You'll see “NIST 800-88 compliant” on every disposal company's website, ours included. It's worth ten minutes to understand what the document actually says, because it is more flexible than the marketing suggests — and because it puts the decision back on you.
Each level makes recovery harder and leaves you with less. The standard's own logic is to choose the lowest level that matches the risk, not automatically the highest.
Overwrite the data using the device's normal read and write commands, so it can't be retrieved with ordinary software or by a normal user. A standard full overwrite of a hard drive is Clear.
Use the media's own built-in sanitise commands, or destroy the encryption key on a self-encrypting drive, or degauss magnetic media. The aim is to defeat recovery even in a laboratory with the drive opened up.
Physically ruin the media so it can never be used again: shredding, disintegration, incineration. Hard drives need a relatively coarse shred; flash media needs a far finer particle size.
The standard is as interested in proving sanitisation happened as in the sanitisation itself. It expects verification of the result and a record of what was done — the media, the method, the date, who did it, and the outcome.
This is the bit that separates a company genuinely working to the standard from one that has read the name of it. Ask what the verification step produces. The answer should be a per-drive record with a pass or fail, not an assurance that the process is reliable. That record is what ends up on your certificate.
It also explains why a failed drive is always destroyed rather than wiped. If a drive won't respond, no overwrite can be verified — so under the standard's own logic, the only defensible option left is Destroy.
| Situation | Level | Why |
|---|---|---|
| Laptop reissued to another employee | Clear | Stays inside your control |
| Working drives sold or sent to an ITAD | Purge | Leaves your control, asset worth keeping |
| Self-encrypting SSD being resold | Purge (crypto-erase) | Fast, and right for flash media |
| Drive that won't power on | Destroy | Nothing can be verified |
| Regulated or highly sensitive data | Destroy | Policy usually demands it |
| Equipment returning off lease | Purge | Must stay functional for the lessor |
It is a publication from the US National Institute of Standards and Technology giving guidelines for media sanitisation — removing data from storage media so it cannot be recovered. It defines three levels of sanitisation, Clear, Purge and Destroy, and sets out how to choose between them based on how sensitive the data is and where the media is going afterwards.
Clear overwrites data using the device's normal commands, defeating ordinary software recovery, and suits media staying within your organisation. Purge uses the drive's built-in sanitise commands, cryptographic erase or degaussing to defeat laboratory recovery, and suits equipment leaving your control that you still want to be usable. Destroy physically ruins the media by shredding or similar, and is used for failed drives and the most sensitive data.
No. It is a guideline, not a law, and it was written for US federal agencies. It has become the common reference point for commercial data destruction because it is practical and widely understood. Various regulations require you to dispose of data securely without naming a method, and following NIST SP 800-88 is a recognised way to show you did.
Not in the sense people often mean. There is no NIST certification scheme for it, so no organisation can hold a NIST 800-88 certificate. A company either follows the guidelines or does not. Certifications that are audited, such as R2v3 or NAID AAA, are separate schemes that reference sanitisation practices among many other requirements.
No. The standard explicitly treats Purge, which leaves the drive usable, as sufficient for most equipment leaving an organisation's control, provided the result is verified. Physical destruction is reserved for media that cannot be verified, such as failed drives, and for the most sensitive data. Destroying every drive by default is a policy choice, not a requirement of the standard.
Send us your asset list and get a clear offer within one business day. Free pickup across South Florida, statewide for larger jobs.