D-Secure File Eraser

D-Secure File Eraser is designed for selective, targeted sanitization rather than full-drive erasure, giving organisations precise control over exactly which data is removed. It can permanently erase individual files, entire folder structures, free space on a drive (where deleted file remnants may still reside), and system-generated traces such as temporary files, browser caches, application logs, and other residual data left behind by day-to-day software use. Partition-level erasure is also supported, allowing an entire logical partition to be sanitized without affecting other partitions on the same physical device. This range of targets makes File Eraser suitable for a variety of use cases: targeted erasure of specific documents prior to device handover, recurring sanitization of sensitive working files after a project closes, removal of regulated data such as personally identifiable information (PII) from active machines, and cleanup of system traces that could expose user activity. For a complete list of supported file types and trace categories, please contact D-Secure or download the product datasheet.

Yes. One of D-Secure File Eraser's notable capabilities is its ability to erase locally stored traces left by cloud storage synchronisation clients, including Google Drive, Microsoft OneDrive, Apple iCloud, and Dropbox. When you use these services, the synchronisation client typically caches files, metadata, and activity logs on your local machine — in addition to storing the file in the cloud itself. Simply revoking cloud access or uninstalling the sync client does not remove these local traces, which can include partial file copies, access history, and thumbnail previews. D-Secure File Eraser targets and permanently overwrites these locally cached traces, reducing the residual data footprint on the device. It is important to note that File Eraser operates on locally stored data only — it does not reach into cloud storage services directly or delete files from remote servers. Removing data from cloud storage itself requires action through each platform's own deletion and account management tools. For questions about specific sync client versions or operating system configurations supported, please contact D-Secure for confirmation.

File recovery is possible after standard deletion because the operating system only removes the logical reference to a file, leaving the underlying data intact on the storage medium until that space is overwritten by new content. Recovery tools scan for these intact data remnants and reconstruct files that have not yet been overwritten. D-Secure File Eraser closes this recovery window by overwriting the actual storage sectors that contained the file's data with new patterns before that space is ever reused by the operating system. The overwrite is then verified to confirm completion. Because the original data has been physically replaced at the sector level, recovery tools find no intact data to reconstruct — the file cannot be restored. For NAND flash-based storage (SSDs, NVMe drives), where wear-levelling may complicate standard overwriting, D-Secure File Eraser applies appropriate algorithms from its library of 30+ international wiping standards matched to the media type. For specific algorithm selection recommendations for your storage environment, visit the D-Secure compliance page or use the free NIST 800-88 Checker tool.

D-Secure File Eraser supports Windows, macOS, and Linux operating systems, providing cross-platform coverage for the mixed-OS environments common in enterprise IT departments. This multi-platform support is particularly relevant for organisations operating a combination of Windows workstations, Apple Mac endpoints (including Apple Silicon M-series machines), and Linux servers or developer workstations — all of which may hold sensitive data requiring periodic, selective sanitization. Cross-platform consistency is also important from a compliance standpoint: an organisation's data erasure programme should apply the same verifiable standards and produce the same quality of documentation regardless of which operating system the device runs. Each erasure operation generates a PDF and XML audit report confirming the files, folders, or traces removed, the algorithm applied, and the verification result. For specific information on minimum supported OS versions, ARM64 and Apple Silicon compatibility, and Linux distribution support, please contact D-Secure for confirmation, as this level of detail was not publicly documented at the time of this writing.

Yes. D-Secure File Eraser generates a PDF and XML audit report at the completion of each erasure session, providing a documented record of the operation. The report records the key details of the erasure event — including the files, folders, or trace categories removed, the wiping algorithm applied, the date and time of the operation, and confirmation that the process completed successfully. This documentation is important for organisations that must demonstrate compliance with data protection regulations requiring evidence of proper data disposal. GDPR Article 17, for example, does not simply require that data be erased — it requires that organisations be able to demonstrate that erasure occurred when requested or required. Similarly, HIPAA and PCI DSS 4.0 compliance programmes typically require auditable records of data destruction events as part of formal compliance reviews. XML output allows the report data to be imported into asset management or compliance tracking systems for centralised record-keeping. For questions about report customisation, branding, or integration with specific compliance management platforms, please contact D-Secure for confirmation.

D-Secure File Eraser supports compliance with data protection regulations that require organisations to permanently remove personal and sensitive data when it is no longer needed or upon a data subject's request. Relevant frameworks include: **GDPR Article 17** (Right to Erasure), which requires that personal data be permanently deleted under specific conditions and that deletion be documentable; **HIPAA** (Health Insurance Portability and Accountability Act), which governs the secure disposal of Protected Health Information (PHI) and applies to healthcare providers, insurers, and their business associates; **PCI DSS 4.0**, which requires that cardholder data be rendered unrecoverable when no longer required for business purposes; **India's Digital Personal Data Protection (DPDP) Act 2023**, which imposes data erasure obligations for personal data processed within India; and **SOX** (Sarbanes-Oxley Act), relevant to financial records held on employee workstations. File Eraser's PDF and XML audit reports provide the documented evidence trail that each framework expects. For a detailed compliance mapping, visit the D-Secure compliance page. For specific legal interpretation relevant to your jurisdiction, consult your legal and compliance team.

