Data Sanitization.

Data sanitization is the process of permanently removing data from storage media so that it cannot be recovered by any known technique, including laboratory methods. NIST SP 800-88 defines three categories:Clear, Purge and Destroy: each offering a different level of assurance. The term covers software erasure, cryptographic erase, degaussing and physical destruction; it is the umbrella, not a single method.

Not quite, and the distinction matters when you are writing a policy. Data sanitization is the broader term: it includes methods where the device survives and stays usable. Data destruction usually implies the device does not survive. Every act of data destruction is sanitization; not every act of sanitization is destruction. If your policy says “sanitize”, you have more options than if it says “destroy”.

Clear applies logical techniques through the device’s standard interfaces, a verified overwrite, and protects against ordinary recovery tools. Purge applies stronger methods such as the drive’s own secure-erase or cryptographic-erase command, or degaussing, and protects against laboratory recovery. Destroy physically renders the media unusable. The right category depends on the sensitivity of the data and whether the device will leave your control.

Yes, and this is where most policies fail. Hard disks store data at fixed physical locations, so a conventional overwrite reaches everything. SSDs use wear levelling to spread writes across flash cells, so an overwrite can report success while data survives in cells it never reached, including over-provisioned space the operating system cannot see. For solid-state media the correct routes are the drive’s own secure-erase or cryptographic-erase command, or physical destruction.

A record tied to the device serial number stating the method applied, the category under NIST SP 800-88, the date, and whether verification passed. Where software erasure is used you receive the tool-generated erasure certificate; where media is physically destroyed you receive a Certificate of Destruction; where hardware is recycled you also receive the Form 6 E-Waste Manifest and Certificate of E-Waste Recycling.

Yes. For organisations whose information security policy forbids media leaving site, we bring the equipment to you, your team witnesses the process, and the certificates are issued before we leave the building. Otherwise media is packed and processed under documented custody at our parent company’s MPCB-authorised facility.

NIST SP 800-88, Guidelines for Media Sanitization, now in Revision 2 (September 2025). We do not claim DoD 5220.22-M, which is frequently cited in Indian vendor marketing despite having been superseded: the DoD itself no longer maintains it as a sanitization standard. If a vendor leads with DoD 5220.22-M, it is worth asking when they last reviewed their process.

No. We serve 497 cities across India. Mumbai, Navi Mumbai, Thane and Pune are our regular-pickup markets with scheduled routes and free collection; everywhere else is assessment-and-quotation, with an identical destruction process and identical documentation.