Secure processing for data-bearing IT equipment
Data Destruction With the Right Evidence.
Choose the right method for the media, the right evidence for the risk and the right outcome for the equipment.
Verified Erasure
Where policy and media support it, secure erasure protects the data while preserving equipment for reuse and residual value.
Degaussing
Suitable magnetic HDDs and backup tapes can be processed with our SDD Master degausser, with serial-linked records to the agreed scope.
Physical Destruction
Where policy, contract, media condition or risk requires it, storage media can be physically destroyed with agreed evidence.
Start with the media
Choose the right destruction method.
Different storage technologies and project requirements need different methods. We agree the route before processing begins.
Secure Software Erasure
A controlled erasure process for supported storage, with verification evidence agreed to the project scope. This can preserve usable equipment.
Degaussing
SDD Master degaussing for suitable magnetic HDDs and backup tapes, with serial-linked cycle records. Not suitable for SSD, NVMe or flash storage.
Physical Destruction
Used where policy, contract, media condition or project risk requires physical destruction, with the agreed audit evidence and responsible material routing.
Documented degaussing · equipment and evidence
A named degausser.A serial-linked record.
Bioteknik uses a VS Security Products SDD Master, a model listed on the NSA/CSS Evaluated Products List for Magnetic Degaussers.
For suitable magnetic hard drives and backup tapes, our degaussing records capture the media serial, treatment time, equipment details, magnetic-field reading and recorded result. That links the processing record to the individual medium, rather than just a batch total.
Magnetic media only. Degaussing is not a treatment for SSDs, NVMe flash storage or phone memory. The media and required outcome determine the method.
The listing applies to the equipment model, not certification or endorsement of Bioteknik. Supported-media limits and processing conditions apply.
Agree the reporting scope before collection. Where included in Level 3, serial-linked degauss files can be provided through the client area following the required review and release checks. They supplement the asset record and completion certificate.
Illustration only · not a client report
Inside a degaussing record
- Media serial number
- [individual media serial]
- Treatment date and time
- [recorded cycle timestamp]
- Degausser model
- SDD-MASTER
- Machine serial / firmware
- [recorded equipment details]
- Cycle counter
- [recorded cycle count]
- Magnetic field (gauss)
- [recorded field reading]
- Result
- [recorded cycle result]
Example fields, not evidence that any item has been processed. A processing log supports the audit trail; it is not the final project certificate.
What the equipment listing covers
The July 2026 NSA list names VS Security Products — SDD Master on page 2. Its HDD scope is limited to manufacture in 2024 or earlier; HAMR and hybrid drives are outside this magnetic-only route. Supported tape formats are listed individually on page 5.
For a process specified to those NSA requirements, HDD degaussing must be followed by physical destruction deforming all platters. Fit, media compatibility and continued equipment verification also matter. A model listing does not establish the present condition of an individual machine or approve a whole service.
The NCSC storage-media guidance likewise calls for checking degausser capability against the actual magnetic media. SSDs, NVMe flash, USB flash and phone memory need a different sanitisation or destruction route.
Equipment-model listing checked 17 September 2026; source edition July 2026. Scope and equipment condition must be reviewed for each project.
The Bioteknik Assurance Pyramid
Increase the evidence—not the confusion.
Select the documentation and audit depth that matches your policy, risk and reporting requirement.
Clear, documented processing
For routine secure IT retirement where a clear process and completion certificate are required.
Stronger visibility of the processing method
For projects requiring clearer chain-of-custody records and an additional audit of how the media was processed.
The deepest available device record
For higher-assurance projects requiring detailed evidence for each supported data-bearing asset.
A controlled journey
From requirement to final report.
Each project follows a defined route, with the method and evidence agreed before the equipment is processed.
Define
Confirm the equipment, risk, method and evidence requirement.
Collect
Use the agreed access plan and collection documentation.
Audit
Identify data-bearing assets and record serial numbers to scope.
Process & verify
Apply the selected method and create the agreed evidence.
Report & route
Complete reporting, then reuse, recover or recycle.
What you receive
Evidence built around the project.
The reporting depth follows the agreed scope. Routine projects remain straightforward; higher-assurance work can add deeper audit and device-level records.
Asset & Chain-of-Custody Records
Depending on scope, this may include an asset register, serial-number records and collection or chain-of-custody documentation.
Processing & Verification Evidence
Method records, device-level erasure output where supported, degauss records or a destruction-point audit where specified.
Certificates & Completion Reporting
A Certificate of Data Destruction, applicable waste documentation and a tailored completion report matched to the project.
The exact deliverables are agreed before collection—so you know what evidence will be returned.
The right outcome
Secure does not always have to mean shredded.
Data security comes first. The equipment outcome then follows policy, condition and the agreed project requirement.
Verified erasure can protect both data and value.
Where policy permits and verification requirements can be met, erasure can keep usable equipment in service and preserve residual value.
Physical destruction remains available when required.
Where policy, contract, media condition or project risk requires it, storage media can be physically destroyed with the agreed audit evidence.
Process before departure
Need the media processed before it leaves your site?
Onsite destruction is available where storage media must be processed before leaving your premises.
Processed at Your Location
The agreed storage media is processed at your premises before it leaves site.
Witnessed Where Required
Authorised staff can witness the agreed process where policy or risk calls for it.
Evidence Matched to Scope
Asset records, method documentation and a completion certificate follow the agreed onsite requirement.
Prepare managed devices
Data destruction and device offboarding are separate tasks.
Secure erasure addresses stored data. Management and activation controls must also be released if equipment is expected to be reused.
Remove Management Controls
Release Intune, Windows Autopilot, Apple Business Manager, Jamf, Knox, Google and other applicable controls before collection.
Prevent Re-enrolment
A wiped device can still return to an organisation’s management environment if enrolment and activation restrictions remain.
Avoid Delays
Correct offboarding helps prevent additional administration and gives reusable equipment the best chance of a productive second life.
Clear answers
Frequently asked questions.
Select a question to see the answer.
Do you have to destroy the whole laptop? +
No. In many projects only the data-bearing storage media needs secure treatment. Where policy permits, verified erasure can preserve the complete device for reuse. Physical destruction remains available where it is specifically required.
Is software erasure secure enough? +
It can be when the media supports an appropriate erasure method and the verification evidence meets your policy. The suitable route depends on the storage technology, condition, risk and required documentation.
Do you provide a Certificate of Data Destruction? +
Yes. A completion certificate is provided as part of the agreed service, alongside any additional asset, processing or waste documentation included in the project scope.
Can you provide a serial-number register? +
Yes. Serial-number capture and an asset register can be included where required. The depth of the audit should be agreed before collection so the work and reporting match your needs.
Are HDDs and SSDs processed in the same way? +
No. Storage technologies behave differently. Degaussing can treat suitable magnetic HDDs and backup tapes, but not SSD, NVMe or flash storage. We match the method to the media and required outcome.
Can destruction be completed onsite? +
Yes. Onsite processing is available where media must be treated before leaving your premises, including witnessed projects where this forms part of the agreed scope.
Do you physically destroy media after secure erasure? +
Only where policy or the agreed project requires it. If secure erasure satisfies the requirement and the equipment remains suitable for reuse, unnecessary physical destruction can remove useful residual value.
Related Knowledge Centre guidance
Prepare clearly. Choose confidently.
Tell us what you are disposing of—and what evidence you need.
Send the approximate quantity, equipment type, location and any specific destruction or reporting requirement. We will confirm the appropriate route.