# Certified Data Wiping & Secure Data Erasure for Businesses > Certified data wiping and secure erasure for corporate HDDs, SSDs and servers using licensed enterprise software, with a verifiable erasure certificate per drive. Mumbai and pan-India. Source: https://privace.in/services/certified-data-wiping/ --- Software-based data sanitisation # Certified Data Wiping & Secure Erasure. When a drive should keep its value rather than be destroyed — erased with licensed enterprise software, and certified per drive. Request a Free Assessment Speak to an expert The short answer Certified data wiping is the permanent removal of data from a storage device using licensed erasure software that overwrites every addressable sector and then verifies the result, producing a tamper-resistant certificate for that specific drive. Unlike physical destruction, the drive survives and keeps its residual value. PrivAce carries out software erasure using industry-standard tooling and follows NIST SP 800-88 as its media sanitisation reference. Where a drive is too sensitive to reuse, we physically destroy it instead. ## Why deleting and formatting are not erasure Deleting a file removes its entry from the index. The content stays on the disk until something else happens to overwrite it. Formatting rewrites the partition table, not the data. Both leave the original content recoverable with software that is freely available and requires no expertise. A factory reset is the same story with a friendlier name. On most devices it restores the operating system and clears user profiles; on many it does not perform a sector-level overwrite of the underlying media. Certified erasure is a different operation. Every addressable sector is overwritten, the result is verified by reading back, and the outcome is recorded against that drive’s serial number. If verification fails, the drive is flagged and physically destroyed instead. ## Wipe or destroy? The decision that matters Both outcomes are valid. Choosing between them is a commercial and risk decision, not a technical one. Wipe when the hardware still has residual value worth recovering, the data is ordinary business data, and you want the device redeployed or resold. This is the only route that returns money to you. Destroy when the media held regulated, financial, health or customer personal data; when the drive fails verification; when the drive is an SSD holding highly sensitive data; or when your policy simply requires it. Nothing is recovered, but nothing is arguable either. Most corporate batches use both. A typical laptop refresh might wipe the majority and physically destroy the drives from finance, HR and executive machines. ## HDDs, SSDs and NVMe need different treatment This is the most common technical error we encounter, and it is worth being precise about. Traditional hard drives store data magnetically at fixed physical locations, so a conventional overwrite reaches everything. SSDs and NVMe drives do not work that way. Their controllers use wear levelling to spread writes across physical flash cells and extend the drive’s life. A write to logical sector 4,096 may land on a completely different physical cell than the one holding the old data — so a conventional overwrite can report success while fragments survive in cells it never reached, including over-provisioned space the operating system cannot see. The correct methods for solid-state media are the drive’s own secure-erase or cryptographic-erase command, issued through software that knows how to invoke it, or physical destruction. An HDD-era wiping process applied to an SSD fleet is not equivalent, however confidently it reports completion. ## Where erasure fits in the wider process Wiping is one stage of IT asset disposition, not a substitute for it. The full chain: Collection → data sanitisation (wipe or destroy) → value assessment on surviving devices → resale or redeployment → authorised recycling of everything else → documentation covering all of it. Erasure always precedes assessment. A device is never graded for resale while its data is still on it. If you need erasure and disposal together — which is the usual case for a refresh — scope both at the same time and you receive a single connected document set rather than two unrelated ones. See IT asset disposition. ## What the certificate proves An erasure certificate produced by licensed software is a stronger artefact than a letter on a vendor’s letterhead, because it is generated by the tool at the moment of erasure rather than written afterwards from memory. A useful certificate identifies the drive, states the method applied, records the date and time, and confirms that verification passed. Ours are provided to the client on completion. For drives that are physically destroyed rather than wiped, you receive a Certificate of Destruction instead. Read what a Certificate of Destruction should actually contain before you accept one from any vendor. Coverage ## Where we provide this. PrivAce supports enterprise IT asset disposition across India. Mumbai, Navi Mumbai, Thane and Pune are our established regular-pickup markets; outside these regions we assess requirements and arrange collection according to asset volume, location and project scope. Maharashtra service areas All cities we serve Related ## Works alongside. ### Hard Drive Destruction Shredding and degaussing when a drive must not survive. Learn more ### Certified Data Destruction The full destruction service and its documentation. Learn more ### IT Asset Disposition Erasure as part of end-to-end asset retirement. Learn more ### Asset Recovery Recovering value from drives that survive erasure. Learn more Questions ## Frequently Asked Questions What is the difference between data wiping and data destruction? Wiping overwrites the data and leaves the drive usable, so its residual value survives. Destruction physically renders the media unusable. Wiping is right when you want to recover value; destruction is right when the data is too sensitive to take any chance on. Is one overwrite pass enough? For modern hard drives, a single verified pass makes the original data unrecoverable. The multi-pass patterns that circulate in older guidance were designed for drive technologies no longer in use. Verification matters far more than pass count. Can SSDs be wiped reliably? Only with methods that address how they actually work — the drive's built-in secure-erase or cryptographic-erase command. A conventional overwrite can miss data held in cells that wear levelling never exposed. For highly sensitive SSDs we recommend physical destruction. Do we get a certificate for each drive? Where software erasure is used, the tooling generates a verifiable erasure record. Where drives are physically destroyed, you receive a Certificate of Destruction. Tell us at scoping what level of detail your audit requires. Which erasure software do you use? Licensed enterprise erasure software rather than free utilities. See the tooling section on our hard drive destruction page for detail on what that means in practice. Can you wipe drives at our premises? Requirements of that kind are scoped case by case. Raise it at the assessment stage — some clients need on-site sanitisation, others accept destruction at the processing facility with a documented handover in between. Do you only operate in Mumbai? No. PrivAce operates pan-India. Mumbai, Navi Mumbai, Thane and Pune are our regular-pickup markets with scheduled routes and free collection. Everywhere else in India — Bengaluru (Bangalore), Hyderabad, Chennai, Delhi NCR including Gurugram and Noida, Ahmedabad, Kolkata and other cities — we assess the requirement and arrange collection based on volume, location and project scope. The data destruction process and the documentation you receive are identical wherever we collect; only the scheduling differs. Last reviewed 1 September 2026. References: E-Waste (Management) Rules, 2022, DPDP Act, 2023, NIST SP 800-88. ## Ready to Start? Send a rough device list. The assessment is free, the valuation is itemised, and payment reaches your account before we collect. Request a Free Assessment Free Exposure Score