Secure Every Device From Retirement to Resale

Data erasure, data wiping, and data sanitization are closely related terms that are often used interchangeably — but they have subtle distinctions. Data sanitization is the broadest term, referring to any process that permanently destroys data: this includes software-based overwriting, cryptographic erasure, degaussing, and physical destruction. Data erasure and data wiping specifically refer to the software-based approach, where a program writes new patterns over all sectors of a storage device and then verifies that no original data remains. Data deletion, by contrast, only removes a file's directory pointer — the actual data stays on the drive and can be recovered with widely available tools. For regulatory compliance under GDPR, HIPAA, NIST 800-88, and PCI DSS, organisations need verified, documented sanitization — not simple deletion. D-Secure's erasure software supports multiple sanitization categories (Clear, Purge) as defined by NIST 800-88 and produces verifiable certificates for each operation.

D-Secure Drive Eraser applies the NIST SP 800-88 Clear and Purge methods. NIST does not certify or approve erasure products; D-Secure's methods follow NIST SP 800-88 guidance. Applying both categories within a single platform means that IT teams, ITAD operators, and public-sector teams can choose the right method for HDDs, SSDs and NVMe drives without switching tools. Each erasure operation generates a tamper-evident certificate in PDF format, digitally signed for integrity, giving your organisation supporting evidence for its own audit documentation. Compliance remains your organisation's responsibility. To verify which method applies to your media type, visit the D-Secure compliance page or use the free NIST 800-88 Checker tool.

Yes. D-Secure Drive Eraser is designed to handle all major storage media types, including traditional HDDs, solid-state drives (SSDs), and NVMe drives, across x64 PCs, laptops and servers. This is important because SSDs and NVMe drives require different erasure techniques than magnetic hard drives — standard overwriting passes are less effective on NAND-based flash storage due to wear-levelling and over-provisioned memory areas. D-Secure's NIST 800-88 Purge methods are drive-appropriate for flash storage. The software can erase 100+ drives simultaneously on a single machine (no software limit; capacity depends on your hardware) and deploys via USB bootable media or PXE network boot — making it suitable for high-volume environments. Technical specifications and drive compatibility details are available on the Drive Eraser product page.

D-Secure offers two distinct erasure products that serve different use cases within an organisation's data security workflow. Drive Eraser performs full-drive sanitization — it completely wipes every sector of a storage device (HDD, SSD, NVMe, RAID), making it the right choice when a device is being decommissioned, redeployed, sold, or recycled. It is priced on a pay-per-use licence model starting at $25 per licence, with no licence expiration. File Eraser, by contrast, handles selective, ongoing sanitization — targeting specific files, folders, free space, system traces, and even cloud-drive residue (Google Drive, OneDrive, iCloud, Dropbox) without wiping the entire drive. It is suited to active IT environments where teams need routine, targeted erasure to maintain compliance. File Eraser is priced at $40 per year on an annual subscription. Both products generate PDF audit reports. Choosing between them depends on whether your need is end-of-life device retirement (Drive Eraser) or ongoing file-level hygiene (File Eraser).

GDPR Article 17 grants individuals the "Right to Erasure" — also known as the right to be forgotten — requiring organisations to permanently delete personal data upon request or when the original purpose for holding it no longer applies. Failing to comply can result in significant regulatory fines. D-Secure Drive Eraser supports this through NIST SP 800-88 Clear and Purge sanitization, paired with digitally signed PDF and JSON reports that can serve as supporting documentation for each erasure event. GDPR is technology-neutral and does not prescribe a method or certificate; compliance remains your organisation's responsibility. D-Secure's compliance page maps this workflow directly to GDPR Article 17 obligations, India's DPDP Act 2023, and additional frameworks including NIST 800-88, PCI DSS 4.0, and HIPAA. For organisations processing personal data at scale, D-Secure Drive Eraser supports simultaneous erasure across multiple devices, simplifying high-volume data subject requests. Organizations can map their specific data retention schedules directly to automated erasure policies.

After every successful erasure, D-Secure generates a tamper-evident certificate in both PDF format. Each certificate is digitally signed to protect its integrity and records key details of the erasure event — including the device identifier, erasure standard applied, date and time, and the verification result. This certificate is tamper-evident, digitally signed documentation of the sanitization event. Legal sufficiency depends on your jurisdiction. Signed erasure reports can support your documentation under GDPR, HIPAA, PCI DSS and India's DPDP Act; compliance remains your organisation's responsibility. JSON output also allows the certificates to be imported into asset management systems, ERPs, or ServiceNow environments for centralised record-keeping. For ITAD operators, per-device certificates provide supporting records for their own audit programmes. Custom fields and branding options are configurable directly within enterprise deployment profiles.

D-Secure provides tailored data sanitization solutions across several regulated and security-sensitive industries. Healthcare organisations use D-Secure to sanitize devices containing Protected Health Information (PHI) in line with HIPAA requirements. Financial services firms — including banks and trading institutions — use it to meet SOX and PCI DSS obligations for card and financial data. Government agencies apply D-Secure for NIST SP 800-88 Clear and Purge sanitization of sensitive data. Educational institutions use it for institutional data lifecycle management across campus devices. Enterprise IT teams use it to manage full asset lifecycle operations, from active deployment through to secure retirement. ITAD operators and service providers use D-Secure to automate bulk erasure, generate per-device certificates, and support white-label or multi-tenant resale models. D-Secure also offers a non-profit sector solution. Each industry page provides a focused breakdown of relevant compliance frameworks and use cases.

