Solutions · Data destruction
Data destruction with certificates you can file
Documented sanitization or physical destruction for retired media — NIST SP 800-88 first — under ISO/IEC 27001:2022 Cert # 305026010396IS (scope includes information security for e-waste services including data destruction).
Media matrix
Buyers ask which media types you accept. Scope is confirmed at assessment — this is the usual enterprise set.
Hard disk drives (HDD)
Magnetic media from PCs, servers, and arrays — sanitize or physically destroy per policy.
Solid-state drives (SSD)
Flash media where overwrite alone may be insufficient — Purge or Destroy methods as scoped.
Tape and optical
Backup tapes and optical media when included in the engagement media list.
USB, cards, and mobile
Removable flash and mobile devices — handled when listed in scope at assessment.
NIST SP 800-88 — Clear, Purge, Destroy
Primary sanitization vocabulary worldwide. Exact techniques for each media type are locked in the assessment — we do not market named wipe vendors.
Clear
Logical techniques protecting against simple non-invasive recovery — typically for media that may be reused inside the same security environment.
Purge
Stronger sanitization rendering data recovery infeasible using state-of-the-art lab techniques — common for media leaving organisational control.
Destroy
Physical destruction so media cannot be reused as storage — shredding or equivalent when policy demands Destroy.
Onsite vs offsite
Some programmes require destruction at your site; others accept secure transport to our processing environment. Availability of onsite or witnessed destruction is confirmed at assessment — we do not invent a mobile fleet claim.
- Offsite: sealed custody to plant / secured processing
- Onsite / witnessed: when scoped and operationally available
- Method selection follows your media types and InfoSec policy
Certificate of Data Destruction — field checklist
Auditors look for what / how / when / identifiers. We issue CoD with serials or batch detail as agreed — evidence for your file, not a DPDP certificate.
- What was processed
Asset or media description for the engagement — serials or batch as agreed.
- How it was sanitized or destroyed
Method class aligned to NIST Clear / Purge / Destroy language used for the job.
- When work completed
Date (and related custody milestones) for the destruction event.
- Who / under which engagement
USH India as processor under the contracted assessment — supporting your audit file.
ISO-backed destruction
- • ISO/IEC 27001:2022 Cert # 305026010396IS
- • Scope includes info security for e-waste services including data destruction
- • Verify at www.qrocert.org
Fit with ITAD and recycling
Destruction often sits inside a full ITAD programme. After media is sanitized or destroyed, residual hardware moves to plant recycling.
FAQ
- Do you guarantee per-device certificates?
- We issue Certificate of Data Destruction with serials or batch detail as agreed at assessment.
- Is this a DPDP certificate?
- No. CoD supports your internal compliance and disposal evidence under DPDP-oriented programmes — we do not issue a DPDP certificate.
- Which wipe software do you use?
- We do not market named wipe vendors. Methods and tools are confirmed during assessment against NIST SP 800-88 and your policy.
- Can residual data ever remain?
- Clear/Purge/Destroy are chosen to match confidentiality risk. Destroy is used when policy requires media to be physically unusable.
Request an ITAD assessment
Only work email and international phone are required. Optional fields help us prepare a clearer scope.