Common Criteria and Data Wiping Software
D-Secure Drive Eraser applies NIST SP 800-88 Clear and Purge methods and backs every erasure with a digitally signed report. This guide explains what the standard covers and how it relates to data erasure software.
What is the Common Criteria Standard?
The Common Criteria for Information Technology Security Evaluation (referred to as Common Criteria or CC) is an international standard (ISO/IEC 15408) for computer security certification. While official certification requires testing by a competent Common Criteria Test Laboratory (CCTL), many software vendors align their development practices with CC guidelines to ensure robust security postures.
About CCRA
The Common Criteria Recognition Arrangement (CCRA) is a multiparty international agreement to mutually recognize and accept the evaluation of IT products based on the Common Criteria methodology. There are 18 member countries including Australia, Canada, France, Germany, India, Japan, Netherlands, and more.
What a Common Criteria Evaluation Involves
D-Secure does not claim a Common Criteria evaluation or an Evaluation Assurance Level for Drive Eraser. A formal evaluation typically covers the following:
Design and Documentation
- • Evaluators review the product against a defined security target.
- • Functional specifications and design documentation are examined.
- • Configuration management and secure delivery procedures are assessed.
Evaluation Activities
Developer Testing
Evaluators review the developer's test evidence.
Independent Testing
Evaluators run independent functional tests.
Vulnerability Assessment
Evaluators perform a vulnerability analysis.
Why Evaluation Status Matters
For Enterprises
Ask any vendor whether its product has been formally evaluated under Common Criteria, and request the certificate and security target. D-Secure Drive Eraser has not been evaluated.
For ITAD Providers
Check whether a client's contract requires Common Criteria evaluated products. Where it does, confirm the evaluated product and version with the vendor.
For Compliance Officers
Document which evaluations and certifications a tool holds, and keep per-drive evidence of every erasure. D-Secure Drive Eraser gives you that evidence: a tamper-evident, digitally signed PDF and JSON erasure report, signed with SHA-256 and a 2048-bit key.
For EaaS Providers
If you're offering Erasure as a Service (EaaS), state clearly which standards and certifications your tools hold, and which they do not.
Solutions for Compliance
Explore the full D-Secure data security suite
How Do Experts Handle This?
Standard Compliance
Meeting NIST 800-88 and GDPR standards with full audit trails.
Enterprise Ready
Scalable solutions for ITAD partners and large organizations.
Securing Data Everywhere
Trusted by global enterprises for zero-leakage data sanitization.
Related Articles
Windows 10 Refresh & HIPAA: Data Disposal Checklist 2026
Certificate of Data Destruction: What to Include + Template
Enterprise Data Erasure Compliance Guide | D-Secure
Frequently Asked Questions
Comments (0)
Your email address will not be published. Providing an email is optional.
Have Questions About This Topic?
Send us an enquiry regarding: Common Criteria (ISO/IEC 15408) for Data Erasure
No comments yet. Be the first to comment.