Equipment Dealer Data Rooms: One Room per Deal, at Volume (2026)

Last updated: August 2026

I'm Sean Yu, co-founder of Peony. Before Peony I worked on the deal side, and I keep meeting a version of the same problem in a corner of the market that doesn't think of itself as doing deals at all: a used-equipment dealer or broker with dozens of machines in inventory — refurbished MRIs, CTs, a cath lab, a warehouse of industrial gear — trying to sell each one to a serious buyer while a rival broker fishes for the exact same pricing and serial numbers. A buyer half a world away decides whether to wire six figures for a machine they've never stood next to, based entirely on a pack of service records and condition evidence. And the whole thing runs over email.

This guide is the equipment dealer data room — the intermediary's view of a workflow its sibling covers from the other side. The medical equipment sale data room guide owns the hospital's disposition decision: whether to trade in, broker, or auction a fleet it's replacing, the write-down audit trail, PHI wiped from the console. That post is the seller. This one is the dealer, broker, or marketplace operator running the pipeline — the party with many listings moving at once, each needing its own confidential pack shared with qualified buyers only. If you're the hospital deciding what to do with three scanners, read the sibling. If you're the dealer remarketing those scanners and forty others, you're in the right place. I run Peony, a data room company, so I have a point of view — but the argument below stands on how this market actually works, not on the software.

Quick answer. At dealer volume the room model flips. You don't run one big deal room; you run many small rooms, one per listing — cloned from a template and live the same day a machine hits inventory, killed the day it sells. The per-deal pack (service history, condition evidence, sanitization certificate, logistics, export docs) is what sells the machine to a serious buyer, and it's also what rival brokers fish for — so it goes behind an NDA gate, served view-only and watermarked, with an engagement log that tells you who's a real buyer and who's just skimming your pricing. When the machine sells, you revoke access and stale spec sheets stop circulating. The economics only work on flat, unlimited-room pricing — per-deal VDR pricing is absurd across 20 concurrent sub-$200K listings. For a single throwaway ultrasound, a shared link is fine; the room earns its keep the moment serials, pricing, and confidential condition reports are in play.

---

Why does dealer volume break the one-room model?

Because a dealer isn't running one deal — they're running twenty at once, each with a different buyer pool, so the "one big deal room" that suits a bank suits a dealer not at all. The mental model most people carry for a data room comes from M&A: a single large transaction, one carefully assembled room, a handful of vetted bidders, a fee folded into a multi-million-dollar deal. A used-equipment dealer's reality is the inverse — dozens of machines in inventory, tickets typically under $200K, buyers largely international and unknown in advance, and a need to open and close sales continuously rather than mount one set-piece process a year.

The market underneath this is real and growing. Per Precedence Research, the global refurbished medical imaging devices market was about USD 6.55 billion in 2025, rising to roughly USD 7.15 billion in 2026 and a projected USD 15.71 billion by 2035, at a CAGR of about 9.14% — with North America holding nearly half. That's imaging alone; the same operator pattern generalizes to every dealer moving used machinery, industrial equipment, or fleet assets. And yet search "sell used MRI" or "used equipment broker" and you find dealers, refurbishers, and marketplaces — every one a channel to move the box, none framing the sale as the controlled information exchange it is.

Flip the model and everything changes. Instead of one room, you need a room factory: a template you clone per listing, live the same day, killed at sale. Instead of a fee per deal, you need flat pricing that doesn't meter you into oblivion across twenty concurrent rooms. Instead of vetting a known short list, you're qualifying an anonymous global pool on the fly. The rest of this guide walks that flipped model row by row.

What goes in a per-deal equipment pack?

One folder per machine, built around the single question every buyer asks: how much useful life is left, and can you prove it? The pack is the product you're actually selling — the machine is just what it points at. At dealer volume, the discipline is a repeatable structure you can clone in minutes, so every listing carries the same skeleton and you're only dropping in the machine-specific evidence. Here's the map, using used imaging as the worked example and generalizing to any dealer category.

The condition-evidence row is where a deal is won or lost, and it rewards a specific move: serve the machine's own reading, not your assertion. For a CT, photograph the console screen showing tube scan-seconds or shot count directly, alongside the serial and software version — the X-ray tube is a consumable, and a high-mileage tube can mean a large check shortly after install. For an MRI, list every RF coil by model with condition photos and include the helium and cold-head readings. Delivered view-only and watermarked, these files let a qualified buyer verify the numbers without being able to edit or re-circulate them — which turns "the seller says the tube is low-mileage" into documented evidence a buyer will actually price against.

