Data Centre Decommissioning Services in Mumbai
By Reboot Monkey Team

Mumbai is India's densest data centre market, concentrating roughly 35 to 40 per cent of the country's total colocation capacity across a corridor that stretches from Airoli and Mahape in Navi Mumbai through to Andheri and the Bandra Kurla Complex within city limits. Every facility upgrade, hardware refresh, and colocation exit in that corridor requires a physical decommissioning team that can enter the data centre floor, safely disconnect and remove equipment, document everything for compliance purposes, and hand the vacated space back to the facility operator in the condition required by the lease agreement.
Reboot Monkey provides exactly that service. We are a vendor-neutral, third-party data centre operations company operating under EDCS Oร, with coverage across 250 cities in 190 countries and a 4-hour on-site response SLA in Mumbai. We do the physical floor work inside any Mumbai colocation facility: rack and cabinet de-installation, structured cabling removal, power circuit handback, cross-connect cancellation coordination, and full asset documentation. We are not an IT Asset Disposition (ITAD) company. We are not a recycler. We are the specialist physical removal layer that works upstream of your ITAD or recycling partner, whoever you choose.
Physical Data Centre Decommissioning vs ITAD: Understanding the Difference
Most enterprises search for 'data centre decommissioning' and find ITAD companies. The two services are related but distinct, and conflating them leads to procurement mistakes.
Physical data centre decommissioning is the work that happens inside the colocation facility before a single piece of hardware leaves the building. It covers controlled power-down sequencing across UPS, PDU, and server layers; photographic and video documentation of rack layouts; cable labelling and removal from live cable management arms and overhead trays; physical de-installation of servers, storage arrays, network switches, and patch panels; asset inventory with serial number verification; and formal facility exit documentation that satisfies the colocation operator's departure checklist. This work requires on-site presence inside the data centre, knowledge of that facility's specific access and safety requirements, and project management to coordinate with the facility operator, your internal IT team, and any downstream ITAD or recycling partner.
ITAD (IT Asset Disposition) is what happens after the equipment has been physically removed from the data centre. It covers data destruction or media sanitisation, asset remarketing or buyback, and routing hardware to CPCB-authorised e-waste recycling facilities in compliance with India's E-Waste (Management) Rules 2022. ITAD companies can take custody of assets and manage their end-of-life. They are not typically staffed or contracted to provide the physical floor team that does the removal inside the colocation cage.
Reboot Monkey fills the physical removal layer. We decommission the hardware from the data centre floor and hand it over, fully documented, to the ITAD or recycling partner of your choice. You are never locked in to a combined decommissioning-and-ITAD bundle that obscures costs or limits your choice of downstream partner.
Mumbai Data Centre Facilities Where Reboot Monkey Operates
Mumbai's major colocation facilities each have distinct access protocols, contractor requirements, and facility exit procedures. Reboot Monkey has operational experience across all major Mumbai sites.
**Equinix MB1 and MB2, Airoli / Navi Mumbai.** Equinix's two verified Mumbai IBX facilities host over 280 networks, with a dense concentration of BFSI tenants whose decommissioning projects require RBI-grade chain-of-custody documentation. Equinix departure procedures at MB1 and MB2 include a written decommissioning notice (typically 30 days in advance per the customer agreement), cage and cabinet vacate checklists, formal cancellation Letters of Authorisation (LOAs) for every cross-connect, power circuit handback confirmation, and a signed departure certificate issued by the Equinix IBX team after premises reinspection. Reboot Monkey manages the full Equinix departure workflow as part of the decommissioning project scope, including liaison with the Equinix IBX customer service team.
**NTT Netmagic NM1 (Mahape) and NM2 (Turbhe), Navi Mumbai.** These are operated by NTT Global Data Centers India under the Netmagic brand. This is not NTT DATA, a separate entity within the NTT Group. NM1 at Mahape is one of Mumbai's oldest and most heavily tenanted facilities, with a strong BFSI concentration and legacy hardware generations that are now reaching end-of-life. NM2 at Turbhe serves the secondary cluster, including STT GDC tenants and mid-market enterprises. Legacy tape media (LTO generations) is commonly encountered during Netmagic decommissioning projects, requiring physical destruction per the NIST 800-88 Rev. 1 Destroy method.
