What is D-Secure?
D-Secure is data-erasure software for drives and files. It permanently removes data using methods built on NIST SP 800-88, produces a signed report for every erasure, and fits IT asset disposition (ITAD) workflows from a single laptop to a full rack of servers.
D-Secure in Plain Terms
D-Secure builds software for one job: removing data so it cannot be recovered, and proving that it was removed. When a laptop is returned at the end of a lease, a server is retired or a batch of drives goes to a recycler, the data on them still exists until someone erases it properly. Deleting files or formatting a drive does not do that.
D-Secure is not antivirus, backup or monitoring software. It does not scan for threats or protect running systems. Its output is a clean drive or a clean set of files, plus a signed report that says what was erased, how and when. Learn more about the company.
The Shift from Basic Deletion to Structural Sanitization
Ordinary deletion leaves recoverable data on magnetic and flash media. D-Secure closes the gaps that informal IT asset retirement leaves open.
The Problem: Unverifiable Residual Data
- •Standard OS format and deletion commands leave Host Protected Areas (HPA), Device Configuration Overlays (DCO), and reallocated bad sectors intact.
- •Physical shredding creates unnecessary electronic waste and destroys hardware value without leaving a signed record of what happened to the data.
- •Ad-hoc manual wiping has no central oversight, which leaves gaps in the records you need for GDPR, HIPAA and internal audits.
The Solution: Controller-Level Sanitization
- •Applies NIST SP 800-88 Clear and Purge methods at drive and controller level, including RAID sets and hidden HPA/DCO areas.
- •Preserves hardware functionality for secure circular economy resale or internal redeployment, reducing carbon footprints and asset disposal costs.
- •Issues a tamper-evident, digitally signed report for every erasure: a certificate on page 1 and a detailed summary from page 2.
Platform Architecture & Ecosystem Scope
Built to scale from a single endpoint to high-density erasure benches and data center racks.
Drive Eraser
Bulk sanitization for loose and installed HDDs, SSDs, and NVMe drives via bootable USB. PXE network boot is also available.
File & Folder Eraser
Targeted erasure of selected files, folders, temporary data and free disk space on a machine that stays in service, without touching the operating system.
Virtual & LUN Eraser (Coming Soon)
Planned erasure of virtual machine disks (VMDK, VHDX) and storage area network (SAN) logical units. Not available yet.
Hardware Support Matrix
What You Can Use Today and What Is Coming
Three products are available now. The rest are in development and open for early access requests.
| Product | Status | What it does |
|---|---|---|
| Drive Eraser | Live | Erases whole HDDs, SSDs and NVMe drives from a bootable USB. |
| File Eraser | Live | Erases selected files, folders and free space on a Windows machine that stays in use. |
| Autopilot Detection | Live | Detects Windows Autopilot devices for ITADs and refurbishers. |
| Mac Drive Eraser | Coming soon | Drive erasure for Apple Mac computers. |
| Smartphone erasure | Coming soon | Erasure for iOS and Android devices. |
| MSI deployment | Coming soon | Remote Windows wiping through SCCM or Intune. |
| Diagnostic, Freeze State, LUN/VM Eraser and more | Coming soon | Hardware diagnostics, clean-state restore, virtual and SAN storage erasure. |
How an Erasure Works
The two live erasure products cover different situations. Here is what a typical job looks like in each.
Drive Eraser: retiring or reusing whole drives
- Write the Drive Eraser x64 ISO to a USB stick.
- Boot the machine from the USB stick. UEFI and Secure Boot are supported.
- Select the drives to erase. One machine can handle 100+ drives in parallel, depending on its hardware.
- Choose NIST SP 800-88 Clear or Purge according to your policy and the media type.
- Run the erasure. RAID sets and hidden HPA/DCO areas are handled at the controller level.
- Collect the signed report for each drive and find it later in the report repository.
File Eraser: cleaning machines that stay in use
- Install File Eraser on a 64-bit Windows machine.
- Select the files, folders or free space you want to erase.
- Choose the erasure method that matches your policy.
- Run the job now, or schedule it to repeat.
- Keep the signed report as the record of what was removed.
File Eraser is licensed yearly with no automatic renewal.
How verification works
The report. Page 1 is the certificate, page 2 onwards the detailed summary, available as PDF and JSON. It is signed with SHA-256 and a 2048-bit key, so any later edit is detectable.
The ledger. Every erasure is also recorded in the D-Secure backend, giving you an independent record to compare a report against.
Your own check. An erased drive should give recovery tools nothing to recover. Many teams sample erased drives with a recovery tool as part of their quality process.
Who Uses D-Secure
ITAD providers and refurbishers
Erase large batches of drives in parallel, hand each client a signed report, and check Autopilot status before resale.
Enterprise IT
Wipe laptops and servers before reassignment, lease return or recycling, and keep every report in one console.
Healthcare, finance and public sector
Keep a signed record of each erasure to support your own HIPAA, GDPR or PCI DSS documentation.
Small businesses
Pay per drive when a few machines need wiping, or use File Eraser to clean sensitive files from machines still in use.
Frequently Asked Questions
What does D-Secure do?
D-Secure makes data-erasure software. Drive Eraser wipes whole drives so they can be reused, sold or recycled, and File Eraser removes selected files and folders from machines that stay in use. Every erasure produces a signed report.
Which D-Secure products are available today?
Drive Eraser, File Eraser and Autopilot Detection. Mac Drive Eraser, smartphone erasure, MSI deployment through SCCM or Intune and the other products shown as coming soon are not available yet.
Is D-Secure the same as antivirus or backup software?
No. D-Secure does not scan for threats or back up data. It removes data permanently and documents that it did so.
How do I know an erasure worked?
Each erasure produces a report signed with SHA-256 and a 2048-bit key, and the erasure is recorded in the D-Secure backend ledger. You can also check erased media yourself with a data recovery tool.
New to the topic? Start with what ITAD is, then see why teams choose D-Secure.
Cryptographic Audit Proof for Every Operation
Every erasure performed by D-Secure produces a digitally signed report. Drive erasure methods are built on NIST SP 800-88, and the reports can support your own GDPR, HIPAA and ISO/IEC 27001 documentation.