This matters more for an independent dealer than for anyone else. Every major imaging OEM now runs a certified-refurbishment program — GE HealthCare's GoldSeal, Siemens Healthineers' ecoline, and Philips' Diamond Select — each refurbishing to ISO 13485-certified OEM specs with a factory warranty. That's the competitive backdrop an independent sells against. You can't out-brand the OEM's certification, but you can out-document it: the pack is the independent's certification story, complete, buyer-inspectable evidence in place of an OEM badge. Transparency is the differentiator, and the room is how you deliver it credibly.

How does the NDA gate keep rival brokers out of the pack?

By making every viewer accept an NDA and prove identity before a single sensitive file loads — so the pack that sells the machine can't be quietly fished by a competitor. This is the central tension of a dealer's whole operation. The same pack that convinces a serious buyer is the pack a rival broker wants: your pricing, your serials, your service history, your source. Email that pack and you've handed a copy to whoever forwards it. The room replaces the emailed copy with a gated view.

The pattern is tiered access. Publish teaser specs openly — modality, model, manufacture year, headline condition — because you want the widest possible market to know the machine exists. But hold the full pack behind an NDA the buyer accepts on the way in, logged automatically. No signature, no records. Within the gate, tier further: the most sensitive service logs and pricing served view-only so the files never download, and stamped with per-viewer dynamic watermarks so any leaked screenshot carries the identity of whoever leaked it. This is the same NDA-gated, large-file workflow that gigabyte-scale service records and site drawings need, and the same dynamic-watermarking logic that makes a leaked maintenance record traceable back to its source.

Here's the part that makes the NDA more than a formality: the industry already treats confidentiality as its own norm. IAMERS — the International Association of Medical Equipment Remarketers and Servicers, with members in 15 countries — binds its members under a written Code of Ethics whose Article II pledges to regard all client business information as confidential, with the preamble stating those principles "shall remain paramount to all considerations of profit or gain." A click-through NDA on your room isn't an imposition on the market; it operationalizes what the trade association already pledges. When a counterparty balks at signing, they're balking at the industry's own stated standard — which itself tells you who you're dealing with.

For the mechanics of building the gate — click-through NDA, tiered folders, permission groups — the how-to-set-up-a-data-room guide walks the setup, and the require-an-NDA-before-the-deck workflow covers the identical mechanic pointed at a pitch deck.

How do engagement analytics tell serious buyers from tire-kickers?

The access log shows who opened the room, which files they viewed, how long they lingered, and how often they came back — and serious buyers leave a fingerprint tire-kickers don't. This is the quiet superpower of running deals in a room instead of an inbox: the exchange instruments itself, timestamping every view, download, and NDA acceptance against a named viewer.

A real buyer opens the service history, lingers on the tube-usage or coil-inventory page — the exact document governing their remaining-life estimate — pulls what they're allowed to, and returns more than once as they build an offer. A fishing competitor logs in, skims the pricing sheet, and leaves. Per-document analytics turn that behavior into a triage list: you spend your follow-up on the counterparty who read the maintenance record twice, not the one who bounced off the landing page. The data-room analytics guide to spotting serious buyers goes deep on these signals, and everything there applies to an equipment pipeline.

The signal cuts both ways, which is its own leak control. A rival broker who logs in under a thin pretext and only ever opens your pricing sheet is telling you precisely what they're after — and because they accepted a watermarked, logged NDA to get in, you know exactly who did it. At dealer volume, where you can't personally shepherd every conversation, the log is the qualification engine that lets a three-person team run twenty concurrent listings without losing track of who's real.

Why is flat-rate pricing the only model that fits a dealer's volume?

Because per-deal VDR pricing was built for one big transaction a year, and a dealer runs twenty small ones at once — so a per-deal fee on every sub-$200K machine eats the margin the machine was supposed to earn. This is the economics anchor of the whole post, and it's where the dealer model most sharply diverges from the M&A model the VDR industry was built to serve.

Per-deal or per-page VDR pricing makes sense when you close a handful of very large transactions and the room fee is a rounding error against a multi-million-dollar deal. Point that same pricing at a dealer's pipeline — 20-plus concurrent listings, each ticket under $200K — and every listing carries its own fee, which stops being a rounding error and starts competing with your margin on the machine. The only structure that works is a flat subscription covering unlimited concurrent rooms, so opening the twenty-first listing costs you nothing extra.