**CtrlS, Andheri, Mumbai.** A Tier IV certified facility within Mumbai city limits, serving a BFSI-heavy tenant base. CtrlS operates stringent contractor approval and access control procedures. Hardware retirement from financial sector tenants at CtrlS frequently requires audit-ready destruction documentation.
**GPX MU1, Bandra Kurla Complex (BKC), Mumbai.** Located in India's premium financial district. GPX's financial sector tenants at BKC require SEBI-aligned change management documentation for hardware retirement, and decommissioning timelines are often coordinated with exchange trading windows.
**Yotta NM1, Panvel, Navi Mumbai.** Yotta's greenfield campus primarily hosts AI/ML and hyperscale workloads. GPU server and high-density compute decommissioning, including NVIDIA DGX and HGX clusters, requires specialist handling. Asset recovery value from GPU racks can be significant, and Reboot Monkey's asset inventory documentation supports your ITAD partner's remarketing assessment.
**Sify Navi Mumbai (Rabale) and STT GDC Mumbai, Turbhe.** Additional Navi Mumbai facilities where Reboot Monkey provides physical decommissioning services, operating under each facility's respective contractor access and safety requirements.
For any colocation facility in Mumbai metro not listed above, contact us. Our coverage extends to all colocation sites in the Greater Mumbai and Navi Mumbai area.
Reboot Monkey's Physical Decommissioning Process
Every Mumbai decommissioning project follows a structured, documented process from initial scoping through to facility handback.
**Phase 1: Project Scoping and Facility Coordination.** We review your existing asset register, cabinet layout diagrams, and colocation agreement to identify departure notice requirements, access procedures, and any facility-specific constraints. We coordinate pre-approval with the colocation operator, confirm contractor badge access for the Reboot Monkey team, and issue a project plan with milestone dates. For Equinix MB1/MB2 projects, we initiate the formal departure notice and cross-connect cancellation LOA process at this stage.
**Phase 2: Pre-Decommissioning Documentation.** On arrival at the facility, the team conducts a full rack-by-rack photographic audit before any cables are touched. Every cable is photographed in situ, labelled, and logged. Every asset is cross-referenced against the serial number inventory. This documentation creates the evidentiary baseline for both the facility handback checklist and the ITAD handoff manifest.
**Phase 3: Controlled Power-Down Sequencing.** Power-down follows the correct sequence: application workloads are shut down or migrated first (coordinated with your IT team), then server-level shutdown, network device shutdown, PDU circuit deactivation, and finally UPS isolation. The 230V/50Hz Indian electrical standard applies across all Mumbai facilities. Power circuit handback is confirmed with the facility operator.
**Phase 4: Physical Cable Removal.** Structured cabling removal is often the most labour-intensive phase of a Mumbai decommissioning project. Legacy facilities such as Netmagic NM1 can accumulate decade-old copper and fibre runs in overhead cable trays that were installed long before the current tenant occupied the space. Reboot Monkey's team removes all cabling from rack cable management arms, overhead trays, and under-floor routes, bundles removed cabling by type for e-waste sorting, and leaves cable trays and conduits clean for the next tenant.
**Phase 5: Hardware De-installation and Asset Inventory.** Servers, storage arrays, network switches, patch panels, KVM units, PDUs, and other rack-mounted hardware are physically de-installed, placed in appropriate anti-static packaging or crates, and logged against the final ITAD handoff manifest with serial numbers, model numbers, and asset tag references. Multi-vendor coverage spans Dell, HPE, Cisco, Juniper, Arista, Supermicro, Lenovo, IBM, and Sun/Oracle legacy systems.
**Phase 6: ITAD Handoff.** Decommissioned hardware is handed over to the ITAD or recycling partner nominated by the client, together with the complete asset manifest and any applicable certificates of destruction. Reboot Monkey does not take asset custody for remarketing, data destruction, or recycling. We deliver the hardware ready for handoff, documented and sorted.
