Service 01
Audit-proof data erasure with a certificate per serial number
We erase storage media following NIST SP 800-88 — with an engine certified to ISO/IEC 15408 (Common Criteria EAL2+) and checked by ADISA. Every erasure is verified and documented. Anything that cannot be safely erased is physically destroyed.
- HDD · SSD · NVMe · eMMC
- Servers & RAID arrays
- iOS & Android
- On-site erasure available
Formatting is not erasure
A quick format removes directory entries, not data. Even a simple overwrite falls short on modern flash storage: SSDs and NVMe drives hold reserved areas — through wear levelling and over-provisioning — that aren't reachable through normal addressing. Skip them, and data remains in areas that are forensically recoverable.
We therefore use the procedures defined in NIST Special Publication 800-88 for media sanitization, chosen per storage type:
Clear
Overwriting all logically addressable areas. Suitable for magnetic media staying within the same security context.
Purge
Procedures that also reach non-addressable areas: drive-level sanitize commands (block erase, crypto erase), firmware secure-erase, unlocking frozen drives. Our default for SSD, NVMe and eMMC.
Destroy
Physical destruction when a drive is defective, refuses commands, or fails verification.
What matters most is the step after: every erasure run is followed by a verification pass checking, spot-wise or in full, that no residual data patterns are readable. Only that result generates the certificate.
Software we use
Securaze
We erase and diagnose using the Securaze software suite and its asset management for documentation. That's why our certificates aren't spreadsheets — they're generated per device and storage medium from one system.
- ISO/IEC 15408 · Common Criteria EAL2+ — certified erasure engine
- ADISA — product testing against forensic attacks
- NIST SP 800-88 — implemented erasure procedures
- ATTINGO — independent validation by a data recovery lab
Storage types
Which method applies where
| Medium | Standard method | Verification | Fallback |
|---|---|---|---|
| HDD (SATA/SAS) | Purge via secure erase, or Clear with overwrite pattern | Full or spot-check | Physical destruction |
| SSD (SATA) | Purge via block erase / sanitize | Addressable-area check | Chip destruction |
| NVMe | Purge via NVMe format / crypto erase | Post-reset check | Chip destruction |
| eMMC / UFS (mobile) | Purge via vendor commands, factory reset | Device-side check, diagnostic report | Destruction |
| Servers & RAID | Array disbanded, each drive handled individually | Per drive | Individual destruction |
| Defective media | Software erasure not possible | N/A | Physical destruction with evidence |
Erasure at our facility
The standard route: documented collection, erasure and verification at our site, evidence delivered to you.
On-site erasure
When policy requires data not to leave the building: we bring erasure stations and staff, erase in your space, then take the devices.
Media removal
For the highest sensitivity: we remove storage media at handover, destroy them, and recover the device without its storage.
When erasure isn't possible
Physical destruction with its own evidence
A defective drive won't accept erasure commands — yet it remains forensically readable. Such drives never enter recovery. We separate, destroy and log each serial number individually.
- Separate, sealed collection of defective media
- Destruction by deformation, perforation or shredding depending on type
- Log with serial number, method, date and responsible party
- Material then flows to licensed recovery partners
Shredding destroys value. An erased, working drive has market value and a second lifecycle; shredded material only has scrap value. Where erasure is safely possible and verified, it's the better economic and environmental choice — security is proven either way.
Documentation
The evidence package your audit wants to see
Erasure certificate
Per storage medium: method, timestamp, verification result, operator, software version.
Asset list
All assets received, with manufacturer, model, serial number, configuration and status.
Destruction record
For every medium that couldn't be erased — logged individually by serial number.
Discrepancy report
Differences between your asset list and what was actually received, including missing devices.
Questions
Frequently asked
How long does erasing a laptop take?
A purge on a modern SSD finishes in minutes; an overwrite on a magnetic drive can take hours. Since we work in parallel, your project's turnaround depends on volume, not per-unit time. We give you a concrete window in the quote.
Do you erase smartphones and tablets?
Yes. We use the mobile edition of the Securaze suite, including checks for active locks such as activation lock or MDM enrolment. Please deregister devices from your MDM and vendor accounts beforehand — otherwise they stay locked and lose resale value.
Can we be present during erasure?
Yes, either at our facility or on your premises. We schedule this in advance and log attendance in the handover document.