Why data destruction needs proof
Retired laptops, servers and storage arrays often still hold customer records, credentials, financial data or protected health information. Deleting files or reformatting a drive does not remove that data, and regulations such as HIPAA and GLBA expect you to show how it was destroyed.
AVM places a high value on data security and chain of custody. Every data-bearing device is identified by serial number, processed with a method that fits the media and your policy, verified and documented. The result is a record you can match line by line against your own inventory.
What's included
- Serial-number captureEvery drive and data-bearing device is logged before processing.
- WipeOS certified erasureThe disk sanitizing solution used by financial institutions, major healthcare systems, universities and the U.S. Department of Defense.
- Permanent physical destructionFor drives that cannot be securely erased, fail verification or fall below resale grade.
- All storage mediaHard drives, SSDs, USB drives, backup tapes and drives inside or outside their devices.
- Secure quarantineEquipment is isolated in a controlled area until data is removed.
- Certificate of destructionIssued by serial number and available in the client portal.
How it works
- 01
Secure receipt
Devices arrive under chain of custody and go straight into secure quarantine. - 02
Serial audit
Each device is logged by serial number, make, model and media type. - 03
Method selection
Clear, Purge or Destroy, matched to the media and to the requirements you set. - 04
Erase or destroy
Media is wiped with WipeOS and verified, or permanently destroyed by a physical method. - 05
Certify and report
Your certificate of destruction and asset-level report are posted to the client portal.
Standards: NIST SP 800-88 and DoD 5220.22-M
NIST Special Publication 800-88, Guidelines for Media Sanitization, defines three levels of sanitization. We select the level based on the media type, whether the device will be reused, and the requirements in your data security policy. Erasure is performed with WipeOS, and every result is recorded against the device serial number.
| Level | What it does | Typical use |
|---|---|---|
| Clear | Overwrites user-addressable storage to protect against simple, non-invasive recovery. | Devices staying within a controlled environment or being reused. |
| Purge | Uses physical or logical techniques that make recovery infeasible even with laboratory methods. | Devices leaving your control that will be remarketed. |
| Destroy | Physically destroys the media so it cannot be used again, for example by shredding. | Failed, damaged or high-sensitivity media, or when policy requires it. |
What you receive
- Certificate of destruction listing every serial number processed, the method used and the date.
- Asset-level report with serial, make, model and media type, in the client portal.
- Chain-of-custody records from pickup through final disposition.
- Verification comments so you can confirm how each wipe was performed.
Frequently asked questions
A verified NIST SP 800-88 Purge makes data recovery infeasible and lets the device be reused, which supports value recovery. When your policy requires it, or the media is damaged or cannot be erased reliably, we destroy it physically. Different asset groups in the same job can follow different methods.