There are three real methods and they are not interchangeable. Picking the wrong one either destroys value you could have recovered, or leaves data behind while you hold a certificate saying otherwise. The second mistake is the expensive one.
Software writes over every addressable block, or in the case of a self-encrypting drive, destroys the encryption key so the contents become unreadable noise. Done to the NIST SP 800-88 standard it is verifiable — the tool reads back and confirms, and produces a per-drive log.
A powerful magnetic field scrambles the magnetic domains that store the data on a spinning hard disk, including the servo tracks the drive needs to find anything. The drive is dead afterwards — that's expected, not a side effect.
The drive goes through a shredder and comes out as fragments. For hard disks a relatively coarse shred is adequate; solid-state media needs a much smaller particle size, because a single surviving flash chip can still hold readable data.
| Spinning hard disk | SSD / NVMe / flash | Failed or dead drive | |
|---|---|---|---|
| Software wipe | Yes, verifiable | Yes — crypto-erase preferred | No — can't be verified |
| Degauss | Yes, destroys the drive | No. Does nothing. | Yes, for spinning disks only |
| Shred | Yes | Yes — needs a fine shred | Yes, the usual answer |
| Drive still usable after | Only after a wipe | Only after a wipe | No |
| Keeps resale value | Wipe only | Wipe only | None |
Deleting a file removes the pointer to it, not the file. A quick format rewrites the index, not the contents. Both leave the data sitting on the platters or in the flash until something happens to overwrite it, and recovery tools that exploit exactly this are free to download.
Solid-state drives add a second problem. They deliberately spread writes across spare capacity to prolong their life, which means an overwrite aimed at a visible block may not touch the copy sitting in a region the operating system cannot address. This is why the standard treats SSDs differently from hard disks, and why crypto-erase — destroying the encryption key rather than chasing every block — is usually the right approach for modern self-encrypting drives.
The practical test is simple: can the method produce a per-drive record showing it ran, completed and was verified? A factory reset can't. That's the difference between tidying a drive and being able to tell an auditor what happened to it.
No. Degaussing erases data by disrupting a magnetic field, and solid-state drives store data in flash memory cells with no magnetism involved. Running an SSD through a degausser leaves the data completely intact. SSDs must be cryptographically erased, overwritten with a method appropriate to flash, or physically shredded to a fine particle size.
For a working drive, a verified wipe to the NIST SP 800-88 standard is widely accepted and has the advantage of leaving a drive you can resell. Shredding is the right answer when the drive has failed and cannot be verified, when the data is highly sensitive, or when your own policy or a client contract requires physical destruction. The two are both legitimate; the choice depends on risk tolerance and whether the asset is worth recovering.
Often, yes. A factory reset or quick format typically removes the file index rather than the underlying data, and freely available recovery tools can retrieve a great deal of it. For a business disposing of equipment that held company or customer information, a reset is not sufficient. Use a tool that follows a recognised sanitisation standard and produces a verification record, or destroy the drive.
Crypto-erase applies to self-encrypting drives, where everything written is already encrypted by the drive itself. Instead of overwriting every block, the drive's encryption key is destroyed, which renders all the stored content unreadable. It is fast, works well on SSDs where block-level overwriting is unreliable, and is recognised in the NIST SP 800-88 guidelines. It depends on the drive genuinely supporting the feature and on the key being properly destroyed.
Yes. SF IT Recovery provides on-site shredding across South Florida, which means drives are destroyed in your building while your staff watch and nothing readable leaves the premises. For larger jobs elsewhere in Florida we travel. Either way you receive a certificate listing every drive by serial number.
Send us your asset list and get a clear offer within one business day. Free pickup across South Florida, statewide for larger jobs.