**Phase 7: Facility Exit and Whitespace Restoration.** Vacated racks and cabinets are cleaned, blanking panels replaced, and the cage or suite is inspected against the facility's departure checklist. For Equinix departures, we coordinate the final IBX premises reinspection and obtain the signed departure certificate. Power circuits and cross-connects are formally deactivated. The whitespace is returned in the condition required by the colocation agreement.
Data Destruction to NIST 800-88 Rev. 1
NIST Special Publication 800-88 Revision 1 (published December 2014) is the internationally recognised standard for media sanitisation. It defines three methods of data destruction, each appropriate to different media types and data sensitivity levels. Where Reboot Monkey performs on-site data destruction as part of a decommissioning engagement, all work is conducted to NIST 800-88 Rev. 1.
The three methods are as follows:
| Method | Description | Applicable Media | Post-Sanitisation Usability |
|--------|-------------|-----------------|-----------------------------|
| **Clear** | Logical overwrite using approved software tools. Applies written data to all addressable locations to prevent simple recovery. | Hard disk drives (HDDs), SSDs accessible via standard interfaces | Reusable โ suitable for remarketing or internal redeployment |
| **Purge** | Targeted techniques that apply a more permanent disruption to data storage. Includes cryptographic erase for self-encrypting drives, degaussing for magnetic media, and secure erase commands for SSDs supporting the ATA Secure Erase or NVMe Format command. | HDDs, SSDs, magnetic tape, self-encrypting drives (SEDs) | Reusable in some cases; depends on media type and method applied |
| **Destroy** | Physical destruction that renders the media incapable of data retrieval. Methods include disintegration, shredding, incineration, and melting. For data centre decommissioning, shredding is the standard approach for HDDs, SSDs, and optical media. | Any media type where reuse is not required or residual risk must be eliminated | Not reusable |
For Mumbai decommissioning projects, Reboot Monkey recommends the Destroy method for storage media from BFSI tenants at Equinix MB1/MB2, NTT Netmagic, and CtrlS where RBI audit-grade evidence of destruction is required. Clear or Purge methods are appropriate where hardware is being decommissioned for remarketing or internal redeployment and the data classification of the media permits it. A Certificate of Destruction is issued for every storage device processed, referencing the NIST 800-88 Rev. 1 method applied, the device serial number, and the date and location of destruction.
Note that NIST 800-88 Rev. 1 is the current and only revision. There is no NIST 800-88 Rev. 2. References to 'Rev. 2' in vendor documentation indicate an error.
DPDPA 2023 Compliance for Data Centre Decommissioning
The Digital Personal Data Protection Act 2023 (DPDPA 2023) passed by the Parliament of India in August 2023 imposes obligations on data fiduciaries regarding the erasure of personal data. Section 8 of the DPDPA, specifically Section 8(7), requires that a data fiduciary erase personal data upon withdrawal of consent or once the purpose for which it was collected is no longer served. Personal data stored on servers, storage arrays, and other hardware decommissioned from Mumbai colocation facilities falls squarely within this obligation.
Physical decommissioning of data centre infrastructure is not simply a facilities or logistics exercise when DPDPA applies. The Act requires data fiduciaries to be able to demonstrate erasure of personal data. NIST 800-88 Rev. 1 data destruction, performed on-site with individual device certificates of destruction, creates the audit trail required to satisfy this obligation. Where a data fiduciary relies solely on an ITAD company performing destruction off-site, there is a gap in the chain of custody between the moment hardware leaves the colocation cage and the moment destruction is performed. On-site destruction by Reboot Monkey eliminates that gap.
The Data Protection Board of India had not been constituted as of April 2026, and enforcement under DPDPA is still developing. However, the DPDPA Rules were notified in November 2025 and the full compliance deadline is approaching in 2027. Organisations decommissioning data centre infrastructure in Mumbai should treat DPDPA-aligned destruction documentation as a current requirement, not a future one. Regulators in India's BFSI sector, particularly the Reserve Bank of India and SEBI, have established precedents for data security audit expectations that are consistent with DPDPA obligations.
