Drive wiping vs. shredding: which do you need?
Use a verified purge when a working drive supports an appropriate sanitization technique; choose physical destruction when the drive cannot be sanitized or your data handling requirements call for it. Decide from the media type, data sensitivity, and verified outcome, not from whether the computer still starts.
What do Clear, Purge, and Destroy mean?
Clear protects against simple recovery through the normal device interface. Purge makes recovery infeasible even with advanced laboratory techniques while potentially leaving the media usable. Destroy makes recovery infeasible and leaves the media unusable for storage.
NIST SP 800-88 Rev. 2, published September 2025, points to IEEE 2883 for technique details. A command labeled secure erase is not, by its name alone, proof that a particular drive meets the required method.
How do HDDs and SSDs differ?
HDDs store data magnetically. SSDs use flash memory, where spare cells and wear leveling can leave data outside the areas a normal overwrite reaches. Choose a device-supported technique appropriate to that media, rather than assuming repeated overwrites solve both cases.
Degaussing acts on magnetic media and does nothing to SSDs. Rev. 2 does not classify degaussing as a Destroy technique, even when it makes a magnetic drive unusable.
Does drilling a hole count as destruction?
No. Bending, cutting, and drilling only partly damage media and can leave recoverable portions. Rev. 2 lists shredding, disintegration, pulverization, melting, and incineration as destruction techniques; execution must suit the media and required outcome.
What should a small business ask for?
Start with an inventory of the drives, the information they held, and any retention requirements. Confirm that needed records exist elsewhere before authorizing an irreversible operation. Assign someone to reconcile every listed drive with its final disposition.
Ask for a certificate containing drive serial numbers, the method and technique used, the date, and the verification and validation results. Serial numbers connect the record to individual media instead of merely counting computers. A server may contain several drives, so a machine count alone does not answer what happened to each one.
Ask how exceptions are handled before handing over equipment, especially drives that fail to power up or report errors. Keep those exception records with the completed certificates.
What else should you know?
Is deleting files or formatting a drive enough?
Do not treat either action as evidence of sanitization. Ask which Clear, Purge, or Destroy method was applied and how its outcome was checked.
Does a certificate make the method appropriate?
No. A certificate records an operation; the selected method still needs to fit the drive and the sensitivity of its data.
What if a drive cannot complete sanitization?
Do not record an unsuccessful operation as complete. Escalate the drive for another suitable technique or physical destruction.
For pickup, see data wiping and computer pickup in Rochester, MN.