Yes. D-Secure Drive Eraser has no software limit on parallel erasure: it wipes every connected drive in a single session, and 100+ drives at once on one machine is possible with the right hardware (SAS/HBA controllers, drive bays and PCIe bandwidth). Today, Drive Eraser boots from a bootable USB. PXE (Preboot Execution Environment) network boot is also available. This multi-drive design is suited to high-throughput environments — such as data centres decommissioning servers, ITAD facilities processing returned IT assets, or enterprises refreshing large fleets of laptops and workstations. Throughput depends on your host bus adapter, drive bay and PCIe bandwidth capacity.

D-Secure Drive Eraser operates on a pay-per-use licence model — you purchase a licence for each erasure operation and pay only for what you use. Standard Erasure licences start at $25.00 per licence, with volume pricing tiers available for organisations needing 10, 50, 100, 500, or 1,000+ licences. A combined Drive Eraser + Diagnostics variant is also available starting at $30.00 per licence. This model is particularly well-suited to ITAD operators and enterprises whose erasure volumes fluctuate — you only pay for what you use, with no wastage from unused subscription seats. D-Secure File Eraser, the file-level product, uses a different pricing model: annual subscription starting at $40.00 per year. For MSP, OEM white-label, or high-volume enterprise pricing, D-Secure offers custom quotes. Contact the sales team for a tailored proposal.

D-Secure provides four free, browser-based tools designed to help IT professionals, compliance officers, and security teams assess their data erasure obligations and exposure — without requiring a software purchase. The NIST 800-88 Compliance Checker helps you determine whether your storage media requires the Clear, Purge, or Destroy sanitization category under the NIST guidelines. The Data Breach Cost Calculator estimates the potential financial exposure your organisation faces from improper data disposal, helping quantify the business case for proper erasure. The SSD Pass Calculator calculates the number of overwrite passes and estimated time needed to sanitize an SSD under NIST or DoD standards. The GDPR Erasure Checklist is an interactive tool mapping your erasure workflows against Article 17 readiness requirements. These tools are available at no cost and require no account creation. They are a useful starting point for organisations building or auditing a data sanitization programme.

D-Secure Drive Eraser is a bootable x64 ISO that runs on UEFI systems, including Secure Boot. Because it boots from USB, it works regardless of the operating system installed on the target machine. PXE network boot is supported; ARM64 and x86 (32-bit) builds and macOS Drive Eraser are coming soon. D-Secure File Eraser — the file-level product — runs on 64-bit Windows 10, 11 and Server 2016+, and erases locally stored traces left by Google Drive, OneDrive, iCloud, and Dropbox synchronisation clients on those machines. macOS and Linux versions of File Eraser are coming soon.

Yes. D-Secure Drive Eraser is designed to fit into existing enterprise IT workflows rather than operate in isolation. Every erasure produces a signed PDF report and a JSON report (signed with a 2048-bit key and protected with SHA-256), and both are collected in the report repository of the admin console, so certificate and device data can be imported into IT asset management, ITSM and ERP systems. D-Secure does not offer a public API; API integration is available on request. When a customer needs erasure data to flow automatically into ServiceNow, an ERP or a custom platform, the D-Secure team builds a custom API for that integration. This is particularly valuable for ITAD operators and managed service providers handling high volumes of assets across multiple clients who need centralised, consistent audit trails.

The D-Secure Data Guardian Award — also referred to as the Data Hygiene Assurance certificate — is a customer-facing badge programme that D-Secure offers to organisations that demonstrate strong data hygiene practices in their own operations. It is designed for organisations such as schools, hospitals, law firms, creative studios, and enterprises that want a recognised, auditable signal of their data security standards to share with clients, partners, or stakeholders. To be clear: this is not an award that D-Secure itself has received from a third party — it is a programme that D-Secure runs *for its customers*, recognising their own data protection practices. Participating organisations go through D-Secure's assessment process and, upon meeting the required standards, receive a badge they can display as proof of their data hygiene commitment. For eligibility criteria, assessment scope, and how to apply, visit the Data Guardian Award page or contact D-Secure.

No — and this is one of the most important distinctions in data security. When you delete a file, the operating system removes the file's directory entry (the pointer to where data is stored) but leaves the underlying data physically intact on the drive. That data remains fully recoverable using widely available file recovery software. Formatting a drive behaves similarly: it resets the file system structure without overwriting the actual content sectors. A drive that has been formatted can have its data recovered in minutes with basic forensic tools. To permanently eliminate data, every storage sector must be overwritten with new data patterns — and that overwrite must be verified to confirm completion. This is precisely what Enterprise-grade data erasure software is built to do. D-Secure Drive Eraser applies the NIST SP 800-88 Clear and Purge methods and produces a digitally signed PDF and JSON report that records the device, method, verification result and timestamp, giving you documentation to support your audit trail.