What to do with an old file server and backups
Short answer
Before you wipe or recycle an old server, NAS or backup set, list what's on it, keep what you're legally required to keep, destroy personal data securely, and check whether the rest, often years of the firm's working records, is worth keeping or even licensing.
Before anything gets wiped
Old servers and backup drives are where a firm's history ends up: the shared drive from 2009, the old accounting database, the project folders nobody has opened in years. When the hardware is replaced, the easiest thing is to throw all of it away. Take an hour to decide first.
Step 1: Find out what's on it
You don't need to open every file. A folder-level list is enough: which departments, which years, which kinds of files (spreadsheets, CAD, PDFs, email archives, database exports), and roughly how much.
Step 2: Keep what you must
Some of it is probably still under a retention requirement: tax and payroll records, employee files, safety logs, industry-specific records. See How long to keep business records. Move those to supported storage with a note of when they can be destroyed.
Step 3: Destroy personal data properly
HR files, payroll exports and customer personal data you no longer need should be deleted securely. When the hardware itself goes, wipe the drives with a proper tool or have them physically destroyed. Simply deleting files isn't enough.
Step 4: Check the rest before you bin it
What's left is usually the firm's working archive: quotes, estimates, orders, work orders, drawings, project files. It may be useful to keep for reference. It may also be worth licensing: AI developers pay owner-led firms for years of exactly this kind of record. See What kinds of business records do AI companies license?
Step 5: Retire the hardware
Wipe or destroy the drives, keep a record of what was done and when, and only then recycle or sell the hardware.
Quick questions
Can I just keep the old server running forever?
You can, but old hardware fails, and unsupported systems are a security risk. It's usually better to move what you need to supported storage and retire the box properly.
Is deleting files enough before recycling a drive?
No. Deleted files can often be recovered. Use a proper wiping tool, or physically destroy the drive, and get a certificate if a recycler does it for you.
What's on an old server that could be valuable?
Usually years of quotes, estimates, project files, drawings, work orders and shared documents. For AI developers, that kind of real working archive is exactly what they license.
Want an honest read on your own records?
Describe what you have in a few lines. I'll tell you whether buyers look for it. No files needed.
Ask for a free fit check You pay nothing · I never touch your files · Nothing happens without your written OK