Data security, method by method
We name the NIST SP 800-88 technique used on each type of media, how it is verified, and what happens when verification fails.
Methods by media type
| Media | When the device will be resold | When destruction is required |
|---|---|---|
| Hard disk drives (HDD) | Purge: full overwrite with verification | Shred |
| SATA SSD | Purge: ATA Sanitize (block or crypto erase), verified | Shred to fine particle size |
| NVMe SSD | Purge: NVMe Sanitize or Format with crypto erase, verified | Shred to fine particle size |
| Self-encrypting drives | Purge: cryptographic erase, verified | Shred |
| Phones and tablets | Purge: cryptographic erase via factory reset, verified | Shred |
| Network devices | Clear: configuration erase and factory reset | Destroy storage module |
| Tapes and removable media | Not resold | Shred |
Modern SSD and NVMe purge techniques follow IEEE 2883 guidance. Any drive that fails verification is physically destroyed and recorded as such.
Controls around the method
- Serial-number logging at intake, before any processing
- Drive-to-host pairing when drives are removed from computers or servers
- Sealed containers for drives in transit, seal numbers on the pickup manifest
- Per-drive verification result stored with the serial
- Failed or unverifiable media diverted to physical destruction
- No equipment leaves for resale without a recorded sanitization result
See the paperwork before you commit
Our certificate format is public, so you can check that it meets your audit requirements before you send us anything.
Tell us what you're retiring.
Get a written, itemized quote in one business day.