Even after an old computer system has been decommissioned due to retirement or sale, or even if it’s just no longer usable, the information it once contained will need to be completely eliminated. And it must be removed in such a manner that it cannot be recovered. We have a forensic-grade tool used to wipe out a hard disk drive or solid-state drive (SSD), the same tool we use during our data recovery process. However, instead of recovering the data stored on the device, the wiping function simply writes over each area where data could be stored on the device. Each area (sector) is written to in order to eliminate any possibility of retrieving any previous data. After this step we run a verification check to ensure that no prior data exists within these areas, and issue a certificate. Upon completion of this process, your drive is now blank and ready for reuse. Your original data remains unrecoverable.
We write all drives (to cover every byte), overwrite each drive and then check the results, so that we know there is no recoverable data remaining prior to sending out one single certificate.
Unlike a simple “quick format” or deleting files from a recycle bin, which leaves the deleted files on the drive’s surface until they are manually erased, our method eliminates the ability for someone to recover your data. This is accomplished through a forensic-grade erase cycle that overwrites every addressable sector on the drive, followed by a verification scan to ensure no prior data exists on the drive. Our method uses the exact type of hardware and software we utilise for our recovery services. In fact, the methods we follow meet recognised standards for sanitising storage devices (NIST 800-88). When completed, your drive will report as clean and hold no data whatsoever. No one will be able to recover your data using similar tools and methods.
On a hard drive, you’re replacing the original magnetic data with new information once an overwrite is verified; therefore it’s gone. But there is a problem with SSDs and flash memory (a type of memory): they use controllers to spread the original data throughout unused areas (spare cells) and then simply map over the locations used by the original data. Therefore, if someone does a simple surface wipe of the data, the data will still be located on the SSD or flash memory, but it won’t be visible because of all the remapping going on. This is why when you want to securely erase solid-state drives, you have to do it at the controller level using a secure erase or crypto erase command; this command clears both the logical block address mapping of the drive and the actual location(s) of the data on the drive. The only thing you need to know about each individual piece of equipment is what method you should use to completely destroy the data contained on each device; doing so incorrectly is exactly how ‘wiped’ data ends up on a resold laptop.
The majority of jobs are based on a small number of core requirements. These include: Erasing (and proving) older drives, servers and laptops under GDPR. Reselling, donating or recycling equipment. A business removing materials at the completion of a project. Or, an item that was received for recovery and is now leaving permanently as “dead”. We provide each customer with a certificate of erasure (including serial number, method used, and date) for both their reference and compliance purposes. Since a certified erasure does not render the hard drive unusable, this process can be done at a lower cost and less environmental impact than shredding the media, while the data is every bit as unrecoverable. If you have a requirement to destroy the physical media or shred it, we will direct you to the appropriate resource. This process is essentially the opposite of our forensic recovery process, i.e. two sides of the same coin, on the same bench.
Yes, a verified over-write will replace all of the data on your hard drive (HDD), so that even if someone were to recover the data from the space where it was originally located, they would have no usable information. With solid state drives (SSDs) we use the controller’s secure-erase protocol to securely delete all data stored on the SSD. In both cases, we run a verification test after wiping the drive to ensure the entire drive is wiped clean of any recoverable data prior to issuing a certificate of erasure. Therefore, we can only certify what has been properly verified.
All drives will be certified as being erased, with a certificate of erasure that includes the drive’s serial number; details about how the erase was done; and the date the erase occurred. This is what an auditor for data protection wants to find as evidence if a piece of equipment is being retired.
At times. If the drive can be started up enough to allow a safe and proper wipe and verification process, we will perform this task. However, if the electronics or mechanical components of the drive are so damaged as to prevent us from performing a safe wipe and verification process in-place, we cannot perform an overwrite and therefore physical destruction of the media becomes the honest route instead. Rather than issuing a certificate we can’t stand behind, we will inform you which method we choose to take and why.