Erasure or destruction: which drives go where
Most drives in a decommission are either wiped and reused or destroyed. The choice decides what evidence you'll need at the end of the job.
Applies toUnited States
By Nabel Solutions · Published October 22, 2026 · Last checked October 22, 2026
Most drives in a decommission end up on one of two paths: wiped and reused, or destroyed. The choice decides what evidence you’ll need at the end.
| Question | Points to erasure | Points to destruction |
|---|---|---|
| Does the drive power up and complete a verified wipe? | Yes | No, or the wipe failed |
| Does the client’s policy allow reuse? | Yes | No: some contracts and some government rules require physical destruction |
| What sanitization method does the data need? | Clear or purge is enough | The policy calls for destroy |
The three methods, in NIST’s words
NIST SP 800-88 Rev. 2 (September 2025, replacing Rev. 1) sorts sanitization into three methods: clear, purge and destroy. For a working drive, a verified clear or purge can be enough, and the drive can be reused. Rev. 2 doesn’t list techniques for each kind of media; it points to IEEE 2883 for those.
Destruction isn’t automatically the strongest answer. NIST says a device isn’t considered destroyed unless recovering its data is “infeasible using state-of-the-art laboratory techniques” (§ 3.1.3). And on the two techniques most ITAD operators use, it’s direct: “Pulverize and shred techniques for ISM should be avoided for anything but the lowest security categories of data” (§ 3.1.3). Shredding is still the right answer for a great deal of media; it just isn’t an answer on its own for the most sensitive data.
Drives that fail
A drive that powers up but fails the wipe is usually listed in the erasure report with its serial, then sent for destruction. A drive that won’t power up can’t report its serial at all. Those drives, and anything that goes straight to the shredder, are where the record depends on someone reading the label.
The record on either path
Whichever path a drive takes, NIST asks a certificate of sanitization to record the same things for each device: among them its serial number, the method, the tool, how it was verified, and who verified it (§ 4.6). On the erasure path, the erasure software usually supplies the serial. On the destruction path, someone has to.
Serial Xtractor reads it from the label. It picks the right serial on 97.7% of labels it can read (209 of 214 readable labels out of 241, five-fold cross-validation, on our bench) and matches it against the client’s asset list. That gives the certificate its serial and its match; the method, tools and verification still come from your process.