(440) 488-5483

Hard drive data destruction you can document

What actually happens to your data? Here is the honest, unglamorous version. This is the part of the job that matters most, so it is worth explaining properly rather than hiding behind a logo.

The standard we follow

NIST SP 800-88, on every drive, before anything else

NIST Special Publication 800-88 is the federal guideline for media sanitization. It is the document the rest of the industry points at, and it defines three levels: Clear, Purge, and Destroy.

We sanitize to Purge as the default. In practice that means issuing the drive's own firmware-level secure erase or cryptographic erase command — the method the drive manufacturer built for exactly this purpose — and then verifying the result. It is more thorough than a format, more thorough than deleting files, and more thorough than reinstalling Windows, all three of which leave recoverable data behind.

Where a drive will not accept a sanitize command, is failing, or is old enough that we do not trust the firmware, we do not gamble on it. That drive gets physically destroyed instead of resold, and the certificate says so.

The sequence

  1. Serials logged before we leave your building

    Every device with storage in it gets recorded on site. This is the step that makes the certificate meaningful — the chain starts at your office, not at our bench.

  2. Drives pulled and quarantined at intake

    Before a machine gets cleaned, tested, or thought about, its drive comes out and goes into a controlled queue. Nothing gets refurbished with a previous owner's data still in it.

  3. Sanitized and verified

    Purge-level sanitization, then a verification pass. Result recorded against the serial number. A drive that fails is pulled from the resale path entirely.

  4. Certificate issued

    You get a Certificate of Data Sanitization listing every serial, the method applied, and the outcome. Typically two to five days after pickup.

If you would rather nothing survives: tell us at pickup and we will physically destroy the drives instead of sanitizing them, at no extra cost. Some offices prefer this for anything that touched financial or patient records, and it is a completely reasonable instinct. You lose nothing by asking — a destroyed drive costs us a few dollars of resale value, not the pickup.

Certificate of Data Sanitization
Client
Sample Law Office
Location
Painesville, OH
Collected
2026-09-14
Completed
2026-09-17
Method
NIST SP 800-88 Purge
Devices
9
SN 7XQ4L92Sanitized
SN 3JK8P41Sanitized
SN 9WM2C07Sanitized
SN 5RT6H88Sanitized
SN 2BN9X13Destroyed
SN 8LF3V56Sanitized
SN 4CD7Z20Sanitized
SN 6HG1Q84Destroyed
SN 1PS5N39Sanitized

Sample document. Yours lists your actual devices and outcomes.

Being straight with you

We are a small local operation, not an R2 or NAID certified facility. Those certifications cost tens of thousands of dollars a year and exist to serve enterprise contracts.

What we offer instead is a documented process, a named person who did the work, and a certificate you can hold up. If your compliance requirements specifically demand a certified vendor, you should use one — and we will happily tell you who is nearby.

Questions worth asking anyone

Not just us — ask whoever you hire

Is deleting files or reformatting enough?

No. Deleting a file removes the pointer to it, not the data. A quick format does much the same. Both leave the contents recoverable with free software, which is why the standards exist and why "we wiped it" is not a meaningful claim on its own.

What about drives that are already dead?

A drive that will not spin up or respond can still hold readable platters. Those cannot be sanitized by command, so we destroy them physically — loose drives are on the list of equipment we accept too. If a vendor tells you a dead drive was "wiped," ask how.

Do you sanitize solid state drives differently?

Yes. Overwriting an SSD does not reliably reach every cell because of how wear-leveling works. SSDs get a firmware-level secure erase or cryptographic erase instead, which is the method NIST specifies for that media type.

What about phones, tablets, and copiers?

Phones and tablets get a factory reset with encryption enabled, which is the accepted approach for those devices. Copiers and multifunction printers often contain a hard drive that people forget about entirely — if you are retiring one, mention it when you schedule a pickup, because that drive is frequently the biggest exposure in the room.

How long do you keep the certificate on file?

Indefinitely. If you lose your copy in three years, email us and we will resend it.

Have equipment that needs to go away properly?

Free pickup for Lake County businesses with five or more devices. Certificate included.

Schedule a free pickup Call (440) 488-5483