Yes. Free space erasure is a dedicated function within D-Secure File Eraser and addresses a specific data security risk that standard file-level deletion leaves unresolved. When files are deleted through the operating system, the storage space they occupied is marked as available but the data itself is not overwritten. Over time, a drive's "free space" accumulates intact remnants of previously deleted files — potentially including sensitive documents, personal information, credentials, and other confidential data — that remain recoverable by anyone with access to a recovery tool and the physical or logical access to the drive. Free space erasure resolves this by scanning the unallocated regions of a drive and overwriting them with new data patterns, eliminating recoverable remnants without affecting the files currently in active use on the same drive. This is particularly valuable for devices that are being handed to a new user within an organisation, returned after a repair, or otherwise changed hands while remaining in active service. After free space erasure, a PDF and XML report is generated confirming the operation.

Yes. D-Secure File Eraser includes scheduled erasure functionality, allowing organisations to configure automated, recurring sanitization tasks rather than relying on manual, ad-hoc deletion. This capability is particularly important for enterprise environments where sensitive data is generated continuously — such as temporary files from business applications, working copies of regulated documents, cache data from internal portals, and system trace files that accumulate over time. Scheduled erasure enables IT security teams to define policies once and enforce them consistently across endpoints without requiring manual intervention for each event. This reduces the risk of data accumulating in unmonitored locations between manual cleanup cycles and supports a more defensible, process-driven approach to data hygiene. Scheduled operations generate the same PDF and XML audit report as manual erasure sessions, ensuring that recurring compliance documentation is produced automatically. For specific details on scheduling frequency options, policy management capabilities, and whether scheduling is managed through the software interface or an external task scheduler, please contact D-Secure for confirmation.

D-Secure offers two distinct erasure products that serve different purposes within an organisation's data security programme, and understanding which one to use depends on the specific scenario. **D-Secure Drive Eraser** performs full-drive, sector-level sanitization of an entire storage device — including HDDs, SSDs, NVMe drives, and RAID arrays. It is the correct tool when a device is being decommissioned, redeployed to a different user, sold, donated, or sent for recycling, and the entire drive needs to be returned to a clean state. It supports 26+ erasure standards and deploys via USB boot, PXE network boot, or MSI remote package. It is priced at $25.00 per licence (pay-per-use, no expiry). **D-Secure File Eraser** performs selective, targeted sanitization of specific files, folders, free space, system traces, and cloud-drive residue on an active, in-use machine. It is the correct tool for ongoing data hygiene, GDPR right-to-erasure requests on active systems, and post-project data cleanup without taking the device out of service. It is priced at $40.00 per year (annual subscription). Both products generate PDF and XML audit reports.

D-Secure File Eraser is designed with enterprise environments in mind, where data hygiene obligations extend across large numbers of endpoints managed by an IT or security team rather than individual users. Its support for Windows, macOS, and Linux means it can operate across the mixed-OS fleets typical of enterprise environments. Scheduled erasure capabilities allow IT teams to define and enforce data sanitization policies consistently across endpoints without relying on user-initiated actions, reducing the risk of human error or non-compliance. The PDF and XML audit reports generated after each session provide the per-operation documentation required for enterprise compliance programmes under GDPR, HIPAA, and PCI DSS 4.0. For organisations that also need to sanitize entire drives — for example, as part of a device retirement or lease return programme running alongside ongoing file-level hygiene — File Eraser works as a complement to D-Secure Drive Eraser rather than a replacement. For details on centralised management, enterprise licence deployment methods, volume pricing, and integration with endpoint management platforms, please contact D-Secure directly, as these details were not fully publicly documented at the time of this writing.

D-Secure File Eraser provides access to a library of 30+ international wiping algorithms, covering both single-pass and multi-pass overwriting methods drawn from globally recognised data sanitization frameworks. Single-pass overwriting methods are generally considered sufficient for modern storage media under NIST SP 800-88 guidance, which notes that additional overwrite passes do not materially increase the assurance level for contemporary drives. Multi-pass methods, such as DoD 5220.22-M (3-pass and 7-pass variants) and others, remain in use by organisations whose internal policies or specific regulatory frameworks require them. The appropriate algorithm depends on three factors: the sensitivity of the data being erased, the type of storage media (magnetic HDD vs. NAND flash SSD), and the regulatory framework or internal policy your organisation must satisfy. For example, NIST 800-88 Clear-category methods apply to lower-sensitivity scenarios on magnetic media, while Purge-category techniques are recommended for flash-based storage. The free NIST 800-88 Checker tool on the D-Secure website helps identify the correct sanitization category for your media type and sensitivity level. For guidance on selecting the most appropriate algorithm for a specific compliance requirement, contact the D-Secure technical team.