Reboot Monkey's decommissioning workflow generates DPDPA-defensible documentation: serial-number-level certificates of destruction, photographic evidence of the sanitisation process, and a chain-of-custody record from the point of disconnection inside the data centre to the point of ITAD handoff.
E-Waste Management Rules 2022 and CPCB Compliance
India's E-Waste (Management) Rules 2022, notified under the Environment Protection Act 1986 by the Ministry of Environment, Forest and Climate Change (MoEFCC) and effective from April 2023, supersede the earlier 2016 Rules. These regulations impose Extended Producer Responsibility (EPR) obligations on producers and bulk consumers of electrical and electronic equipment, and require that e-waste be channelled exclusively to recyclers and dismantlers authorised by the Central Pollution Control Board (CPCB).
For a Mumbai enterprise decommissioning data centre hardware, the E-Waste Rules 2022 create a clear compliance requirement: decommissioned servers, storage, networking equipment, and cabling cannot be disposed of through general waste streams. All hardware must be transferred to a CPCB-authorised recycler with appropriate documentation (Form 2 e-waste manifest in the prescribed format).
Reboot Monkey is not a CPCB-authorised e-waste recycler, and we do not hold EPR recycler authorisation. Our role is upstream of recycling: we perform the physical removal from the data centre, inventory the assets, and prepare them for handoff. We coordinate the transfer of decommissioned hardware to the ITAD or CPCB-authorised recycling partner nominated by the client, and we provide the asset-level documentation required for the e-waste manifest. The E-Waste Rules 2022 apply to the full waste stream. Reboot Monkey ensures that the upstream physical removal step is documented in a way that supports your downstream recycler's compliance filing.
For GPU and high-density compute decommissioning at Yotta NM1 in Panvel, CPCB-authorised transporter requirements apply for moving e-waste from that location to a registered facility. Our logistics coordination covers transporter compliance for Mumbai metro decommissioning projects.
These rules are India-specific. They are not equivalent to the EU WEEE Directive or US EPA R2/RIOS standards. Any vendor referencing WEEE or EPA R2 in the context of Mumbai decommissioning is applying a non-applicable foreign standard.
RBI and SEBI Requirements for Mumbai Financial Institutions
Mumbai is India's financial capital and home to the highest concentration of Reserve Bank of India (RBI) and Securities and Exchange Board of India (SEBI) regulated entities in any single city. Banks, NBFCs, payment aggregators, fintech licensees, stockbrokers, and asset managers headquartered or data-concentrated in Mumbai face specific decommissioning compliance requirements that go beyond standard NIST 800-88 procedures.
**RBI Data Localisation and Witnessed Destruction.** The Reserve Bank of India's April 2018 circular on storage of payment system data mandates that all payment system data be stored exclusively in India. When RBI-regulated entities decommission storage hardware that held payment system data, the RBI expects witnessed on-site destruction and formal certificates of destruction that are auditable during RBI inspections. Reboot Monkey performs witnessed destruction engagements for RBI-regulated entities at Mumbai colocation facilities, with a senior Reboot Monkey engineer present throughout the destruction process and available to sign the destruction certificate as witness. The destruction certificate references the specific devices destroyed, the NIST 800-88 Rev. 1 method applied, the date, time, and facility location, and the names of witnesses.
The RBI's data localisation requirement applies specifically to payment system data. It does not extend categorically to all financial data held by RBI-regulated entities, though internal RBI audit expectations for data security are broadly aligned with the spirit of DPDPA obligations.
**SEBI BRSR and Hardware Lifecycle Documentation.** SEBI's Business Responsibility and Sustainability Reporting (BRSR) framework requires listed companies to disclose e-waste management practices as part of their annual reporting obligations. A structured decommissioning process with documented e-waste routing to CPCB-authorised recyclers satisfies the BRSR disclosure requirement for electronic waste generated from business operations. GPX MU1 BKC tenants in the financial district frequently require SEBI-aligned change management documentation for hardware retirement projects.
**CERT-In 2022 Alignment.** India's Computer Emergency Response Team (CERT-In) 2022 directions require covered entities to maintain logs and documentation of IT infrastructure changes. A decommissioning project that generates complete asset manifests, destruction certificates, and photographic documentation satisfies this requirement for the hardware removal phase of an infrastructure change.