That's how Peony is priced. The Business plan is $30/user/month and the Data Room plan is $52/user/month (our most popular), both with unlimited data rooms and unlimited free viewers. For a three-person sales team, that's $156/month on the Data Room plan for the full feature set — per-folder permissions, view-only and watermarking, and the engagement log across every listing — well under a $250 budget. Critically, your buyers view for free: a wide international bidder pool never inflates the bill, because you pay for the seats that administer rooms, not the people looking at them. The affordable virtual data rooms guide lays out the broader low-cost field; the point for a dealer is the pricing model, not the sticker. Peony is used by 6,800+ customers, and the dealer use case runs on the same machinery as our M&A and diligence users, pointed at a machine instead of a company.

The kill step is the other half of the economics. Because the files are served from the room rather than downloaded, when a machine sells you revoke access in one click and the pack goes dark for every losing bidder — no stale spec sheet circulating in a dozen inboxes, no last quarter's pricing resurfacing in a competitor's hands. Rooms open same-day and close at sale, and neither costs you anything on a flat plan. That open-and-kill cadence is only affordable when creating and destroying rooms is trivial and unmetered.

It's worth setting the room fee against the deal economics it sits inside. A dealer's private sales run on a commission out of proceeds — there's no single published rate, and anyone quoting you one canonical broker percentage is guessing. The one hard, published number in the channel is auction economics: Centurion Service Group's medical-equipment auction Terms of Sale state a 20% buyer's premium on the hammer price, with lots sold as-is / where-is and payment due within three business days. Whatever channel you run, the room cost is a rounding error against that premium, the commission, the de-install, and the shipping — which is exactly why metering the room per deal is the wrong place to economize.

Where do PHI and sanitization records fit in the dealer's pack?

They belong in the per-deal pack as closing artifacts that de-risk the buyer and defend your listing — but the party who performed the wipe owns the HIPAA determination, and the full workflow lives in the hospital-seller guide. For used medical imaging specifically, this is not optional detail. Imaging consoles and workstations are networked boxes with hard drives, and they retain prior patient studies; a console changing hands is electronic media that has to be sanitized before it moves.

The standard is NIST SP 800-88 Rev. 1, "Guidelines for Media Sanitization," which defines the tiered Clear / Purge / Destroy framework HHS/OCR points to for disposing of PHI-bearing media. And the failure mode is a settled enforcement action, not a hypothetical: Affinity Health Plan paid $1,215,780 to HHS/OCR after returning leased photocopiers whose hard drives still held PHI for roughly 344,579 individuals. An imaging console is the identical risk with richer data. One subtlety even at the dealer level: the DICOM standard's PS3.15 warns, verbatim, that "de-identification of the Attributes does not imply de-identification of the Information Object" — scrubbing headers doesn't fully de-identify a study, so a real wipe is a real wipe, not a reformat.

As the dealer or broker, you want the certificate of sanitization in the machine's folder because it de-risks the buyer and strengthens your listing — a provably-wiped console moves faster than one with an open question hanging over it. But you're usually not the party who performed the wipe (that's the selling hospital), and not the party who owns the HIPAA call. So route the depth: for the complete sanitization workflow — Clear/Purge/Destroy tier selection, DICOM header caveats, and gating the buyer's final payment on the certificate as a closing condition — send it to the medical-equipment-sale-data-room guide, which owns that decision from the seller's side. Your job in the pack is to carry the artifact, not to make the determination.

One more line governs what a dealer can honestly say about a used device. The FDA's 2024 final guidance on the remanufacturing of medical devices draws a line between servicing — returning a device to the OEM's original specs — and remanufacturing, which significantly changes a device's safety or performance specs or intended use. Servicers generally aren't subject to FDA manufacturer requirements; an entity that remanufactures is treated as a manufacturer, with registration, listing (21 CFR Part 807), and quality-system obligations. A buyer deciding what they can legally do with a unit wants your service-versus-remanufacturing provenance in writing — one more reason the service history sits at the center of the pack.

What export paperwork does a cross-border equipment sale need?

The export packet — commercial invoice, packing list, and any required certificate — lives in the same per-deal room behind the NDA, so the buyer and freight forwarder pull from one controlled source, and you verify the destination's import rules before you ship. Used-equipment demand is genuinely global, so cross-border is the norm rather than the exception, and it adds a regulatory layer that can strand a shipment if you skip it.

