Certified Data Erasure
What It Is, and When You Need It
Ask most people how to wipe a computer before it leaves the organisation and they will tell you to delete the files or run a factory reset. Neither actually removes the data. This is the most common and most dangerous misunderstanding in how organisations handle retired IT, and it is the reason certified data erasure exists.
Here is what certified data erasure actually is, how it differs from simply deleting, and when erasure is the right choice rather than physical destruction.
Deleting is not Erasing!
When you delete a file or format a drive, the data is not removed. What changes is the index that points to it. The space is marked as available for reuse, but the underlying data stays physically on the drive until something overwrites it, and until then it is recoverable with widely available tools.
A factory reset is the same story. It restores default settings but does not reliably overwrite what was there. Researchers have repeatedly recovered corporate and personal data from devices that had been “reset” and resold. A retired device that has only been deleted, formatted or reset is still a live data risk. The information is still there, waiting to be found.
What certified erasure actually does
Certified data erasure genuinely removes data by overwriting it and then proves it has done so.
Rather than removing the pointers to data, the software writes over the actual data to a recognised standard, so the original information cannot be reconstructed. The device is then verified, and a certificate is issued recording that the erasure took place and met the standard. That certificate is what makes it certified rather than simply done. It is the difference between believing a device is clean and being able to prove it to an auditor, a regulator or a customer.
At DGD, certified erasure is carried out using Blancco. Blancco is approved by the National Cyber Security Centre (NCSC) and meets recognised data sanitisation standards, including NIST 800-88, DoD 5220.22-M and ISO 27040, so data is securely overwritten and permanently unrecoverable. Each device receives a Blancco Certificate of Erasure, giving a complete audit trail for compliance and reporting. [VERIFY — software-level approvals; confirm which NCSC.]
Those standards are not decoration. NIST 800-88 is the widely recognised guideline for media sanitisation; DoD 5220.22-M is a long-established secure-overwriting specification; ISO 27040 is the international standard for storage security. Together, they mean the erasure is measured against external, recognised benchmarks rather than a vendor’s word, with a certificate to evidence it.
Why erasure is what makes reuse possible
Here is the point that connects erasure to the wider value of retiring IT properly: erasure is the method that preserves the device.
Physical destruction renders data unrecoverable by destroying the storage medium itself. The data is gone, but so is the device and any value it held. Certified erasure achieves the same security outcome for the data while leaving the device intact and fully functional. That is what allows a retired device to be safely reused, refurbished or resold. A device erased to a certified standard, with a certificate to prove it, is both safe to pass on and attractive to a buyer. This is why certified erasure sits at the heart of IT asset resale and value recovery: it is the step that lets security and value coexist.
When to Erase, and when to Destroy
Because erasure preserves the device and destruction does not, choosing between them is a genuine decision.
Certified erasure is usually right when the device still works and holds residual value, is suitable for reuse or resale, and a certified, auditable wipe meets the security requirement. Physical destruction is usually right when a device is at genuine end of life with no real value, when a drive is faulty and cannot be reliably erased, or when policy specifically requires the storage medium to be physically destroyed. For those cases, secure data destruction is the route.
A good provider does not default to one method for everything. It assesses each device and applies the right outcome, erasing what can safely and valuably be reused, destroying what should not or cannot be.
Where DGD Technology fits
DGD Technology provides Certified Data Erasure as part of its complete ITAD service for organisations across Ireland. All data-bearing devices are processed using Blancco-certified erasure software, and each receives a Blancco Certificate of Erasure for compliance and reporting. Erasure is carried out at DGD’s specialised facility with no limit on the number of devices, making it suitable for anything from a handful of machines to a full data centre decommissioning. Where a device is better suited to physical destruction, DGD provides that instead, applying the right method rather than defaulting to one.
To discuss certified data erasure for your retired IT, get in touch with DGD Technology.
