Data Erasure Certificate: What It Is and What It Must Show.
The per-drive report that proves software wiping worked, field by field, with real redacted samples.
A data erasure certificate is the report that erasure software produces for each drive it wipes. A useful one names the drive by serial number, states the method and standard, confirms the result was verified, and is digitally signed so it cannot be edited unnoticed. It is the proof behind reusing or reselling a drive, and the document auditors ask for when devices leave your control.
Seven fields to look for.
| Field | What it shows | Why it matters |
|---|---|---|
| Drive details | Make, model, capacity and serial number | Ties the report to one physical drive in your asset register |
| Host details | The laptop, desktop or server the drive came from | Lets you match the drive to the device |
| Method and standard | For example NIST SP 800-88 Purge, or an overwrite pattern and rounds | Shows the method suited the media |
| Verification | Whether the result was checked after erasure | Unverified erasure is only a claim |
| Result | Successful or failed, with any errors | Failed drives must go to physical destruction |
| Time and operator | Start and end time, and who ran it | Creates accountability |
| Software and signature | Tool name and version, digital signature or protection | Makes tampering detectable |
Blancco and BitRaser reports.
We use licensed Blancco and BitRaser software. Both vendors describe their reports as tamper-evident: Blancco says its certificates are digitally signed with a unique identifier, and BitRaser describes its reports as digitally protected and tamper-proof. The practical point is to keep the original PDF or XML report, not a scan of a printout.
We publish two redacted, annotated sample reports, one from each tool, with every important field numbered and explained. See the annotated samples.
Erasure or destruction?
- Wiping, the drive survives. Erasure certificate per drive. The drive can be reused or resold.
- Degaussing, hard drives and tape only. Destruction certificate. The drive never works again. Degaussing does not work on SSDs.
- Shredding, any media. Destruction certificate listing serial numbers recorded before shredding.
Choose wiping when the hardware still has a use, and destruction when policy forbids reuse or a drive fails verification. Try the method selector.
Questions, answered.
A report produced by erasure software for each drive it wipes. It records the drive, the method, the result and when it happened, so you can prove that specific drive was erased.
Not quite. An erasure certificate covers software wiping, where the drive survives and can be reused. A certificate of destruction usually covers physical destruction or the job as a whole.
Blancco and BitRaser both say their reports are digitally signed or protected so that changes can be detected. Keep the original files, not just printouts.
NIST SP 800-88 is the usual reference, now in Revision 2 (September 2025), which describes Clear, Purge and Destroy. Some reports also name older methods such as HMG IS5. What matters is that the method suits the media and your policy.
Yes, when they are erased with a method designed for flash, such as a verified sanitize or cryptographic erase command. Overwriting alone is not reliable on SSDs.
Last reviewed 30 September 2026. Sources: NIST SP 800-88 Rev. 2, Blancco on tamper-proof certificates, BitRaser sample reports and certificates.
Need erasure certificates for a batch of drives?
Tell us the device types and count. Onsite certificates are issued the same day.
