SANITIZE

CertifiedNIST SP 800-88 Rev. 2 · DoD 5220.22-M · IEEE 2883

Our Team

Four groups of people, and the controls they work under when they are standing in your server room.

Erasure is not a single job either. Deciding what a drive needs, going to the site and doing it, checking that the paperwork satisfies the regulator, and taking apart a storage array without breaking the tenant next to it are four different kinds of work.

The controls below matter as much as the credentials. When someone is on your floor with access to hardware that still holds your data, what they are allowed to do and what is recorded about it is the part that protects you.

What Goes Wrong

The Risks This Removes

Lead Forensic Engineers

Firmware-level purge, cryptographic key destruction and raw sector verification across enterprise storage. They decide what a given device actually needs, which is rarely what the policy names.

On-Site Field Operations

Deploy to offices and data centres with mobile erasure rigs. Barcode intake, witnessed degaussing and shredding where a drive cannot be wiped.

Compliance and Audit Officers

Check that the serial manifests, the post-wipe read-backs and the certificates satisfy what the customer's own regulator asks for before anything is signed off.

The Controls on Site

  • Background verification, address checks and character references before anyone attends a customer facility.
  • Binding non-disclosure agreements covering client intellectual property, trade secrets and customer records.
  • Continuous custody logging — numbered tamper-evident seals photographed and catalogued at every transfer point, with bodycam or client CCTV recording where the site allows it.
  • Dual-control sign-off on high-security runs: the lead technician and the customer's own validator both authenticate the final report.
  • Storage architects handle SAN, NAS, RAID and high-density NVMe de-racking so that wiping one tenant does not touch another.
Questions

Frequently Asked Questions

Who actually turns up on site?

Field operations engineers with the rigs, led by whoever scoped the job. For anything involving an array, a storage architect comes with them.

Can we see the verification before you attend?

Yes. Background verification and NDAs can be confirmed in advance, and many customers make that part of their own supplier onboarding.

Can we record the work ourselves?

Yes, and we would rather you did. Client CCTV, your own photographs of the seals, your own check of the serials — none of it is a problem, and all of it makes the record stronger.

Who signs the certificate?

The operator who ran it and the person who approved it are both named on the document, alongside the organisation the asset belongs to.

Tell us what you need

Book Someone to Come and Look

Tell us the site, the media and the deadline. Whoever would run the job is who you will talk to.

Read the Standards

Goes straight to our engineers. No newsletter, no call centre.