Data erasure software sits at the heart of most modern ITAD data sanitisation processes, and there are several well-established, independently tested platforms in this space — Blancco and Certus among the more widely used names — deployed by ITAD providers, enterprises and public sector organisations. Understanding what “certified erasure” actually means helps businesses evaluate whether a provider’s erasure claims are genuinely credible, regardless of which specific software sits behind them.

Independently certified erasure software is tested against a range of international standards, including NIST 800-88, with certifications recognised by government bodies and industry regulators in multiple jurisdictions. What this independent testing verifies is not simply that the software claims to overwrite data, but that it does so verifiably, using processes assessed by accredited third-party laboratories against the specific technical requirements of recognised sanitisation standards.

The practical output that matters to businesses is the erasure report generated for every device processed. A properly configured, certified erasure tool produces a detailed, tamper-evident certificate for each individual asset, recording the device’s serial number, the erasure standard applied, the result of a verification pass confirming success, and a timestamp. This is meaningfully different from a generic statement that “all data has been securely erased” — it is a per-device, independently verifiable audit trail that can be matched against your own asset register.

This level of detail matters because it removes reliance on trust alone. If your organisation is ever required to demonstrate compliance to a regulator, auditor or customer, a certified erasure report for the specific asset in question is significantly stronger evidence than a supplier’s general assurance that their process is secure.

It is worth noting that certified software is only one part of a trustworthy process — it must be correctly configured for the media type being erased, applied consistently by trained staff, and the resulting certificates must be genuinely retained and provided to the customer rather than generated and discarded.

This is one area where we can speak directly to our own process rather than in general terms: our data sanitisation is carried out on Certus erasure software, run by our own certified erasure technicians, aligned with NIST 800-88 principles, with a certificate issued against the specific serial number of every device processed. When evaluating any ITAD provider’s data sanitisation capability, asking what software they use, whether it holds independent certification, and requesting a sample report is one of the most direct ways to assess the substance behind their claims — and we’re glad to provide one.