAM bump to 16GB, and a battery replacement on an otherwise solid machine. All three together usually land under £150 in parts plus an hour of labour, and they buy a decent laptop another two years.

The part everyone skips: what's still on those drives

This is where a tidy-up turns into a compliance question. Under UK GDPR you're responsible for personal data right up to the point it's destroyed, and the ICO's long-standing position is that disposal is part of security, not an afterthought.

'Delete everything and hand it to the recycling bloke' isn't destruction. Neither is a quick format. Neither, frankly, is pulling the drive and putting it in a drawer, which just relocates the problem to a smaller drawer.

What actually works:

• Encrypted drives. If the disk was encrypted with BitLocker or FileVault, destroying the key and wiping is a legitimate cryptographic erase — but the wipe has to have genuinely run before you claim it did.
• Certified erasure. A tool that produces a per-device certificate, overwriting to a recognised standard such as HMG Infosec Standard 5. Free tools exist; the certificate is what your auditor actually wants to see.
• Physical destruction. For anything that held finance, HR or client data and can't be wiped reliably, shredding the drive is a defensible answer. Ask for the destruction certificate.

Whichever route you take, keep the paperwork. Six years is a sensible retention period — it lines up with how long you keep other business records — and it takes about ten seconds per device once you've got a folder for it.

WEEE, and why 'the man with a van' isn't a disposal strategy

Electrical waste in the UK falls under the WEEE Regulations, and the short version is that business kit shouldn't go in the general waste. Many council household waste sites will take small volumes from small businesses, but check your local one rather than assuming.

For anything beyond a handful of items, use an authorised IT asset disposal firm. A decent one gives you a collection note, a WEEE evidence trail, data erasure certificates and sometimes a small rebate on kit that still has resale value. A decent one also won't stack a laptop with a swollen lithium battery on a pallet next to a radiator.

Then turn it into a budget line

The reason cupboards fill up is that hardware gets bought in panics. The fix is a rolling refresh: pick a four or five-year working life, count your devices, and replace roughly a fifth of them each year. Fourteen laptops becomes three a year, which is a line in the budget rather than a shock in March.

Do that and the cupboard stops being a graveyard and starts being a shelf with two labelled spares on it, which is what it was always meant to be.