The one canon distinction to get right: a device that's legally marketed in the U.S. can generally be exported, and FDA can issue a Certificate to Foreign Government (CFG) attesting that the device may be legally marketed here and complies with the FD&C Act. Do not conflate that with a Certificate of Exportability under FD&C Act 801(e) — that's the path for devices that may not be legally marketed in the U.S. For legitimately used, still-legally-marketed imaging systems, the CFG is the relevant document. Because destination-country import rules vary and can be absolute, confirm the buyer's market accepts the unit before you commit to ship. The Canada-specific data-room guide is a useful companion if your flow runs north; the principle — one gated packet, one source of truth — holds for any border.

Where does a dealer's room end and a marketplace platform begin?

The room is the confidential-pack layer; it is not a marketplace. If your job is public listings, buyer discovery, payments, and shipping logistics, that's a marketplace platform's lane — Peony sits alongside it, holding the private pack a serious buyer sees after they raise their hand. I'll be direct about where I'm not the answer, because the honest framing and the useful one are the same.

A marketplace platform (DOTmed and its peers in medical imaging; the listing-and-transaction platforms in other equipment categories) owns the top and bottom of the funnel: the public catalog where buyers discover machines, the payment rails, escrow in some cases, and shipping logistics. That's a genuinely different product from a data room. If what you need is a storefront and a checkout, you need a marketplace, not me — running public listings out of a data room would be as wrong as running confidential diligence out of a public listing.

Where the room fits is the confidential middle: the moment a buyer moves from a public teaser to a real prospect who needs the full pack — serials, pricing, service history, sanitization certificate, export docs — under NDA. That exchange belongs in a permissioned, watermarked, logged room you open per deal and kill at sale, not a public listing or an email thread. So the clean architecture for a dealer is both: a marketplace for discovery and transaction, a room for the confidential pack that turns a browser into a buyer. Peony is deliberately the second layer, and it plays well next to the first. If you're weighing a data room against other tools for the document-exchange job, the best-data-rooms-for-M&A comparison frames the field and the due-diligence examples library shows the pack pattern across deal types.

Putting it together

The equipment world sells machines; the discipline that actually closes the sale is running the pack. At a dealer's volume that pack multiplies — not one big deal room but many small ones, each cloned in minutes, live the same day a machine lists, killed the day it sells. The pack is what convinces a serious buyer wiring six figures for a machine they've never touched, and it's the same pack a rival broker fishes for — so it goes behind an NDA gate the industry's own Code of Ethics already anticipates, served view-only and watermarked, with an engagement log that separates the buyer who read the service history twice from the competitor who skimmed your pricing. Run that over email and you leak value at every seam. Run it in a room, on flat pricing with unlimited concurrent deals, and the whole pipeline gets tighter on every axis.

The hospital selling three scanners has one decision and one audit trail to produce — that's the sibling guide. The dealer remarketing those scanners and forty others has a pipeline to run, and the pipeline is an information problem the industry currently solves with an inbox. It doesn't have to be. With 6,800+ customers — and $26.3B in client assets running through the platform — already using this exact machinery for deals, the tooling to run one room per listing at volume already exists. The only thing missing was someone framing the dealer's pipeline as the confidential-exchange problem it's always been.

Related resources

• Medical equipment sale data room — the hospital-seller sibling: fleet disposition, PHI wiped from the console, and the write-down audit trail
• Imaging center M&A data room — when you're selling the business that owns the scanners, not the scanners themselves
• Medical device M&A data room — the diligence room for buying or selling a device company
• Affordable virtual data rooms — the low-cost field and why the pricing model (not the sticker) is what matters at dealer volume
• How to set up a data room — the step-by-step build, including the NDA gate and permission groups you'll clone per listing
• Data room analytics: spotting serious buyers — reading the engagement log to triage real buyers from tire-kickers
• Large data room with NDA gates — the NDA-gated, large-file workflow that gigabyte-scale service records need
• Dynamic watermarking explained — how per-viewer watermarks make a leaked service log traceable to its source

Frequently asked questions

We close dozens of small equipment deals a year — how do we set up a separate data room for each deal, fast?

