Data Erasure Services (Onsite & Offsite)

CloudBlue begins the data erasure process with a diagnostic test to determine the condition of the asset. Hardware functionality is tested, capturing information regarding the main memory, processor, motherboard, pointing devices, display, floppy drive, keyboard and a hard drive S.M.A.R.T. test. In addition, all software license information is retained for harvesting. Hard drives then undergo the overwrite process.

To ensure that hardware is safe for reuse, CloudBlue’s standard data overwrite process includes a 3-pass data wipe compliant with the U.S. Department of Defense 5220.22-M (drives are overwritten with 1s, 0s and randomly) followed by a random sector verification. Drives that identify even one bad sector or fail the overwrite process are removed and physically shredded (onsite or offsite) and the media device serial number, shred time and shred operator name are all recorded in our asset management system. Storage media can also be degaussed onsite and then shredded upon receipt at our facility.

For onsite Data Center data eradication services, CloudBlue developed the DataToaster™. This innovation facilitates the simultaneous wipe of fibre channel drives from multiple manufacturers, expediting the erasure process without sacrificing the quality of the overwrite.

A Certificate of Data Erasure and Destruction is furnished for each onsite service performed or shipment received. This legal document provides client liability protection and certification of full data destruction.

For other overwrite requirements, services are also available to meet the following standards:

  • Air Force System Security Instructions 5020
  • Bruce Schneier’s Algorithm
  • German Standard BSI / VISTR
  • HMG Infosec Standard No: 5, The Baseline Standard
  • HMG Infosec Standard No: 5, Enhanced Standard
  • National Security Agency 130-1
  • Navy Staff Office (NAVSO P-5239-26) for RLL
  • NIST 800-88 / ATA Secure Erase
  • NIST 800-88 Extended
  • OPNAVINST 5239.1A
  • Peter Gutman’s Algorithm
  • National Computer Security Centre (NCSC-TG-025)
  • U.S. Army AR380-19
  • U.S. Department of Defense (DoD 5220.22-M ECE)