Why Vendor-Neutral Matters in Mumbai's Colocation Market
Mumbai's colocation market is operated by a mix of global brands (Equinix, NTT/Netmagic, Iron Mountain), Indian nationals (Yotta, CtrlS, Sify, Nxtra), and Gulf-headquartered operators (STT GDC). Each facility has its own access procedures, contractor pre-approval processes, and departure documentation requirements. Enterprises with infrastructure spread across multiple Mumbai facilities need a decommissioning partner that can operate inside all of them under a single contract and project plan.
Facility operators do not provide physical decommissioning services for tenants exiting their sites. Equinix's Smart Hands service covers operational tasks for active tenants, not the full departure workflow for a colocation exit. ITAD companies may include a physical removal step, but they are primarily focused on asset custody and data destruction. Neither category provides a vendor-neutral, facility-agnostic physical removal specialist.
Reboot Monkey's vendor-neutral positioning means we have no commercial relationship with any Mumbai colocation operator that would bias our recommendations or create conflicts of interest during a facility exit. We coordinate with each operator's IBX or data centre operations team as a neutral contractor acting on behalf of the tenant. If you are decommissioning from Equinix MB1 and NTT Netmagic NM1 simultaneously as part of a consolidation, Reboot Monkey manages both facility workflows under a single project plan.
This model is also how we operate across our network of 250 cities in 190 countries. A multinational enterprise consolidating infrastructure across Mumbai, Singapore, Frankfurt, and New York engages Reboot Monkey once. One contract, one project manager, one set of procedures adapted to each facility's local requirements.
AI Infrastructure and GPU Rack Decommissioning in Mumbai
Mumbai's data centre facilities, particularly Yotta NM1 at Panvel, are handling a new generation of decommissioning challenge: GPU and accelerator hardware refresh. AI hardware refresh cycles have compressed from the traditional five-to-seven-year server lifecycle to eighteen to thirty-six months for GPU racks in production AI/ML environments. Enterprises and Global Capability Centres (GCCs) in Mumbai running NVIDIA DGX, HGX, and third-party GPU clusters are decommissioning their first-generation AI infrastructure to make room for newer architectures.
GPU rack decommissioning requires careful handling. High-density GPU nodes operate at significantly higher thermal loads than standard servers and must be powered down and cooled following the manufacturer's sequence. Liquid cooling loop isolation and drainage applies at facilities running direct liquid cooling (DLC). GPU hardware carries substantially higher residual asset value than commodity server hardware, which makes accurate serial number documentation critical for the ITAD handoff. Reboot Monkey's asset inventory process captures the GPU model, serial number, and cage location for every accelerator removed, creating the manifest your ITAD partner needs to assess remarketing value.
We do not perform asset remarketing or buyback. The GPU rack decommissioning project ends when equipment is handed off, fully documented, to your nominated ITAD partner.
What Reboot Monkey Delivers in Mumbai
Every Mumbai data centre decommissioning engagement with Reboot Monkey covers the following scope. Any element can be expanded or contracted depending on the project requirements.
Project planning and facility coordination, including departure notice management for Equinix MB1/MB2 departures and contractor pre-approval at all Mumbai colocation facilities. Pre-decommissioning asset audit and photographic documentation of rack layouts before any cables are removed. Controlled power-down sequencing across UPS, PDU, server, and network layers, following the 230V/50Hz Indian electrical standard. Structured cabling removal including copper, fibre, and power cables from racks, overhead trays, and under-floor routes, with cabling sorted by type for e-waste separation. Physical hardware de-installation covering servers, storage arrays, network switches, PDUs, patch panels, and rack hardware from all major vendors. Asset inventory with serial number verification and production of the ITAD handoff manifest. On-site data destruction to NIST 800-88 Rev. 1 (Clear, Purge, or Destroy as required), with Certificates of Destruction issued per device. Witnessed destruction for RBI-regulated entities, with a signed destruction certificate meeting RBI audit standards. ITAD and CPCB-authorised recycler handoff coordination, including e-waste manifest support under E-Waste Management Rules 2022. Post-decommissioning cage or suite cleanup, blanking panel replacement, and facility exit documentation. Cross-connect cancellation coordination and power circuit handback confirmation with the colocation operator.