Use a tool where a new room is a template you clone in minutes, not a project you provision. The dealer model is many small rooms, one per listing — so the setup cost per room has to round to zero. Build one master pack structure (identity, service history, condition evidence, sanitization cert, logistics, export docs), save it as a template, and stamp a fresh copy the moment a machine hits inventory. Drop the specific service logs and photos in, set the NDA gate, invite qualified buyers, and it's live the same day. When the machine sells, you archive or revoke the whole room in one click. The economics only work if creating and killing rooms is trivial and unmetered — which is the whole reason flat, unlimited-room pricing beats per-deal VDR pricing at dealer volume.

Is per-deal VDR pricing ever worth it for a dealer running many small transactions?

Almost never. Per-deal VDR pricing is built for the investment-bank model — one large transaction, a big fee folded into a multi-million-dollar deal. A dealer running 20-plus concurrent listings under $200K each would pay a per-deal or per-page rate on every one, and the room cost would eat the margin on a sub-$200K machine. The math only works if a single flat subscription covers unlimited concurrent rooms. Per-deal pricing is worth it when you run a handful of very large transactions a year and the room fee is a rounding error against the deal size; it's actively wrong for a high-volume, low-ticket pipeline. Model your own numbers: monthly rooms times the per-deal fee versus one flat subscription, and the flat plan wins by a wide margin at volume.

What should a flat-rate data room cost for a 3-person sales team — is under $250/month realistic?

Yes, comfortably. Peony's Business plan is $30/user/month and the Data Room plan is $52/user/month, both with unlimited data rooms and unlimited free viewers. Three seats on the Data Room plan is $156/month — well under $250 — and that covers per-folder permissions, view-only and watermarking, and the full engagement log across every concurrent listing. Because viewers (your prospective buyers) are free and unlimited, a wide bidder pool never inflates the bill. Compare that to per-deal VDR pricing, where each of 20 concurrent listings would carry its own fee, and the flat model is the only one that fits a dealer's volume. Price the seats your team actually needs to administer rooms; the buyers looking at them cost nothing.

Rival brokers keep getting our pricing and serial numbers — how do we lock the pack down?

Stop emailing PDF packs and serve the pack from a permissioned room instead. An emailed PDF is a copy you no longer control — it forwards to a competitor in one click, and your serials, pricing, and service history travel with it. A room gives you four controls email can't: an NDA the viewer accepts before anything loads, view-only rendering so the sensitive files never download, per-viewer dynamic watermarks that stamp each page with the viewer's identity so any leaked screenshot is traceable, and an access log showing exactly who opened what. Serve teaser specs openly to attract the market, but hold serials, pricing, and condition detail behind the gate. The pack is what sells the machine to a serious buyer and also what a rival broker fishes for — so it belongs behind a lock, not in an inbox.

How do we revoke access to spec sheets the day a machine sells, so stale documents stop circulating?

Kill the room at sale — revoke access in one click and the pack goes dark for everyone who had it. This is the second half of the per-deal model: rooms are opened same-day when a machine lists and closed the day it sells. Because the files are served from the room rather than downloaded, revoking access means the losing bidders can no longer open the spec sheet, the pricing, or the service history — the documents stop circulating instead of living forever in a dozen inboxes. View-only rendering is what makes this possible: if you'd emailed the PDF, revocation would be meaningless because the copies already left. Archive the room for your own records, and the audit log stays intact even after buyer access is cut.

How can we tell which buyer actually reviewed the service history — who's serious and who's fishing?

Read the engagement log: it shows who opened the room, which files they viewed, how long they spent, and how often they returned. Serious buyers behave differently from tire-kickers. A real buyer opens the service history, lingers on the tube-usage or coil-inventory page, downloads what they're allowed to, and comes back more than once. A fishing competitor logs in, skims the pricing, and leaves. Per-document analytics turn that behavior into a triage list — you spend your follow-up time on the counterparty who read the maintenance record twice, not the one who bounced off the landing page. It also flags the reverse: a rival broker who only ever looks at your pricing sheet is telling you exactly what they're after. The log is your qualification engine.

Should we require an NDA before a buyer sees serial numbers and condition reports?

Yes — the NDA gate is your first qualification step and the industry already treats confidentiality as a norm. IAMERS, the trade association for medical-equipment remarketers, binds its members under a Code of Ethics whose Article II pledges to regard all client business information as confidential; a click-through NDA on the room operationalizes exactly that pledge. Publish teaser specs (modality, model, year, headline condition) openly to attract the market, but hold serials, pricing, and detailed condition reports behind an NDA the buyer accepts on the way in, logged automatically. No signature, no records. For an unfamiliar counterparty — and a lot of used-equipment demand is international and unknown to you in advance — the gate is how you turn an anonymous pool into a qualified one without slowing the serious bidders down.