Does Reboot Monkey perform data destruction on decommissioned hardware?
Yes. Where data destruction is included in the project scope, Reboot Monkey performs on-site media sanitisation to NIST 800-88 Rev. 1 using the Clear, Purge, or Destroy method appropriate to the media type and data classification. A Certificate of Destruction is issued for every storage device processed. For RBI-regulated entities, we conduct witnessed destruction with a signed destruction certificate that meets RBI audit standards. However, data destruction is a separate, optional element of a decommissioning engagement. If you have an existing ITAD partner who performs data destruction, we hand hardware off to them after physical removal with the full asset manifest.
Is Reboot Monkey an ITAD company?
No. Reboot Monkey is a physical data centre operations company. We perform the physical removal layer inside colocation facilities: rack disconnection, cabling removal, hardware de-installation, and facility exit documentation. We do not take custody of assets for remarketing, data destruction, or e-waste recycling. We do not hold CPCB/EPR recycler authorisation. We are complementary to ITAD companies, not a replacement for them. You choose your ITAD or recycling partner, and we manage the upstream physical removal step.
Can you decommission hardware at Equinix MB1 and MB2 in Mumbai?
Yes. Reboot Monkey has operational experience at Equinix MB1 and MB2 in Navi Mumbai and manages the full Equinix departure workflow, including departure notice coordination, cross-connect cancellation LOAs, power circuit handback, and the final IBX premises reinspection and departure certificate. MB1 and MB2 are the only verified Equinix Mumbai IBX facilities as of Q1 2026.
What does DPDPA 2023 require for data centre decommissioning?
The Digital Personal Data Protection Act 2023 requires data fiduciaries to erase personal data when the purpose for which it was collected is no longer served, or upon withdrawal of consent (Section 8(7)). For enterprises decommissioning data centre hardware in Mumbai, this means demonstrating that personal data stored on decommissioned servers and storage has been destroyed. On-site NIST 800-88 Rev. 1 destruction with serial-number-level Certificates of Destruction creates the audit trail required to satisfy this obligation. Reboot Monkey's decommissioning documentation is structured to support DPDPA compliance. Full enforcement timelines under DPDPA are still developing; contact us for current guidance.
How does Reboot Monkey handle e-waste compliance under India's E-Waste Management Rules 2022?
India's E-Waste (Management) Rules 2022, effective April 2023, require that all electronic waste be routed to CPCB-authorised recyclers or dismantlers. Reboot Monkey is not a CPCB-authorised recycler. Our role is the physical removal and documentation step before handoff. We provide the asset-level documentation needed to support the e-waste manifest (Form 2) required by the Rules, and we coordinate the transfer of decommissioned hardware to the CPCB-authorised ITAD or recycling partner you nominate. We do not apply EU WEEE or US EPA R2 standards, which are not applicable in India.
Does Reboot Monkey provide witnessed destruction for RBI-regulated entities?
Yes. For banks, NBFCs, payment aggregators, and other RBI-regulated entities requiring witnessed on-site destruction, Reboot Monkey provides a witnessed destruction engagement where a senior Reboot Monkey engineer supervises the destruction process from start to finish and co-signs the destruction certificate. The certificate references device serial numbers, the NIST 800-88 Rev. 1 method applied, the date, time, and Mumbai facility location, and the names of witnesses. This format is designed to satisfy RBI inspection requirements for data security documentation.
What is the minimum notice period to start a Mumbai decommissioning project?
Reboot Monkey operates a 4-hour on-site SLA in Mumbai for urgent field support. For a planned full-facility decommissioning project, we recommend a minimum of two to three weeks of lead time to coordinate facility access approvals, contractor pre-authorisation, departure notice filing (Equinix requires 30 days in most cases), and project planning. Complex multi-rack or multi-facility projects benefit from four to six weeks of lead time. Contact us at +372 6347 400 to discuss your timeline.