Where do the PHI-sanitization certificate and NIST 800-88 records fit in a used-imaging buyer pack?

They belong in the pack as closing artifacts, and the deep how-to lives in the hospital-seller guide. For used imaging specifically, consoles and workstations retain prior patient studies, so a drive must be sanitized to the NIST SP 800-88 Rev. 1 standard and the certificate of sanitization kept on file — the failure mode is real, and Affinity Health Plan paid $1,215,780 to HHS/OCR after returning photocopiers whose drives still held PHI. As the dealer or broker, you want that certificate in the per-deal pack because it de-risks the buyer and defends your listing, but the party who performed the wipe (usually the selling hospital) owns the HIPAA determination. For the full sanitization workflow — DICOM header caveats, Clear/Purge/Destroy tiers, certificate as a closing condition — route to the medical-equipment-sale-data-room guide rather than re-running it here.

Is DocSend, Dropbox, or Google Drive enough for equipment deal documents, or do we need a real data room?

For a single low-value listing, a shared link is fine; for a real pipeline with NDA gates and revocation, you want a data room. Dropbox and Google Drive share files but don't gate access behind an NDA, don't watermark per viewer, and don't cleanly revoke a losing bidder's access once a machine sells. A document-tracking tool gets you view analytics but isn't built for one-room-per-deal at volume with per-folder permissions. The dealer's need is specific: clone a room per listing, gate it, watch engagement, kill it at sale — across dozens of concurrent deals on flat pricing. That's a data room's job. Use a plain shared link for the throwaway ultrasound; use a room the moment serials, pricing, and confidential condition reports are in play and rival brokers are fishing.

How do we share deinstallation, rigging, and export paperwork with an overseas buyer securely?

Put the logistics and export packet in the same per-deal room, gated behind the NDA, so the buyer and freight forwarder pull from one controlled source. For a cross-border sale that means the commercial invoice, packing list, rigging and site-access notes, and any export certificate all live in the machine's folder. A device that's legally marketed in the U.S. can generally be exported, and FDA can issue a Certificate to Foreign Government (CFG) attesting to that legally-marketed status — don't confuse it with a Certificate of Exportability under FD&C Act 801(e), which is the path for devices not legally marketed here. Destination-country import rules vary and can be absolute, so verify the buyer's market before you commit to ship. Serving the packet from the room keeps one authoritative copy and an access log of who pulled what.

---

About the author: Sean Yu is the co-founder of Peony, the data room platform used by 6,800+ customers across M&A, fundraising, and investment workflows. Before Peony, Sean spent his career on the deal side — M&A at Nomura, early-stage VC at Backed VC, and growth-equity / secondaries at Target Global — running and supporting sell-side, growth, and LP-fundraising processes across software, healthcare, and industrials in North America and Europe. He studied Biomedical Engineering at Imperial College London on a full scholarship and graduated with first-class standing before dropping out to build companies. Sean is also a co-founder of Gingercontrol, an AI-native trade-compliance platform that raised $2.1M. He advises a SaaS company at $20M ARR and Lucida Capital, a $35M AUM hedge fund and market maker. Contact: sean@peony.ink • LinkedIn.

Sources

• Precedence Research — Refurbished Medical Imaging Devices Market ($6.55B in 2025, ~9.14% CAGR)
• IAMERS — International Association of Medical Equipment Remarketers and Servicers (members in 15 countries)
• IAMERS — Code of Ethics (Article II confidentiality of client business information)
• GE HealthCare — GoldSeal certified-refurbishment program
• Siemens Healthineers — ecoline certified-refurbishment program
• Philips — Diamond Select certified-refurbishment program
• FDA — Remanufacturing of Medical Devices, final guidance (May 10, 2024), via Federal Register
• FDA — Types of Export Certificates (Certificate to Foreign Government)
• NIST — Special Publication 800-88 Rev. 1, Guidelines for Media Sanitization (official PDF)
• NEMA/DICOM — PS3.15 Annex E, Attribute Confidentiality Profiles
• HHS OCR — Health Plan (Affinity) Photocopier Breach Case ($1,215,780 settlement)
• Centurion Service Group — published medical-equipment auction Terms of Sale (20% buyer's premium, as-is/where-is)